last executing test programs: 15.987372052s ago: executing program 1 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_freeze_timeout', 0x149a82, 0x1d2) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r5, &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket(0x27, 0x5, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.435171415s ago: executing program 0 (id=183): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty20(0xc, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x620301, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 14.395664658s ago: executing program 1 (id=191): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000153000/0x4000)=nil, 0x4000, 0x5, 0x8031, 0xffffffffffffffff, 0xffffc000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000009b8500000000000000008500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102373, 0x18fe5}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0, 0x18}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x80a3000, 0xeeef0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000a06000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="400f01c366b815010f00d826d10b66ba4300edd32266b856000f00d8653e0f07360fc7342f660f79e00f380bc2", 0x2d}], 0x0, 0x42, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600141e000000120800040043000000a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r9 = memfd_create(&(0x7f0000000380)='fuse\x00', 0xf) lseek(r9, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x401070c9, 0x0) 14.008412651s ago: executing program 3 (id=194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028009001400aaaaaaaa"], 0x48}}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @scatter={0x8, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000440)=""/243, 0xf3}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f0000000700)=""/116, 0x74}, {&(0x7f0000000780)=""/221, 0xdd}, {&(0x7f0000000880)=""/236, 0xec}]}, 0x0, 0x0, 0x0, 0x10055, 0x0, 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001900010000000000"], 0x30}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x444341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 13.073441197s ago: executing program 0 (id=195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028009001400aaaaaaaa"], 0x48}}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @scatter={0x8, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000440)=""/243, 0xf3}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f0000000700)=""/116, 0x74}, {&(0x7f0000000780)=""/221, 0xdd}, {&(0x7f0000000880)=""/236, 0xec}]}, 0x0, 0x0, 0x0, 0x10055, 0x0, 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001900010000000000"], 0x30}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x444341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 12.986877904s ago: executing program 3 (id=196): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@setlink={0x68, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x3}]}}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0xe, 0x7, @loopback}]}]}]}, 0x68}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000280000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="643e0f20def3a7650fdf08670f01caf0838ddb000abad104ed66b8000000000f23c80f21f866350800e0000f23f80f20e06635ae4000f30f22e0362e360f21976737", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x103000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.272870695s ago: executing program 4 (id=199): ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000040)=0x6) 12.167015465s ago: executing program 2 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_freeze_timeout', 0x149a82, 0x1d2) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) lseek(0xffffffffffffffff, 0x100, 0x2) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r5, &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket(0x27, 0x5, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_io_uring_setup(0x47e9, &(0x7f0000000240)={0x0, 0x4284, 0x2, 0x0, 0xbe}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{&(0x7f00000002c0)="3484797b740416d7d45cd2d7af9795596cdb42b8773fe5ce224761dc93de87a5225f9c87a3cab765767a5b835efb31a530ef642bbe79b5769afcaebbca99ee9e5cbaa1616f906aef6e50ba5de4470db5df8e42d61fd3be1896", 0x59, 0x3}, {&(0x7f0000000140)="9da45c593482b435aa93b7cf14976dc6b42e159017471f09f68230935e225a881d3ad01a393deff4df8f7909b5f8e53ba4dd1e46ac281d6b8db7", 0x3a, 0x3}]}, 0x2, 0x3}, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x102, 0x0) 11.864386062s ago: executing program 4 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x1) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0/file0\x00', 0x1000) fanotify_mark(0xffffffffffffffff, 0x1, 0x8001014, r1, 0x0) 10.919391206s ago: executing program 2 (id=202): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007100000000000000029"], 0x30}, 0x0) 10.899801917s ago: executing program 4 (id=203): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd01070101010905010220"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001380)={'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x62, @lang_id={0x0, 0x3, 0x804}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000013c0)="10", 0x1) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000001240)='net/wireless\x00') preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)={0x80, 0x2, 0xc8, 0x40}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000117601"], 0xd8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x694b, &(0x7f0000001280)={0x0, 0x3396, 0x2, 0x1, 0x3bf, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000140)) io_uring_setup(0x7e03, &(0x7f0000001300)={0x0, 0x6f01, 0x10, 0x1, 0x307}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0xf8) 10.858578559s ago: executing program 3 (id=204): unshare(0x28000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) shutdown(r2, 0x0) sendfile(r2, r3, 0x0, 0xdc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[@ANYBLOB="147d5d905468e970e4717c1bfe1d658c95468f8c5c4860969efd", @ANYRES16=r5, @ANYRES16=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 10.199568846s ago: executing program 2 (id=205): r0 = open(&(0x7f0000000080)='./bus\x00', 0xe0f42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9fab010018000000000000001c0000001c000008000000060000000000000f0200000000ef00000002000000e0cb0000000000000e0000"], 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) membarrier(0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x25, 0x10, @val=@netkit={@void, @value}}, 0x1c) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x7040, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) mount(&(0x7f00000007c0)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='udf\x00', 0x8020a0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="66bad004ec66baf80cb8e44eda8def66bafc0cb886e90000effdd93ac744240000980000c74424029100c0fe0f01cb0f011c24c74424002b010000c74424020d000000ff2c243e65f3420f0936262626460f01cf260f01c966b8e7008ec867d9e9", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000240)={0x190003, 0x0, [0x8, 0xc24c, 0x0, 0x8, 0x8, 0x4e4, 0xe30351e, 0x5]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00?\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.128210282s ago: executing program 0 (id=206): ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x6, 0xed7d, 0x8001, 0x4, 0x6, 0x3, "4c37528cc9ee4f335c51a890f456d033", 0x3, 0xd, 0x3, 0x9, 0x1, 0xc0, 0x1}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x4eb800, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000340)={{r1}, r2, 0x10, @inherit={0x78, &(0x7f00000002c0)={0x0, 0x6, 0x5b38, 0x4b46, {0x10, 0x1000, 0x5be, 0x8, 0x81}, [0xa, 0x0, 0x5, 0x2, 0x0, 0x8000]}}, @name="98758144650da1412d4646f4a02b72460a46d051da762aec8ce4d1ce87a1a18367eb448f018e8e6f0b611e2b834d49384126ddaf88c6a64b66dfaa800af7e1ce95484a31fdb0d737687b352699eb658a15a7bae5656c1b75cef933c2681de5d4c65feb104699dc40989bad4649c11de13b5e5bbb0222be61147f7df6c2228e5cbc77cd29c0d9db3f51e035da4df5a3cfe2ef403899a5e6627fc05bfd9d094c323feea1a28dc3cb75046386cdb3c469bd159fc08122d35ff2cd04359eea2ea5191eed8fd73b3bb194b072ced8f8271dc7f67b32f4da9288023d266ba227d0d9ce4e8e3a33f760013bfa11c4837837dc712d10488f97804f80e114e662561697c56376e471261902b6003154f1b93597c59accce2a2b7e30b03c902b129a39fe0f5b049ebf8f73eb8dfce4898a1be651a3f8f58eb2832007aa6c2b89472ca1c8ddc7ff7da0dd8ead9fbe624a12e06e9a737920a6a1af4d7b9fd2125a46c2ce7e6703c7a8edd1b8a3e4e5ca3eb00fe3a052020bacc60a81988fe233e1907027dcffa4d2320f28f30f72ad4bd20ac0b172c2b80d205e1d17a90fcfaf0bec227ccb2c1e0eb96304c1d2c879329fa98ae4223cf3ad52883f32cbee02b4189556291019d0358421b90622744eb8160b1d9311172c04b639a2e4574cd813c5c460691694c2840caa3f83681887cdee54e8b4a06db779a55dbd7914c6b283409f69e8e1598bacbd1846dd0a448f10a0fc403873c02526f680cb1c97ca26c210399dd576a9a026450a5bba89b254fee7c71e144a78628a4f00e3c7b91ef8022f67e3de010575f90179a3148f9a3c5d5b083ea226ee27f012f9cfce97b095573c505eb9af32e9fb650baf508ea8e61907fb71351489add3198364fca430c9b798c652b166073d469bae5598f0a3f0015f64deb95f1d258282bad6ce3e765157ccdc01a17f080a033e1d0ef54e128a04d5a4d78807e0d3d9f31fcf2037a0c2acf407c670b8e99bdebe98211c736389b0fb6156730b4b782bf08644786736f3ccafd82eabefcd8ef92d76127e23a82c0ded12b90439f88303bca64f26e5e8d9e3ca8c5e34e6e05c581b322188ef182a3951f364d2a5f7f84c2edfeca5d0d748c4af8b2be65191adb5fe31bb7cb1473df59a0861ba9d6c24d31b209ce4bcc7d9c0a00f97f7e399079cbd4661e403b330bc86a89ec04f2f16bd8899faf39470ae23c0b21fd66789650c623813d28598e1ea48f585f57f4affb726918adf00cb38112ba1346f446f8e4c93a9f65089a1155242b4aca4545ffdccf81ece5c425dcf7a488c06a697261da2235f49836efdd89b6aac4a9b15f928b0a5ee6a89952124e54a987356ef0aa87cc7c4d772051d6b005d04eb67c2bbf548a5c819baab56976b406c893372af1eaa3a197a53ea1482c5d66f89a16da7daaf584b8dbb8df25837f9108f843057073d66c16722ef5f1a788c55708070d98eaee05b65ed77f2cd42cea71d74ec762c7d6ee7e60f191e8f5fd0cc1e3cfe7e9663eea01512c9895b02b9fb72774f60f0317d5aa305fd4494c71588c338659a12adf97bc075abb537705cef908019dbdcd3d6ce77043723814f2001ea92968daf5b8c2d55ab9dab5af223e5cbfc9f1f7045c1824b149155c920d949b67ee8a6fadd4d7670b06e81a444ba2693aea9c958fe469c325ef77eba2b83872e2c95bf172f9bf32ee134035415ebc866facefef58dbc543ef9327b3a2be0bccd87e09ddec1ff2bc07ca3ced504c6afb5526eff0190f7fa600a5d9c57f7cf1f26e8509831a16511e8b8ca3c6c4ea2d71109a978aa19cc6740dccd17f62edcd19897650431fa5c35e29ec3b20c0e8053c5296a0cb84c460277d95101a2c8a4251b28c065a11d03b2604d460dea3f37fe780d0a8d78c3da001e38bbf596491573ffab70d263add7cd8189edd6275f5373bdaa19c1f32ee01b04af8dd5ef8863c0c1367812280ab3c37447dc80e830da4be83b244442ae8c48aa06f2daa0f5fa85a06968c4f28c655e6607db6a16693071419918f042b823ae5b73639e3e2aed59e6e3debf87e1984090c7cfa6a27bdda25d96b6facb7968afc5b37916ed9d0a71bee545ceb61c1f47333fc46b8d65cd142c12f76ee9716af67b491eb82118b9735309b16cccfaaec557a3672d16a083d5c5bd0f6e3a5400af9456b6a2d7d7fbed732703d228500737f0d5fdf2fd41c6502888a20d80f9bf34a8e8bc2eb269126bba87e45f555d1560bc2330e86ce3342e588ed7df0fdc367d064b62c8d3c0afc1a0e5b5e53cd00e67bcab2b132d9059a5f730037710c96f3eef71e8074eb4b4c4f42e84a770d38946087ca15b18bd308035aeaca59096f199d28e656cdfb8fdf988e6b9baa8314ea15b738f4edd5af06dfcefc959f570e60963634b70322bf2f4a9a7342b9d3c33e42407299b0f9a197dd900bfba925eaf0f45c7eb51f5c27cc735f423655558a6be5a635fd4081183d66d5d04b613779e6a5bc5958d8b66af839314b8f24c37e7dba6eacbc2fddb3e4c21fcd3096b1296e1244e2222599a27b2025b7d279dd6472e90c8590bb7c39f62e74225f960e5a446302351381dddfd94d8082580cf80247fb04bb691337919c7bd2987e6ef4c58766b1ac087e03b025b17a926098075ed1e36d087ce177598c0cb495e60ff08374e448ac322410a61f23c5d3435716cff52ddb223f416ce077aee5e3b3cf4b6d6001f597d4424bde34ca9f5134ec2944852e6189b50ab17b775079373327d82326cda16682697f3cdf0186dc22c07cd3d6892513973cf869fb09ec26927597e583893b2dc1824725adbb45213e7c4452124562148d381d00e650359396614e2a051c44d3e00c90297233fd621f74279d504723730abf7bbd7f11cab04fbaa6fe6434f0a8909edea352530ffbc5aeb035226a9f3f5c49d363c8549b85649a006860de10adf47a9c2345e472d11dc157f2cd785f58ede9deaf129a6cf770ff13a77a0c9cf03d8a9ecec6dd16e9554e09e12af19d248d7276411c8182617615e80258274ed735ea513620ce8cf1b86b0073f2824427cc063085a897ade6bb52e30a1a73a9ae1d65e2939c202d3bd909a091793245042e92759eb3bdb80d4232af9124f9d48e16f105bd9575bbc78af028ceaef18062a96b6f198c5211be4d2f6770c2dd97a598827844b93de236ad9fbe2c460b4350df5d654f38f8a60f7a37db6dff3b2bc8d278b7fc9974bbd13e1986284fbc4549b1c5aba7094130930176729823967bea762d6eaaf819850d6a237dd540b4a78a598a407680f26efba4eb89b1398ee9444ea871afe71796d1eaba147c4e07041dee7592c98a2bb4ce32454b3ea889c1a8319444d6d853e5ec2c347d9161d8b959100b4e8390e6aa4780166778036fe3bf5a1714f161423964eb537a5afb64bcef92a2245754a4f0ec97b6c544d704b757a9a9d619c3292a05f3a3653b052f2f02c154f78f0f7ec8ab9addcf27f82ade4d7222529b402e5028a55991818481f2417f9e4a91ca5a1b91c78b83adb2e79dc286ba017e4d4225650563ff5c9eae0fd6f6f572fff39f1195f5e90d1e3e4ba317931b2baa19d859dafba37c608c50c4e0c393f42f4d02abfef9164cbcf5e112d7a330f27aa8801d53637e4a591148aa13177e9759a4e43017730209016e7bd2791c90bffe31c6139d67e94dabf6ab93767c6bb957f02cbb3d3328e4198892eaf41a8eaf050d878dd44259d29b85cbfcdc67bd51c3e8a30435a6c332d1d6528149e7febe90e690e26ff6304b99e292af30092d8add45fcc79dfeebbbdb391c02a16a2ed56a3bd7860eadffa992cd365d95418848f8b420209af5075adf37a21f6c9d5013ce5c16581de9a4befa19855f6bbff8637f1cc29fc63e8d6be9a8d369283bd0c47b50475bc40cd7ff862ff70f69c8c73faa15eb38d0b7e87e09d0384c2d3ce9891f2010cafa9fa67a7640734fd1ba18a9df57c1e5ac1d9b34915a60eedbd1d94199a508da36ff21d4ebae8653bc33124a7edcba4e5a82caef1d36b8fe42a59fc34097971aeda7312e5f1ca1dca1c681eff8f6d7d58dd543573cd7226475ff245852ccabfdf956c95123d5cddc9cb9b625a8463e1a8f5ac4f1f631f1a672f9d65859dd7db07e59149873867ddceac438653f83558c874b7fe18518dbd6fdd87acd61f4ecceb258036809e24d29f116fce86f85f095b843e92e521c9ede9f39965f214c9a1c4ccf62a8bcb7f0fb3f77dbe3b4b4f65de824411cc25a0d44a972c4f9d4b156377b19b8e8574e65b2fbda503829204123e38ac22cc69ad75ea913aed102d34fe12c842d1383390f4b0d723468988de8cc65c86ede72a12ec0c1f41ca3ea0db7fa8af5af2cc9235cb26e7a2c6b0be3b09aa1b282cf97d34c48da76449087c0f21f43ce72278dbb469fe538188fb6dfb92d10d6a44f5caabfc97fbcf22c09c140b2c13151a3e39dac033809e353a56578aaf70f93764714f8a58fcdac30de2853918e0da51e134eec14bdf181200d3e1d953370622606ff58e6f98b842696f596f2f470992be820bc42535991d2bd9eb01a01eb3c2ce09ccd31347fc5f1e5e713d4e8122684a41e196b464c9b5a47d450cfb30ff2447f0f393ae32e266cda45975644187feb0f55093d5dd6fda23fd188e42666d594116351171d1aafca7400a65fc1d33454fa0ce87c90315ca78522f3dae633defc5b25487be86d9602c4bed606a60a8758f807f08a80ca678bc0bc9d7e29086198c59c8c74ee4f3ea7cb433f749779a208ef8ee2b601a1b5feb67309d2d73c4c8c07c5f773ccdec127afd7aaa3ccb7512a9fdfea81838866c183dba6fcd06c75e30e448c77e5015b7cf8ae3fbf9a18e48f24dd68b4e8a2182b0d9876be1448fcb254dc3d2eba4db4d1c79458fb4c64aec132a8cc0abd7b7b7d1d7edb24c837d7c5f30a95224187b1e4af699ca960db3c6ff2be7969eaeaa56e382401a33fad042cb6a5b48c651c94e537c584cf28d7a875dafcec240f1b9355e02fd22ea1c40a0503db3bf715d8a46fa71ca04b4c39cedf865e8d522e0a030f5074a66e93bb01867188db87b626808de42f3f40aa48ec9bb44c1077e3b4514ab7bb1cbe2af72759b2f55ca9fd45b44c4d16e41897e1e0b8e73b4f884f4e7767d81c67230f69a67893c6ed9bc9b082b8c1f6643667045fcfb5071104e6013769a59894007c3b85c3cbbea0bc85902c40df3bc621e27f893f165af6eae2017c5760a938d1622ce87c527116432b2d32afec0fb7ca8c86708a7dab6c1266c2dd6bb170c169c1f0a40b6be2724bc7afa7754e6e319c5629ebbb63af0ddd3c34db574a181483b904518374fb640937872b73969bb58fb0e4cb276ba2ca727df64ca223455ab84f8afdaf6533e3d5af83422a5b8712c6af4aefe225b02d8f40a7ab620e5736a2268856bf7c438fc1d1e40be8f674598e70ca3fb5948af411c44180d85244eee240ac9d5b9aed86f3a61a112b904f1160d6aae226aebc22ba80faf7f41dd60b0a7f6d75f21c38426ca2ff08eb687e6c38f633ce90758c437dcd265817ebc5d14a7a35f0bae4fd82f9627c03fc188b9f4a1b03847dcbcc392176ed2bfcfd7ca9ef3a44185ecba2dfe52a20b9479aa02dd05b1425c80b352727e4e11be912f5e28ef6c9128840751f38e127fa8d435c248e21131b43eb4673f5c42e712b40e55b01f8dc1cea0fe016e2de87b"}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000001340)={"cab5fa23", 0x8, 0x5, 0xc, 0x0, 0x3, "e91511b005fa926bbeb0e7710e2ecc", "7028c4ad", "78d52e85", "d7abc775", ["7892b84e6f66b5917592e692", "70407b9f91268488701861f3", "b627dc334e0afe601daa3388", "f10be1157444e4cfc50a98a7"]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000013c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x0, 0x0, {0xa, 0x6, 0xfff, @dev={0xfe, 0x80, '\x00', 0x30}, 0x800}}}, 0x32) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x16c, &(0x7f0000001480)={[{0x8f, 0x4e00, "45adf128d4e5b39db9519e5f76710db69ddff9e38b3c7d650593814cb6fbb3847adae797507e61297c0f9a812ca7cf630f8804ecddac31204ea327481fa982e93d259d662e02eb9abdee65d44d1eef4f1d7eae8dfc287d87de6bc529925db954f7b0b5a0df89f5392b7a8879c2c5cb1195163cb986e391d0e24d2d5963f59f3d03e876906476037df9b0db94fe06b5"}, {0x47, 0x4e00, "29f04ddb99d6dda13bd5ecb1d72d84b25260681260d572820a26c928df91b80ceef570ad886206523690c0395d2f7316f2f473f1efc04bf471d2937cc77de2e3c9d010fd03ac96"}, {0x88, 0x4e00, "21255d2669e17308f85b3a0d1968f84016dc5125adc814e24aa1ba52177a44e34b2a33bad89e6b1ed6cbd00f6419199c0d6d614ebf539ada279b2ab1ea64e015d152b1e9f05bc85c702942b42ce9f62d18889da98ac60323ae1d5a9860735b304d4fe86c03114b223d12418dcbbee11d43254a8ed76a645b65f503a9edb473f55373af51e8a44a40"}]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x400, 0x0) r9 = geteuid() lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, r7, {r9, r10}}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000001740), r11) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000001780)={0x3, 0x7f, 0x41, 0x2, 0xda, 0x3, 0x8, 0x0, 0x4, 0x0, 0x80, 0x2, 0x72, 0x4}, 0xe) r12 = socket$inet(0x2, 0x5, 0x100) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r12, 0x0, 0x61, &(0x7f00000017c0)={'filter\x00', 0x4}, 0x68) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001840)="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") r13 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001940), 0x8080, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001980), 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000019c0)={'bridge_slave_0\x00', 0x100}) syz_open_dev$MSR(&(0x7f0000001a00), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r12, 0x5000943f, &(0x7f0000001cc0)={{r13}, r14, 0x1, @inherit={0x70, &(0x7f0000001c40)={0x1, 0x5, 0x8, 0x9, {0x20, 0xd5, 0x26ab, 0x0, 0xff}, [0x5, 0x8725, 0xcc3, 0x3, 0x9]}}, @subvolid=0x42e}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000002cc0)={'\x00', 0x4, 0x1}) ioctl$VT_RELDISP(r8, 0x5605) 9.939438158s ago: executing program 1 (id=207): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000100000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x20040800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x200000100000011, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000003c0)={@private1, 0x800, 0x0, 0x3}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfffb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3f0e0}, &(0x7f0000000040)=0x8) listen(r4, 0x20000005) landlock_restrict_self(0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x24040040) socket$nl_generic(0x10, 0x3, 0x10) 9.105096199s ago: executing program 2 (id=208): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) close(r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}, @TCA_FQ_TIMER_SLACK={0xfffffffffffffe82}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf, 0xfffffffe}]}}]}, 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000940)=ANY=[@ANYBLOB="0000c477d9050d219d9b32808fbce4b857cbe06ea3a9d9e5", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186700000e00000000000000ffffffff"], &(0x7f0000000300)='syzkaller\x00', 0x10, 0xc5, &(0x7f0000000340)=""/197, 0x41000, 0x1, '\x00', r9, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0xc, 0x9, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x2, 0x1, 0x3}], 0x10, 0x5cde, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@generic={0xbf, 0x2, 0x2, 0x2, 0x7cf}]}, &(0x7f0000000600)='syzkaller\x00', 0x7a, 0x1000, &(0x7f0000001240)=""/4096, 0x40f00, 0x8d, '\x00', r9, 0x1c, r0, 0x8, &(0x7f0000000640)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x8, 0xb}, 0x10, 0x24719, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r5, 0xffffffffffffffff, r6, r0, r0, r0], &(0x7f00000007c0)=[{0x3, 0x2, 0x2, 0x1}], 0x10, 0xc7e, @void, @value}, 0x94) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x10, 0x110, 0xa}, {0x10}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$vga_arbiter(r11, &(0x7f0000000040)=ANY=[], 0xa) 9.027529986s ago: executing program 1 (id=209): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f0000002020400000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r2}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x7c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x41) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) read(r6, &(0x7f0000000180)=""/119, 0x77) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x891a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r3, r5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) 8.900596941s ago: executing program 2 (id=210): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2}, 0x3, 0x0, 0x1}}, 0xb8}}, 0x0) 8.501295283s ago: executing program 2 (id=211): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0x52, 0x41, 0x10, 0x182d, 0x269, 0x8d8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x78, 0x0, 0x1, 0x1b, 0x27, 0xde, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0x4b, 0x10, 0x6}}]}}]}}]}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_vif\x00') read$dsp(r0, &(0x7f0000000000)=""/137, 0x89) pread64(r0, &(0x7f00000002c0)=""/130, 0x82, 0x1400000000) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002300)='auxv\x00') read$FUSE(r2, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r3) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x8004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}}, 0x24}}, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000026c0)='.\x00', &(0x7f0000001500), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xe8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x0) 7.291620926s ago: executing program 1 (id=212): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a80100001500200028bd7000ffdbdf25ac1e0101000000000000000000000000ff0200000000000000000000000000014e224f1b4e20000402008000ff000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000de0003006465666c617465000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000b004000023ce3882c1dddacb5c97c72586bc2094cb527de9faa203b8b156b92a30356a753858695c05dce15cbad23a3cf8c231bb5d4044f1db1e8803dd026309fcd37c907c6b4bca18ce32167e4236fd9e7a3a037e16675abd93970366da680f6799a2742c", @ANYRES32=0x0, @ANYBLOB="0200000024001700020000002bbd700025bd700027bd70002bbd7000060000000400000007000000240017000200000026bd700026bd700027bd700026bd700029030000ff0f0000060000000c000f000a000000000000000a00100000000000000000000c000f000600000000000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) sendmsg$nl_generic(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x37, 0x1, 0x70bd2c, 0x25dfdbff, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 7.279679769s ago: executing program 3 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x1) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0/file0\x00', 0x1000) fanotify_mark(0xffffffffffffffff, 0x1, 0x8001014, r1, 0x0) 6.742430155s ago: executing program 0 (id=214): r0 = socket(0x10, 0x803, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0x4, 0xa, 0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x22020600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x2, 0xa}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x3, 0x8, 0x2, 0x1, 0x53a, 0x2}}, {0x8, 0x2, [0xfffa, 0x7ff]}}, {{0x1c, 0x1, {0xff, 0x2, 0x0, 0x2, 0x1, 0x1, 0x6, 0x6}}, {0x10, 0x2, [0x200, 0x7048, 0xc, 0x101, 0x2, 0xfc78]}}, {{0x1c, 0x1, {0xa, 0xc, 0x7, 0x0, 0x0, 0x1, 0xd, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0x1]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0xe4}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000060c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x40, 0x0, 0x4}]}}]}}]}, 0x44}}, 0x0) 6.662908845s ago: executing program 3 (id=215): r0 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xe, &(0x7f0000000000), 0x20000000) syz_usb_connect(0x0, 0x3f, &(0x7f00000029c0)={{0x12, 0x1, 0x200, 0x57, 0xa5, 0x4c, 0x40, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x81, 0x7, 0x20, 0x5, [{{0x9, 0x4, 0xc9, 0x1, 0x3, 0x3, 0x38, 0x79, 0x5, [], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x7, 0x70, 0xc0}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x0, 0x7, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x10, 0x3, 0x7}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setgroups(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r3, 0xd449f57160c92acb, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x60, r4, 0x1, 0xfffffffe, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000894}, 0x24008800) 6.186436841s ago: executing program 4 (id=216): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x408cd, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeefff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1c, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) 6.063621357s ago: executing program 0 (id=217): unshare(0x28000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) shutdown(r2, 0x0) sendfile(r2, r3, 0x0, 0xdc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[@ANYBLOB="147d5d905468e970e4717c1bfe1d658c95468f8c5c4860969efd", @ANYRES16=r5, @ANYRES16=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 3.500351171s ago: executing program 4 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) sendmsg$netlink(r4, 0x0, 0x0) 3.40292909s ago: executing program 3 (id=219): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="800000000802067c6211000001080211000000ea7629ffe5e000000000000000000000640001000006"], 0x2e) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) fsopen(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e9", 0xcf2}, {0x0}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c354", 0x55}, {&(0x7f0000002380)='L', 0x1}], 0x5}}], 0x4, 0xf000000) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 192.244624ms ago: executing program 0 (id=220): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$unix(0x1, 0x5, 0x0) dup(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='contention_end\x00', r2}, 0x18) shutdown(r1, 0x1) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0xc048aeca, &(0x7f0000000080)=ANY=[]) 191.902472ms ago: executing program 1 (id=221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c09021200010000000009"], 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 0s ago: executing program 4 (id=222): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc018}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000300000004000002041001"], 0x101c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xe4ffffff}}]]}, {0x2}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001400)=""/257, 0x101}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r6 = syz_open_pts(r3, 0x101) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000040)={0x3, 0xd, 0x7, 0x0, 0x12, "95d75a4e49f34705462a241692832a5f2be238"}) r7 = dup3(r6, r3, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="080064d02a780996", 0x8}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11}}], 0x28}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000180)=0xe3b) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.54' (ED25519) to the list of known hosts. [ 63.323513][ T5804] cgroup: Unknown subsys name 'net' [ 63.475455][ T5804] cgroup: Unknown subsys name 'cpuset' [ 63.483237][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.885800][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.516352][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.525440][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.533701][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.572059][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.582055][ T5819] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.589616][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.661698][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.675680][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.685057][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.703578][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.722445][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.744212][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.753025][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.762235][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.772193][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.781298][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.789021][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.791521][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.796641][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.804873][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.811514][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.820307][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.832346][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.832731][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.849866][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.851977][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.865422][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.878670][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.886829][ T5825] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.894356][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.299206][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 68.329302][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 68.387933][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 68.400741][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 68.488246][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 68.586290][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.594762][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.602354][ T5824] bridge_slave_0: entered allmulticast mode [ 68.609078][ T5824] bridge_slave_0: entered promiscuous mode [ 68.619924][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.629919][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.637547][ T5816] bridge_slave_0: entered allmulticast mode [ 68.647203][ T5816] bridge_slave_0: entered promiscuous mode [ 68.667374][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.674883][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.682477][ T5820] bridge_slave_0: entered allmulticast mode [ 68.689195][ T5820] bridge_slave_0: entered promiscuous mode [ 68.697525][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.705407][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.712724][ T5820] bridge_slave_1: entered allmulticast mode [ 68.719272][ T5820] bridge_slave_1: entered promiscuous mode [ 68.726847][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.734705][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.742147][ T5824] bridge_slave_1: entered allmulticast mode [ 68.748818][ T5824] bridge_slave_1: entered promiscuous mode [ 68.764203][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.771370][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.778910][ T5816] bridge_slave_1: entered allmulticast mode [ 68.786171][ T5816] bridge_slave_1: entered promiscuous mode [ 68.829174][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.836464][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.843872][ T5830] bridge_slave_0: entered allmulticast mode [ 68.850689][ T5830] bridge_slave_0: entered promiscuous mode [ 68.873148][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.885445][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.905444][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.914960][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.922565][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.929770][ T5830] bridge_slave_1: entered allmulticast mode [ 68.936865][ T5830] bridge_slave_1: entered promiscuous mode [ 68.975903][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.003155][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.012719][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.019870][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.027502][ T5821] bridge_slave_0: entered allmulticast mode [ 69.034998][ T5821] bridge_slave_0: entered promiscuous mode [ 69.054495][ T5820] team0: Port device team_slave_0 added [ 69.069756][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.084344][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.095777][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.105292][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.112758][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.119941][ T5821] bridge_slave_1: entered allmulticast mode [ 69.126808][ T5821] bridge_slave_1: entered promiscuous mode [ 69.144480][ T5820] team0: Port device team_slave_1 added [ 69.204240][ T5824] team0: Port device team_slave_0 added [ 69.223206][ T5816] team0: Port device team_slave_0 added [ 69.241031][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.252261][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.259778][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.285789][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.298455][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.305846][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.332423][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.346010][ T5824] team0: Port device team_slave_1 added [ 69.363708][ T5830] team0: Port device team_slave_0 added [ 69.370876][ T5816] team0: Port device team_slave_1 added [ 69.389637][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.414250][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.421234][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.447416][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.461410][ T5830] team0: Port device team_slave_1 added [ 69.508782][ T5821] team0: Port device team_slave_0 added [ 69.515795][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.523301][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.549537][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.569097][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.576149][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.602561][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.616852][ T5821] team0: Port device team_slave_1 added [ 69.627011][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.634248][ T5825] Bluetooth: hci0: command tx timeout [ 69.640341][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.666495][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.687827][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.694936][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.721419][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.750043][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.757276][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.783695][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.829351][ T5824] hsr_slave_0: entered promiscuous mode [ 69.837051][ T5824] hsr_slave_1: entered promiscuous mode [ 69.846837][ T5820] hsr_slave_0: entered promiscuous mode [ 69.856079][ T5820] hsr_slave_1: entered promiscuous mode [ 69.862679][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.870473][ T5820] Cannot create hsr debugfs directory [ 69.893001][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.899989][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.926046][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.938886][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.942128][ T54] Bluetooth: hci3: command tx timeout [ 69.946276][ T5819] Bluetooth: hci2: command tx timeout [ 69.951517][ T5826] Bluetooth: hci1: command tx timeout [ 69.957699][ T5825] Bluetooth: hci4: command tx timeout [ 69.962893][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.994248][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.060675][ T5830] hsr_slave_0: entered promiscuous mode [ 70.067424][ T5830] hsr_slave_1: entered promiscuous mode [ 70.076798][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.084453][ T5830] Cannot create hsr debugfs directory [ 70.107523][ T5816] hsr_slave_0: entered promiscuous mode [ 70.114575][ T5816] hsr_slave_1: entered promiscuous mode [ 70.120591][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.128293][ T5816] Cannot create hsr debugfs directory [ 70.176795][ T5821] hsr_slave_0: entered promiscuous mode [ 70.183769][ T5821] hsr_slave_1: entered promiscuous mode [ 70.193041][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.200612][ T5821] Cannot create hsr debugfs directory [ 70.525967][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.543665][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.569663][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.578531][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.588442][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.604159][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.622497][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.639284][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.696691][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.716308][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.729279][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.760554][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.769372][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.782227][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.817367][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.847700][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.884984][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.913491][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.925217][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.936511][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.044217][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.060788][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.099168][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.123265][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.144318][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.151750][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.161811][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.168911][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.194300][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.201433][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.214842][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.247748][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.254945][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.296051][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.318764][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.339962][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.347092][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.373742][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.393520][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.400641][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.433276][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.440405][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.490974][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.498251][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.530776][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.578377][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.598387][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.610177][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.643803][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.689718][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.696973][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.709719][ T5825] Bluetooth: hci0: command tx timeout [ 71.730963][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.738226][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.766162][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.979443][ T5820] veth0_vlan: entered promiscuous mode [ 72.022820][ T5825] Bluetooth: hci4: command tx timeout [ 72.025581][ T5826] Bluetooth: hci3: command tx timeout [ 72.028264][ T5819] Bluetooth: hci1: command tx timeout [ 72.039458][ T54] Bluetooth: hci2: command tx timeout [ 72.047867][ T5820] veth1_vlan: entered promiscuous mode [ 72.070298][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.107087][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.114192][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.114658][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.131503][ T5824] veth0_vlan: entered promiscuous mode [ 72.145327][ T5824] veth1_vlan: entered promiscuous mode [ 72.165957][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.253548][ T5820] veth0_macvtap: entered promiscuous mode [ 72.266398][ T5820] veth1_macvtap: entered promiscuous mode [ 72.284234][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.308494][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.334143][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.369180][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.389819][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.399177][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.408389][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.476341][ T5824] veth0_macvtap: entered promiscuous mode [ 72.499703][ T5816] veth0_vlan: entered promiscuous mode [ 72.548202][ T5816] veth1_vlan: entered promiscuous mode [ 72.556997][ T5830] veth0_vlan: entered promiscuous mode [ 72.580799][ T5824] veth1_macvtap: entered promiscuous mode [ 72.625264][ T5830] veth1_vlan: entered promiscuous mode [ 72.643351][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.654847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.668095][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.679563][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.694126][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.723479][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.737125][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.748626][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.768387][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.777323][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.786575][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.795478][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.820629][ T5821] veth0_vlan: entered promiscuous mode [ 72.829681][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.843873][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.905495][ T5821] veth1_vlan: entered promiscuous mode [ 72.920467][ T5816] veth0_macvtap: entered promiscuous mode [ 72.934267][ T5830] veth0_macvtap: entered promiscuous mode [ 72.951195][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.977390][ T5830] veth1_macvtap: entered promiscuous mode [ 73.008005][ T5816] veth1_macvtap: entered promiscuous mode [ 73.026842][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.037518][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.047476][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.058072][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.069735][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.083962][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.118156][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.135255][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.147460][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.159828][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.176657][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.188604][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.217800][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.228931][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.238116][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.246975][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.258632][ T5821] veth0_macvtap: entered promiscuous mode [ 73.272756][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.273806][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.291652][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.297191][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.309934][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.320946][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.332851][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.344236][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.355147][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.367113][ T5821] veth1_macvtap: entered promiscuous mode [ 73.381048][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.392815][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.403003][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.413781][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.424945][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.438287][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.450143][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.479929][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.489794][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.499204][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.508175][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.549253][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.570280][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.580840][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.592165][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.602314][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.613448][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.623593][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.638030][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.649587][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.695393][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.726795][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.747337][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.761236][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.774157][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.792213][ T54] Bluetooth: hci0: command tx timeout [ 73.806103][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.816446][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.827446][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.838603][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.931321][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.949729][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.960995][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.970374][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.004386][ T5914] FAULT_INJECTION: forcing a failure. [ 74.004386][ T5914] name failslab, interval 1, probability 0, space 0, times 1 [ 74.042978][ T5914] CPU: 1 UID: 0 PID: 5914 Comm: syz.2.7 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 74.053522][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 74.053538][ T5914] Call Trace: [ 74.053545][ T5914] [ 74.053553][ T5914] dump_stack_lvl+0x241/0x360 [ 74.053602][ T5914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.053622][ T5914] ? __pfx__printk+0x10/0x10 [ 74.053644][ T5914] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 74.053664][ T5914] ? __pfx___might_resched+0x10/0x10 [ 74.053692][ T5914] should_fail_ex+0x3b0/0x4e0 [ 74.053713][ T5914] should_failslab+0xac/0x100 [ 74.053739][ T5914] kmem_cache_alloc_node_noprof+0x77/0x380 [ 74.053758][ T5914] ? __alloc_skb+0x1c3/0x440 [ 74.053781][ T5914] __alloc_skb+0x1c3/0x440 [ 74.053805][ T5914] ? __pfx___alloc_skb+0x10/0x10 [ 74.053823][ T5914] ? smack_socket_getpeersec_dgram+0x1d0/0x410 [ 74.053852][ T5914] netlink_sendmsg+0x638/0xcb0 [ 74.053883][ T5914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.053913][ T5914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.053930][ T5914] __sock_sendmsg+0x221/0x270 [ 74.083159][ T4909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.084779][ T5914] ____sys_sendmsg+0x52a/0x7e0 [ 74.090748][ T4909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.096117][ T5914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.096138][ T5914] ? __fget_files+0x2a/0x410 [ 74.096156][ T5914] ? __fget_files+0x2a/0x410 [ 74.096178][ T5914] __sys_sendmsg+0x269/0x350 [ 74.096196][ T5914] ? __pfx_lock_release+0x10/0x10 [ 74.096224][ T5914] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.096265][ T5914] ? __pfx_vfs_write+0x10/0x10 [ 74.110000][ T4909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.111405][ T5914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.116095][ T4909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.120363][ T5914] ? do_syscall_64+0x100/0x230 [ 74.232225][ T5914] ? do_syscall_64+0xb6/0x230 [ 74.236917][ T5914] do_syscall_64+0xf3/0x230 [ 74.241422][ T5914] ? clear_bhb_loop+0x35/0x90 [ 74.246129][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.252141][ T5914] RIP: 0033:0x7fa62c785d29 [ 74.256575][ T5914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.276206][ T5914] RSP: 002b:00007fa62d68e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.284715][ T5914] RAX: ffffffffffffffda RBX: 00007fa62c975fa0 RCX: 00007fa62c785d29 [ 74.292689][ T5914] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 74.300657][ T5914] RBP: 00007fa62d68e090 R08: 0000000000000000 R09: 0000000000000000 [ 74.308627][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.316593][ T5914] R13: 0000000000000000 R14: 00007fa62c975fa0 R15: 00007ffc60c57808 [ 74.324571][ T5914] [ 74.332658][ T54] Bluetooth: hci3: command tx timeout [ 74.337869][ T5825] Bluetooth: hci2: command tx timeout [ 74.344113][ T5825] Bluetooth: hci4: command tx timeout [ 74.348553][ T54] Bluetooth: hci1: command tx timeout [ 74.654581][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.674142][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.717041][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.721306][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.771446][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.783214][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.811232][ T5923] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 74.823433][ T5923] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 74.835960][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.849975][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.858320][ T5872] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 74.862805][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 75.069698][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.084508][ T5872] usb 3-1: not running at top speed; connect to a high speed hub [ 75.110911][ T5928] FAULT_INJECTION: forcing a failure. [ 75.110911][ T5928] name failslab, interval 1, probability 0, space 0, times 0 [ 75.113715][ T5872] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 75.148319][ T5872] usb 3-1: can't read configurations, error -22 [ 75.155239][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.1.10 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 75.165798][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 75.175886][ T5928] Call Trace: [ 75.179210][ T5928] [ 75.182173][ T5928] dump_stack_lvl+0x241/0x360 [ 75.186895][ T5928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.192135][ T5928] ? __pfx__printk+0x10/0x10 [ 75.196766][ T5928] ? __kmalloc_noprof+0xb5/0x4c0 [ 75.201750][ T5928] ? __pfx___might_resched+0x10/0x10 [ 75.207086][ T5928] should_fail_ex+0x3b0/0x4e0 [ 75.211790][ T5928] should_failslab+0xac/0x100 [ 75.216763][ T5928] __kmalloc_noprof+0xdd/0x4c0 [ 75.221536][ T5928] ? __kmalloc_cache_noprof+0x243/0x390 [ 75.227088][ T5928] ? alloc_pipe_info+0x1ff/0x4d0 [ 75.232039][ T5928] alloc_pipe_info+0x1ff/0x4d0 [ 75.236811][ T5928] splice_direct_to_actor+0xa9e/0xc80 [ 75.242197][ T5928] ? __pfx_direct_splice_actor+0x10/0x10 [ 75.247831][ T5928] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 75.253761][ T5928] ? __fget_files+0x2a/0x410 [ 75.258440][ T5928] ? __pfx_lock_release+0x10/0x10 [ 75.263470][ T5928] do_splice_direct+0x289/0x3e0 [ 75.268332][ T5928] ? __pfx_do_splice_direct+0x10/0x10 [ 75.273721][ T5928] ? __fget_files+0x2a/0x410 [ 75.278418][ T5928] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 75.284318][ T5928] ? bpf_lsm_file_permission+0x9/0x10 [ 75.289691][ T5928] ? security_file_permission+0x74/0x280 [ 75.295323][ T5928] ? rw_verify_area+0x1c3/0x6f0 [ 75.300175][ T5928] do_sendfile+0x564/0x8a0 [ 75.304597][ T5928] ? __pfx_do_sendfile+0x10/0x10 [ 75.309533][ T5928] ? __fget_files+0x2a/0x410 [ 75.314129][ T5928] __se_sys_sendfile64+0x17c/0x1e0 [ 75.319246][ T5928] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 75.324881][ T5928] ? do_syscall_64+0x100/0x230 [ 75.329799][ T5928] ? do_syscall_64+0xb6/0x230 [ 75.334478][ T5928] do_syscall_64+0xf3/0x230 [ 75.338986][ T5928] ? clear_bhb_loop+0x35/0x90 [ 75.343663][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.349558][ T5928] RIP: 0033:0x7ff1e8385d29 [ 75.353980][ T5928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.373596][ T5928] RSP: 002b:00007ff1e90e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 75.382019][ T5928] RAX: ffffffffffffffda RBX: 00007ff1e8575fa0 RCX: 00007ff1e8385d29 [ 75.389997][ T5928] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000c [ 75.397971][ T5928] RBP: 00007ff1e90e2090 R08: 0000000000000000 R09: 0000000000000000 [ 75.405944][ T5928] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 75.413951][ T5928] R13: 0000000000000000 R14: 00007ff1e8575fa0 R15: 00007ffd85aec928 [ 75.421957][ T5928] [ 75.692567][ T5872] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 75.862693][ T54] Bluetooth: hci0: command tx timeout [ 76.103520][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.115073][ T5872] usb 3-1: not running at top speed; connect to a high speed hub [ 76.124077][ T5872] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 76.138489][ T5872] usb 3-1: can't read configurations, error -22 [ 76.145702][ T5942] overlay: Unknown parameter 'fsname' [ 76.152126][ T5872] usb usb3-port1: attempt power cycle [ 76.489561][ T54] Bluetooth: hci4: command tx timeout [ 76.495563][ T54] Bluetooth: hci1: command tx timeout [ 76.503473][ T5872] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 76.512994][ T54] Bluetooth: hci3: command tx timeout [ 76.518504][ T54] Bluetooth: hci2: command tx timeout [ 76.556916][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.577043][ T5940] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 76.586926][ T5872] usb 3-1: not running at top speed; connect to a high speed hub [ 76.628499][ T5872] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 76.701038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.710268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 76.815339][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.487289][ T5872] usb 3-1: can't read configurations, error -22 [ 77.520041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.606182][ T5955] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 77.836015][ T5958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.229356][ T5966] evm: overlay not supported [ 78.797419][ T5968] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 78.844818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.857279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.862857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.181041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 79.302331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.310728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.366414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.516424][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 79.731676][ T5871] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.808214][ T5978] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.891809][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 79.912694][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.947956][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.976274][ T5871] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 80.014656][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.069163][ T5871] usb 1-1: config 0 descriptor?? [ 81.137525][ T6000] netlink: 'syz.2.26': attribute type 12 has an invalid length. [ 82.616983][ T6003] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 82.638378][ T29] audit: type=1326 audit(1734489141.921:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.32" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac8ab85d29 code=0x0 [ 82.687184][ T6003] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 83.069074][ T6011] netlink: 'syz.2.30': attribute type 12 has an invalid length. [ 83.836187][ T6015] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 83.986710][ T6019] capability: warning: `syz.2.34' uses deprecated v2 capabilities in a way that may be insecure [ 84.036148][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.306097][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 84.313264][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 84.326317][ T5871] usb 1-1: USB disconnect, device number 2 [ 84.580913][ T6033] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 84.769581][ T6038] syz.2.36: attempt to access beyond end of device [ 84.769581][ T6038] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 84.785622][ T6038] (syz.2.36,6038,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 84.793858][ T6038] (syz.2.36,6038,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 84.801115][ T6038] (syz.2.36,6038,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 84.810241][ T6038] (syz.2.36,6038,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 85.514703][ T6041] Zero length message leads to an empty skb [ 86.459253][ T5871] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.743417][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 87.269415][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.280969][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.307301][ T5871] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 87.345848][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.379298][ T5871] usb 1-1: config 0 descriptor?? [ 87.614456][ T1203] cfg80211: failed to load regulatory.db [ 87.701692][ T6064] netlink: 'syz.2.43': attribute type 12 has an invalid length. [ 89.058387][ T6066] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 89.496533][ T5871] steelseries 0003:1038:1410.0001: not enough fields in HID_OUTPUT_REPORT 0 [ 89.560587][ T6074] netlink: 'syz.1.44': attribute type 1 has an invalid length. [ 89.623360][ T6074] netlink: 3 bytes leftover after parsing attributes in process `syz.1.44'. [ 89.645770][ T6074] batadv1: entered promiscuous mode [ 89.651144][ T6074] batadv1: entered allmulticast mode [ 89.754732][ T5873] usb 1-1: USB disconnect, device number 3 [ 89.991740][ T6082] veth1_to_team: entered promiscuous mode [ 90.056451][ T6082] batadv0: entered promiscuous mode [ 90.475865][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 90.631439][ T6100] vlan2: entered promiscuous mode [ 92.885235][ T6106] syz.3.51 (6106) used greatest stack depth: 18352 bytes left [ 93.586437][ T6145] can0: slcan on ptm0. [ 94.232793][ T6139] can0 (unregistered): slcan off ptm0. [ 94.558380][ T6153] netlink: 'syz.2.60': attribute type 12 has an invalid length. [ 95.407262][ T6162] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 95.415252][ T5871] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.585779][ T5871] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 95.605102][ T5871] usb 4-1: config 0 has no interface number 0 [ 95.616492][ T5871] usb 4-1: config 0 interface 104 has no altsetting 0 [ 95.689392][ T5871] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 95.710349][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.721519][ T5871] usb 4-1: Product: syz [ 95.735769][ T5871] usb 4-1: Manufacturer: syz [ 95.740472][ T5871] usb 4-1: SerialNumber: syz [ 95.761743][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.782677][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.801071][ T5871] usb 4-1: config 0 descriptor?? [ 95.830987][ T5871] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 95.961760][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 95.997232][ T5873] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 96.006736][ T5905] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 96.025279][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.037680][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.051844][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.052645][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.059869][ T5905] usb 2-1: Product: syz [ 96.059892][ T5905] usb 2-1: Manufacturer: syz [ 96.087524][ T5873] usb 5-1: config 0 has no interfaces? [ 96.108018][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.119184][ T5905] usb 2-1: SerialNumber: syz [ 96.124139][ T5873] usb 5-1: config 0 has no interfaces? [ 96.132855][ T5871] gspca_vc032x: reg_r err -71 [ 96.139612][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.150673][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.159452][ T5905] usb 2-1: config 0 descriptor?? [ 96.165298][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.170718][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.176290][ T5873] usb 5-1: config 0 has no interfaces? [ 96.185903][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.197074][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.203085][ T5873] usb 5-1: config 0 has no interfaces? [ 96.209670][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.215681][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.234254][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.245536][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.251107][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.256682][ T5873] usb 5-1: config 0 has no interfaces? [ 96.267934][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.276708][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.291067][ T6182] veth1_to_team: entered promiscuous mode [ 96.292327][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.304196][ T6182] batadv0: entered promiscuous mode [ 96.310148][ T5873] usb 5-1: config 0 has no interfaces? [ 96.317572][ T6182] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 96.318358][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.325465][ T6182] Cannot create hsr debugfs directory [ 96.364353][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.384871][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.404448][ T5873] usb 5-1: config 0 has no interfaces? [ 96.413556][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.434341][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.448206][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.465466][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.474390][ T5873] usb 5-1: config 0 has no interfaces? [ 96.488675][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.501475][ T5873] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 96.513841][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.529092][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 96.541862][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.548076][ T5871] gspca_vc032x: Unknown sensor... [ 96.558321][ T5873] usb 5-1: Product: syz [ 96.568521][ T5873] usb 5-1: Manufacturer: syz [ 96.573906][ T5871] vc032x 4-1:0.104: probe with driver vc032x failed with error -22 [ 96.588721][ T5873] usb 5-1: SerialNumber: syz [ 96.625746][ T5871] usb 4-1: USB disconnect, device number 2 [ 96.632612][ T5873] usb 5-1: config 0 descriptor?? [ 96.774048][ T6193] netlink: 280 bytes leftover after parsing attributes in process `syz.2.66'. [ 96.905588][ T5872] usb 5-1: USB disconnect, device number 2 [ 98.425029][ T5905] mos7840 2-1:0.0: required endpoints missing [ 98.491998][ T5905] usb 2-1: USB disconnect, device number 2 [ 98.548677][ T6214] geneve2: entered promiscuous mode [ 98.571683][ T6214] geneve2: entered allmulticast mode [ 98.950588][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 98.959683][ T6224] netlink: 108 bytes leftover after parsing attributes in process `syz.2.69'. [ 98.968809][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 99.122494][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.301797][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 99.319492][ T5905] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 99.554230][ T5905] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 99.566128][ T5905] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 99.575492][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.588327][ T6221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.765621][ T6245] syz.4.75: attempt to access beyond end of device [ 99.765621][ T6245] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 99.778402][ T6245] (syz.4.75,6245,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 99.785981][ T6245] (syz.4.75,6245,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 99.793195][ T6245] (syz.4.75,6245,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 99.801752][ T6245] (syz.4.75,6245,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 100.308977][ T6246] netlink: 'syz.0.74': attribute type 12 has an invalid length. [ 100.771848][ T5905] usb 2-1: string descriptor 0 read error: -71 [ 100.778670][ T5905] hub 2-1:32.0: USB hub found [ 100.785317][ T5905] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 101.718663][ T5905] usb 2-1: USB disconnect, device number 3 [ 102.544957][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.622467][ T5871] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.899827][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 103.329902][ T5871] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.342872][ T5871] usb 4-1: config 1 interface 0 has no altsetting 0 [ 103.352780][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 103.361963][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.369990][ T5871] usb 4-1: Product: syz [ 103.374229][ T5871] usb 4-1: Manufacturer: syz [ 103.378809][ T5871] usb 4-1: SerialNumber: syz [ 103.636022][ T6272] Bluetooth: MGMT ver 1.23 [ 103.698430][ T6253] delete_channel: no stack [ 103.715168][ T5871] usb 4-1: USB disconnect, device number 3 [ 104.052064][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.096992][ T6285] warning: `syz.3.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.223329][ T5905] usb 2-1: config 0 has no interfaces? [ 104.242180][ T5905] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 104.281632][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.292630][ T5871] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.363172][ T5905] usb 2-1: config 0 descriptor?? [ 104.413277][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 104.690204][ T5905] usb 2-1: USB disconnect, device number 4 [ 104.732956][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 104.745913][ T5871] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 104.795138][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.052679][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.133959][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.147834][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.161244][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.172607][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.187038][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.432560][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.444442][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.454754][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.466033][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.479635][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.491337][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.511693][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.615317][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.625827][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.694151][ T6304] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET) [ 106.238596][ T5871] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 106.249163][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 106.257488][ T5871] usb 5-1: Product: syz [ 106.261765][ T5871] usb 5-1: Manufacturer: syz [ 106.266393][ T5871] usb 5-1: SerialNumber: syz [ 106.316217][ T5871] usb 5-1: config 0 descriptor?? [ 106.400684][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.409248][ T6316] bond0: (slave bond1): Enslaving as an active interface with an up link [ 106.546795][ T6323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.571955][ T6316] Process accounting resumed [ 106.590274][ T5833] usb 5-1: USB disconnect, device number 3 [ 106.734990][ T6323] FAULT_INJECTION: forcing a failure. [ 106.734990][ T6323] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.882241][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.0.89 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 106.892814][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 106.902906][ T6323] Call Trace: [ 106.906222][ T6323] [ 106.909185][ T6323] dump_stack_lvl+0x241/0x360 [ 106.913914][ T6323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.919146][ T6323] ? __pfx__printk+0x10/0x10 [ 106.923761][ T6323] ? __pfx_lock_release+0x10/0x10 [ 106.928820][ T6323] should_fail_ex+0x3b0/0x4e0 [ 106.933529][ T6323] _copy_from_user+0x2f/0xc0 [ 106.938147][ T6323] iommufd_fops_ioctl+0x47b/0x5a0 [ 106.943194][ T6323] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 106.948773][ T6323] ? __fget_files+0x2a/0x410 [ 106.953480][ T6323] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 106.959055][ T6323] __se_sys_ioctl+0xf5/0x170 [ 106.963681][ T6323] do_syscall_64+0xf3/0x230 [ 106.968230][ T6323] ? clear_bhb_loop+0x35/0x90 [ 106.972932][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.978842][ T6323] RIP: 0033:0x7f6cf8b85d29 [ 106.983252][ T6323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.002883][ T6323] RSP: 002b:00007f6cf9a56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.011301][ T6323] RAX: ffffffffffffffda RBX: 00007f6cf8d75fa0 RCX: 00007f6cf8b85d29 [ 107.019277][ T6323] RDX: 0000000020000240 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 107.027245][ T6323] RBP: 00007f6cf9a56090 R08: 0000000000000000 R09: 0000000000000000 [ 107.035214][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.043187][ T6323] R13: 0000000000000000 R14: 00007f6cf8d75fa0 R15: 00007fff0c4f4b38 [ 107.051183][ T6323] [ 107.054362][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.181926][ T5871] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.437839][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.464150][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.496063][ T5871] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 107.512889][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.540065][ T5871] usb 3-1: config 0 descriptor?? [ 107.811990][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.007457][ T5873] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.017140][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.030827][ T5873] usb 4-1: Product: syz [ 108.040871][ T5873] usb 4-1: Manufacturer: syz [ 108.046405][ T5873] usb 4-1: SerialNumber: syz [ 108.094595][ T5871] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 108.112264][ T5873] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 108.135943][ T1203] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.163683][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.182263][ T5871] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 108.229689][ T5871] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 108.495500][ T8] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 108.503579][ T5833] usb 4-1: USB disconnect, device number 4 [ 108.508302][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.521246][ T8] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 108.530898][ T8] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 108.539918][ T8] usb 5-1: Manufacturer: syz [ 108.583745][ T8] usb 5-1: config 0 descriptor?? [ 108.841657][ T8] rc_core: IR keymap rc-hauppauge not found [ 108.847651][ T8] Registered IR keymap rc-empty [ 108.856268][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 108.879203][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 109.329328][ T1203] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 109.339820][ T1203] ath9k_htc: Failed to initialize the device [ 109.515514][ T5833] usb 4-1: ath9k_htc: USB layer deinitialized [ 109.590636][ T5901] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.618885][ T5901] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 109.689550][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.700985][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.714041][ C0] igorplugusb 5-1:0.0: receive overflow, at least 33 lost [ 109.751379][ T6367] kAFS: unable to lookup cell '/S²jË¡8' [ 109.757525][ T6367] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 109.786090][ T6372] CIFS mount error: No usable UNC path provided in device string! [ 109.786090][ T6372] [ 109.796766][ T6372] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 109.886353][ T6367] CIFS mount error: No usable UNC path provided in device string! [ 109.886353][ T6367] [ 109.897750][ T6367] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 109.936087][ T5901] usb 5-1: USB disconnect, device number 4 [ 110.183181][ T6381] mmap: syz.3.97 (6381) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.371077][ T5872] usb 3-1: USB disconnect, device number 6 [ 110.380123][ T5872] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 111.022791][ T6414] netlink: 'syz.4.103': attribute type 12 has an invalid length. [ 111.799448][ T6423] netlink: 104 bytes leftover after parsing attributes in process `syz.4.108'. [ 111.846963][ T6425] bridge0: entered promiscuous mode [ 111.858158][ T6425] bridge0: entered allmulticast mode [ 111.899393][ T5872] IPVS: starting estimator thread 0... [ 112.085883][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.095073][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.109450][ T6429] IPVS: using max 21 ests per chain, 50400 per kthread [ 112.187218][ T6416] bridge0: left promiscuous mode [ 112.351767][ T1203] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.513423][ T1203] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 112.547248][ T1203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.678064][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.030407][ T1203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 113.060406][ T1203] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 113.078539][ T1203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.091303][ T1203] usb 4-1: config 0 descriptor?? [ 113.098926][ T6430] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.112821][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.123591][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.133827][ T1203] gspca_main: spca561-2.14.0 probing abcd:cdee [ 113.143975][ T5873] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.180420][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.202871][ T5873] usb 2-1: SerialNumber: syz [ 113.300625][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.112'. [ 113.322082][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.112'. [ 113.558186][ T5873] usb 2-1: 0:2 : does not exist [ 113.587392][ T5873] usb 2-1: USB disconnect, device number 5 [ 113.617278][ T6430] kvm: emulating exchange as write [ 113.634419][ T6474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.682396][ T1203] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 113.691316][ T1203] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.716860][ T1203] usb 4-1: MIDIStreaming interface descriptor not found [ 113.823501][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 113.936042][ T5873] usb 4-1: USB disconnect, device number 5 [ 114.347092][ T29] audit: type=1326 audit(1734489173.661:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.353767][ T6496] 9pnet_fd: Insufficient options for proto=fd [ 114.392294][ T29] audit: type=1326 audit(1734489173.661:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.430499][ T29] audit: type=1326 audit(1734489173.661:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.474495][ T29] audit: type=1326 audit(1734489173.661:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.514738][ T29] audit: type=1326 audit(1734489173.661:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.550833][ T29] audit: type=1326 audit(1734489173.661:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.610366][ T29] audit: type=1326 audit(1734489173.661:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.710234][ T29] audit: type=1326 audit(1734489173.661:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.712175][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.810121][ T29] audit: type=1326 audit(1734489173.661:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.859500][ T29] audit: type=1326 audit(1734489173.661:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff1e8385d29 code=0x7ffc0000 [ 114.882170][ T5901] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.890336][ T6507] bridge_slave_1: left allmulticast mode [ 114.907283][ T6507] bridge_slave_1: left promiscuous mode [ 114.929273][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.940489][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 114.968762][ T5872] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 114.988547][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.001771][ T5872] usb 2-1: Product: syz [ 115.006070][ T5872] usb 2-1: Manufacturer: syz [ 115.012358][ T5872] usb 2-1: SerialNumber: syz [ 115.029534][ T5872] usb 2-1: config 0 descriptor?? [ 115.072611][ T5872] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 115.702288][ T5872] gp8psk: usb in 128 operation failed. [ 115.728360][ T5872] gp8psk: usb in 137 operation failed. [ 115.735174][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.768332][ T5872] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 115.778268][ T5872] usb 2-1: media controller created [ 115.797236][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.872392][ T5872] gp8psk_fe: Frontend revision 1 attached [ 115.878690][ T5872] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 115.888704][ T5872] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 115.900551][ T5901] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 115.909948][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.918146][ T5901] usb 4-1: Product: syz [ 115.931802][ T5901] usb 4-1: Manufacturer: syz [ 115.936465][ T5901] usb 4-1: SerialNumber: syz [ 115.972315][ T5901] usb 4-1: config 0 descriptor?? [ 115.991302][ T5901] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 116.005286][ T5872] gp8psk: usb in 138 operation failed. [ 116.010811][ T5872] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 116.027248][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.051806][ T5872] gp8psk: found Genpix USB device pID = 201 (hex) [ 116.067970][ T5872] usb 2-1: USB disconnect, device number 6 [ 116.208546][ T5921] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 16 [ 116.220123][ T5872] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 116.241887][ T5921] usb 1-1: config 1 interface 0 has no altsetting 0 [ 116.261502][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 116.303091][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.311159][ T5921] usb 1-1: Product: syz [ 116.334511][ T5921] usb 1-1: Manufacturer: syz [ 116.361673][ T5921] usb 1-1: SerialNumber: syz [ 116.379815][ T6518] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 116.808813][ T5921] usb 1-1: USB disconnect, device number 4 [ 116.898751][ T5901] IPVS: starting estimator thread 0... [ 117.001779][ T6554] IPVS: using max 21 ests per chain, 50400 per kthread [ 117.226299][ T6558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.913927][ T5873] usb 4-1: USB disconnect, device number 6 [ 119.052505][ T6585] netlink: 'syz.0.128': attribute type 12 has an invalid length. [ 119.931775][ T5871] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.822445][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 120.847830][ T5871] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 120.856191][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.881956][ T6609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.901712][ T5871] usb 4-1: config 0 has no interface number 0 [ 120.909519][ T5871] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.005511][ T5871] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.014869][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.090224][ T5871] usb 4-1: Product: syz [ 121.100612][ T5871] usb 4-1: Manufacturer: syz [ 121.129104][ T5871] usb 4-1: SerialNumber: syz [ 121.173910][ T5871] usb 4-1: config 0 descriptor?? [ 121.188182][ T5871] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.389119][ T5871] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 121.401689][ T1203] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.418956][ T5871] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 121.554373][ T1203] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 121.579629][ T1203] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.646723][ T1203] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.691718][ T1203] usb 5-1: config 0 has no interface number 0 [ 121.711758][ T1203] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 121.744198][ T1203] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 121.756946][ T5921] usb 4-1: USB disconnect, device number 7 [ 121.775384][ T1203] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.803861][ T1203] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.845007][ T1203] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 121.864649][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.883534][ T1203] usb 5-1: config 0 descriptor?? [ 121.901916][ T1203] gspca_main: spca561-2.14.0 probing abcd:cdee [ 122.106046][ T1203] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 122.122457][ T1203] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.139700][ T1203] usb 5-1: MIDIStreaming interface descriptor not found [ 122.184130][ T1203] usb 5-1: USB disconnect, device number 5 [ 122.672269][ T5921] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.911887][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 122.922007][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.941665][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.977155][ T5921] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 123.007684][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.023678][ T5921] usb 4-1: config 0 descriptor?? [ 123.132787][ T5872] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.224799][ T6641] syz.2.138: attempt to access beyond end of device [ 123.224799][ T6641] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 123.237929][ T6641] (syz.2.138,6641,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 123.245567][ T6641] (syz.2.138,6641,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 123.252917][ T6641] (syz.2.138,6641,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 123.261495][ T6641] (syz.2.138,6641,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 123.891038][ T5921] playstation 0003:054C:0CE6.0005: unknown main item tag 0x0 [ 123.898790][ T5921] playstation 0003:054C:0CE6.0005: unknown main item tag 0x0 [ 123.906487][ T5921] playstation 0003:054C:0CE6.0005: unknown main item tag 0x0 [ 123.914412][ T5921] playstation 0003:054C:0CE6.0005: unknown main item tag 0x0 [ 123.922353][ T5921] playstation 0003:054C:0CE6.0005: unknown main item tag 0x0 [ 123.929795][ T5921] playstation 0003:054C:0CE6.0005: unknown main item tag 0x0 [ 123.937359][ T5921] playstation 0003:054C:0CE6.0005: unknown main item tag 0x0 [ 123.971140][ T5921] playstation 0003:054C:0CE6.0005: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 124.003559][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.016115][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.035936][ T5872] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.051404][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.071894][ T5872] usb 2-1: SerialNumber: syz [ 124.088636][ T5921] playstation 0003:054C:0CE6.0005: Invalid byte count transferred, expected 20 got 0 [ 124.098461][ T5921] playstation 0003:054C:0CE6.0005: Failed to retrieve DualSense pairing info: -22 [ 124.121714][ T5921] playstation 0003:054C:0CE6.0005: Failed to get MAC address from DualSense [ 124.136212][ T5921] playstation 0003:054C:0CE6.0005: Failed to create dualsense. [ 124.156636][ T5921] playstation 0003:054C:0CE6.0005: probe with driver playstation failed with error -22 [ 124.431107][ T6647] 9pnet_fd: Insufficient options for proto=fd [ 124.673534][ T5921] usb 4-1: USB disconnect, device number 8 [ 124.684139][ T5872] usb 2-1: 0:2 : does not exist [ 124.788608][ T6651] netlink: 'syz.0.140': attribute type 12 has an invalid length. [ 125.484827][ T5872] usb 2-1: USB disconnect, device number 7 [ 125.646257][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.715017][ T6658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.763045][ T5872] IPVS: starting estimator thread 0... [ 126.961790][ T1203] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 126.969438][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.986859][ T6669] IPVS: using max 39 ests per chain, 93600 per kthread [ 127.182855][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 127.442173][ T1203] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.545662][ T1203] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.554994][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 127.588113][ T1203] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 127.601510][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.613079][ T1203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.660905][ T1203] usb 1-1: config 0 descriptor?? [ 127.674483][ T1203] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 127.681231][ T1203] dvb-usb: bulk message failed: -22 (3/0) [ 127.700107][ T1203] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 127.715729][ T1203] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 127.723001][ T1203] usb 1-1: media controller created [ 127.730910][ T1203] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.740303][ T5873] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.749925][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.758054][ T5873] usb 4-1: Product: syz [ 127.762454][ T5873] usb 4-1: Manufacturer: syz [ 127.767101][ T5873] usb 4-1: SerialNumber: syz [ 127.778297][ T5873] usb 4-1: config 0 descriptor?? [ 127.785199][ T1203] dvb-usb: bulk message failed: -22 (6/0) [ 127.791910][ T1203] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 127.810905][ T5873] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 127.820442][ T5873] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 127.833798][ T1203] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 127.849029][ T1203] dvb-usb: schedule remote query interval to 150 msecs. [ 127.857215][ T1203] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 127.894900][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 127.894918][ T29] audit: type=1326 audit(1734489187.211:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz.0.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cf8b85d29 code=0x0 [ 128.014078][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 128.020113][ T5871] dvb-usb: error while querying for an remote control event. [ 128.111929][ T1203] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.201725][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 128.207658][ T5871] dvb-usb: error while querying for an remote control event. [ 128.487950][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 128.494208][ T5871] dvb-usb: error while querying for an remote control event. [ 128.505842][ T1203] usb 5-1: config index 0 descriptor too short (expected 72, got 10) [ 128.514127][ T1203] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 128.522816][ T1203] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 128.552461][ T1203] usb 5-1: string descriptor 0 read error: -71 [ 128.563006][ T1203] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 129.526650][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 129.532621][ T5871] dvb-usb: error while querying for an remote control event. [ 129.541715][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.574248][ T1203] usb 5-1: can't set config #1, error -71 [ 129.583418][ T5873] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 129.751368][ T5921] usb 1-1: USB disconnect, device number 5 [ 129.855456][ T6713] sd 0:0:1:0: device reset [ 129.873044][ T5873] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 129.882379][ T1203] usb 5-1: USB disconnect, device number 6 [ 129.889182][ T5873] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 129.896310][ T5873] em28xx 4-1:0.0: No AC97 audio processor [ 129.929297][ T5921] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 130.927725][ T5921] usb 4-1: USB disconnect, device number 9 [ 130.934505][ T5921] em28xx 4-1:0.0: Disconnecting em28xx [ 130.949759][ T5921] em28xx 4-1:0.0: Freeing device [ 131.066698][ T6733] No control pipe specified [ 132.062751][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 132.505769][ T6766] netlink: 'syz.0.162': attribute type 12 has an invalid length. [ 133.900055][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.907146][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.304587][ T6788] FAULT_INJECTION: forcing a failure. [ 134.304587][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 134.376821][ T6788] CPU: 0 UID: 0 PID: 6788 Comm: syz.4.165 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 134.387481][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 134.397561][ T6788] Call Trace: [ 134.400868][ T6788] [ 134.403818][ T6788] dump_stack_lvl+0x241/0x360 [ 134.408524][ T6788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.413747][ T6788] ? __pfx__printk+0x10/0x10 [ 134.418374][ T6788] should_fail_ex+0x3b0/0x4e0 [ 134.423089][ T6788] should_failslab+0xac/0x100 [ 134.427792][ T6788] ? skb_clone+0x20c/0x390 [ 134.432258][ T6788] kmem_cache_alloc_noprof+0x70/0x380 [ 134.437653][ T6788] skb_clone+0x20c/0x390 [ 134.442097][ T6788] __netlink_deliver_tap+0x3cc/0x7f0 [ 134.447415][ T6788] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.452641][ T6788] netlink_deliver_tap+0x19d/0x1b0 [ 134.457785][ T6788] netlink_unicast+0x7c4/0x990 [ 134.462596][ T6788] ? __pfx_netlink_unicast+0x10/0x10 [ 134.467917][ T6788] ? __virt_addr_valid+0x45f/0x530 [ 134.473080][ T6788] ? __phys_addr_symbol+0x2f/0x70 [ 134.478127][ T6788] ? __check_object_size+0x47a/0x730 [ 134.483413][ T6788] netlink_sendmsg+0x8e4/0xcb0 [ 134.488179][ T6788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.493479][ T6788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.498750][ T6788] __sock_sendmsg+0x221/0x270 [ 134.503421][ T6788] ____sys_sendmsg+0x52a/0x7e0 [ 134.508175][ T6788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.513447][ T6788] ? __fget_files+0x2a/0x410 [ 134.518026][ T6788] ? __fget_files+0x2a/0x410 [ 134.522621][ T6788] __sys_sendmsg+0x269/0x350 [ 134.527209][ T6788] ? __pfx_lock_release+0x10/0x10 [ 134.532252][ T6788] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.537410][ T6788] ? __pfx_vfs_write+0x10/0x10 [ 134.542225][ T6788] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.548581][ T6788] ? do_syscall_64+0x100/0x230 [ 134.553370][ T6788] ? do_syscall_64+0xb6/0x230 [ 134.558061][ T6788] do_syscall_64+0xf3/0x230 [ 134.562860][ T6788] ? clear_bhb_loop+0x35/0x90 [ 134.567534][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.573431][ T6788] RIP: 0033:0x7fac8ab85d29 [ 134.577848][ T6788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.597718][ T6788] RSP: 002b:00007fac8ba25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.606146][ T6788] RAX: ffffffffffffffda RBX: 00007fac8ad75fa0 RCX: 00007fac8ab85d29 [ 134.614117][ T6788] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 134.622083][ T6788] RBP: 00007fac8ba25090 R08: 0000000000000000 R09: 0000000000000000 [ 134.630137][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.638104][ T6788] R13: 0000000000000000 R14: 00007fac8ad75fa0 R15: 00007ffd463e0ed8 [ 134.646088][ T6788] [ 134.649279][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.047308][ T6809] Cannot find map_set index 0 as target [ 136.502578][ T6828] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 136.510466][ T6828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.181'. [ 136.520141][ T6828] bond0: entered promiscuous mode [ 136.525320][ T6828] bond_slave_0: entered promiscuous mode [ 136.531141][ T6828] bond_slave_1: entered promiscuous mode [ 136.537226][ T6828] bridge0: port 3(bond0) entered blocking state [ 136.543616][ T6828] bridge0: port 3(bond0) entered disabled state [ 136.550058][ T6828] bond0: entered allmulticast mode [ 136.555288][ T6828] bond_slave_0: entered allmulticast mode [ 136.561037][ T6828] bond_slave_1: entered allmulticast mode [ 136.568963][ T6828] bridge0: port 3(bond0) entered blocking state [ 136.575366][ T6828] bridge0: port 3(bond0) entered forwarding state [ 137.487880][ T6831] netlink: 'syz.1.180': attribute type 12 has an invalid length. [ 138.689161][ T6828] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 138.842266][ T6828] syz_tun: entered promiscuous mode [ 138.853044][ T6828] syz_tun: entered allmulticast mode [ 138.859717][ T6828] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 139.189464][ T5873] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 139.650264][ T6844] veth1_to_team: entered promiscuous mode [ 139.656141][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.656173][ T5873] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.658313][ T5873] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.690095][ T6844] batadv0: entered promiscuous mode [ 139.718839][ T6844] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 139.726591][ T6844] Cannot create hsr debugfs directory [ 139.791761][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.799829][ T5873] usb 1-1: Product: syz [ 139.827301][ T5873] usb 1-1: Manufacturer: syz [ 139.844710][ T5873] usb 1-1: SerialNumber: syz [ 140.091796][ T5921] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.106916][ T5873] usb 1-1: 0:2 : does not exist [ 140.115377][ T5873] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 140.157072][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 140.274852][ T5873] usb 1-1: USB disconnect, device number 6 [ 140.276266][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.300608][ T5921] usb 3-1: config 0 has no interface number 0 [ 140.317657][ T5921] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.381937][ T5921] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.394881][ T5921] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 140.443655][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.476592][ T5921] usb 3-1: config 0 descriptor?? [ 141.030176][ T5921] uclogic 0003:28BD:0905.0006: Interface probing failed: -22 [ 141.048171][ T5921] uclogic 0003:28BD:0905.0006: interface is invalid, ignoring [ 141.120025][ T5921] usb 3-1: USB disconnect, device number 7 [ 141.230942][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 143.963387][ T4519] Bluetooth: hci5: Frame reassembly failed (-84) [ 143.970241][ T4519] Bluetooth: hci5: Frame reassembly failed (-84) [ 144.231821][ T5873] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 144.402103][ T5921] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.532055][ T5873] usb 5-1: config index 0 descriptor too short (expected 31, got 27) [ 144.582529][ T5873] usb 5-1: config 1 interface 0 has no altsetting 0 [ 144.584455][ T5921] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.628608][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.631080][ T5873] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 144.644601][ T5921] usb 1-1: Product: syz [ 144.650724][ T5921] usb 1-1: Manufacturer: syz [ 144.724171][ T5873] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 144.758813][ T5921] usb 1-1: SerialNumber: syz [ 144.803209][ T5873] usb 5-1: Product: syz [ 144.857108][ T5873] usb 5-1: Manufacturer: syz [ 144.859695][ T5921] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 144.866322][ T5873] usb 5-1: SerialNumber: syz [ 144.910781][ T5901] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.141485][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 145.151417][ T6952] sch_fq: defrate 2 ignored. [ 145.677717][ T5873] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 145.941763][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 146.050197][ T5901] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 146.182428][ T5901] ath9k_htc: Failed to initialize the device [ 146.246185][ T5873] usb 5-1: USB disconnect, device number 7 [ 146.295401][ T5873] usblp0: removed [ 147.043026][ T1203] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.192514][ T5819] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 147.942575][ T5873] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.174908][ T5873] usb 4-1: config 129 has an invalid interface number: 201 but max is 0 [ 148.231930][ T5873] usb 4-1: config 129 has no interface number 0 [ 148.266360][ T5873] usb 4-1: config 129 interface 201 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 148.348026][ T5873] usb 4-1: config 129 interface 201 has no altsetting 0 [ 148.399164][ T5873] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 150.521774][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.529839][ T5873] usb 4-1: Product: syz [ 150.605880][ T5873] usb 4-1: Manufacturer: syz [ 150.610561][ T5873] usb 4-1: SerialNumber: syz [ 150.768729][ T5873] usb 4-1: can't set config #129, error -71 [ 150.818422][ T5873] usb 4-1: USB disconnect, device number 10 [ 151.035713][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.207494][ T7004] [ 154.209870][ T7004] ====================================================== [ 154.216897][ T7004] WARNING: possible circular locking dependency detected [ 154.223943][ T7004] 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 Not tainted [ 154.231063][ T7004] ------------------------------------------------------ [ 154.238090][ T7004] syz.0.220/7004 is trying to acquire lock: [ 154.243990][ T7004] ffff88802c21ced8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0xbf7/0x3640 [ 154.253692][ T7004] [ 154.253692][ T7004] but task is already holding lock: [ 154.261071][ T7004] ffffffff8fca0508 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x9e8/0x3640 [ 154.270244][ T7004] [ 154.270244][ T7004] which lock already depends on the new lock. [ 154.270244][ T7004] [ 154.280749][ T7004] [ 154.280749][ T7004] the existing dependency chain (in reverse order) is: [ 154.289777][ T7004] [ 154.289777][ T7004] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 154.297019][ T7004] lock_acquire+0x1ed/0x550 [ 154.302061][ T7004] __mutex_lock+0x1ac/0xee0 [ 154.307120][ T7004] start_sync_thread+0xdc/0x2dc0 [ 154.312693][ T7004] do_ip_vs_set_ctl+0x442/0x13d0 [ 154.318168][ T7004] nf_setsockopt+0x295/0x2c0 [ 154.323301][ T7004] smc_setsockopt+0x275/0xe50 [ 154.328522][ T7004] do_sock_setsockopt+0x3af/0x720 [ 154.334078][ T7004] __x64_sys_setsockopt+0x1ee/0x280 [ 154.339828][ T7004] do_syscall_64+0xf3/0x230 [ 154.344875][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.351355][ T7004] [ 154.351355][ T7004] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 154.359995][ T7004] lock_acquire+0x1ed/0x550 [ 154.365044][ T7004] __mutex_lock+0x1ac/0xee0 [ 154.370127][ T7004] smc_switch_to_fallback+0x35/0xd90 [ 154.375957][ T7004] smc_sendmsg+0x11f/0x530 [ 154.381352][ T7004] __sock_sendmsg+0x221/0x270 [ 154.386567][ T7004] __sys_sendto+0x363/0x4c0 [ 154.391603][ T7004] __x64_sys_sendto+0xde/0x100 [ 154.396903][ T7004] do_syscall_64+0xf3/0x230 [ 154.401946][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.408383][ T7004] [ 154.408383][ T7004] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 154.416183][ T7004] validate_chain+0x18ef/0x5920 [ 154.421578][ T7004] __lock_acquire+0x1397/0x2100 [ 154.426972][ T7004] lock_acquire+0x1ed/0x550 [ 154.432015][ T7004] lock_sock_nested+0x48/0x100 [ 154.437320][ T7004] do_ipv6_setsockopt+0xbf7/0x3640 [ 154.442966][ T7004] ipv6_setsockopt+0x5d/0x170 [ 154.448188][ T7004] do_sock_setsockopt+0x3af/0x720 [ 154.453753][ T7004] __x64_sys_setsockopt+0x1ee/0x280 [ 154.459499][ T7004] do_syscall_64+0xf3/0x230 [ 154.464548][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.470985][ T7004] [ 154.470985][ T7004] other info that might help us debug this: [ 154.470985][ T7004] [ 154.481311][ T7004] Chain exists of: [ 154.481311][ T7004] sk_lock-AF_INET6 --> &smc->clcsock_release_lock --> rtnl_mutex [ 154.481311][ T7004] [ 154.494997][ T7004] Possible unsafe locking scenario: [ 154.494997][ T7004] [ 154.502548][ T7004] CPU0 CPU1 [ 154.507923][ T7004] ---- ---- [ 154.513298][ T7004] lock(rtnl_mutex); [ 154.517295][ T7004] lock(&smc->clcsock_release_lock); [ 154.525205][ T7004] lock(rtnl_mutex); [ 154.531729][ T7004] lock(sk_lock-AF_INET6); [ 154.536258][ T7004] [ 154.536258][ T7004] *** DEADLOCK *** [ 154.536258][ T7004] [ 154.544412][ T7004] 1 lock held by syz.0.220/7004: [ 154.549366][ T7004] #0: ffffffff8fca0508 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x9e8/0x3640 [ 154.559003][ T7004] [ 154.559003][ T7004] stack backtrace: [ 154.564906][ T7004] CPU: 0 UID: 0 PID: 7004 Comm: syz.0.220 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 154.575507][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 154.585664][ T7004] Call Trace: [ 154.588954][ T7004] [ 154.591899][ T7004] dump_stack_lvl+0x241/0x360 [ 154.596593][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.601811][ T7004] ? __pfx__printk+0x10/0x10 [ 154.606507][ T7004] print_circular_bug+0x13a/0x1b0 [ 154.611547][ T7004] check_noncircular+0x36a/0x4a0 [ 154.616522][ T7004] ? __pfx_check_noncircular+0x10/0x10 [ 154.622016][ T7004] ? lockdep_lock+0x123/0x2b0 [ 154.626711][ T7004] validate_chain+0x18ef/0x5920 [ 154.631583][ T7004] ? __pfx_lock_release+0x10/0x10 [ 154.636628][ T7004] ? group_send_sig_info+0x86/0x310 [ 154.641843][ T7004] ? group_send_sig_info+0x1db/0x310 [ 154.647149][ T7004] ? __pfx_validate_chain+0x10/0x10 [ 154.652384][ T7004] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 154.658316][ T7004] ? look_up_lock_class+0x77/0x170 [ 154.663459][ T7004] ? register_lock_class+0x102/0x980 [ 154.668767][ T7004] ? __pfx_register_lock_class+0x10/0x10 [ 154.674425][ T7004] ? mark_lock+0x9a/0x360 [ 154.678795][ T7004] __lock_acquire+0x1397/0x2100 [ 154.683668][ T7004] lock_acquire+0x1ed/0x550 [ 154.688268][ T7004] ? do_ipv6_setsockopt+0xbf7/0x3640 [ 154.693575][ T7004] ? __pfx_lock_acquire+0x10/0x10 [ 154.698699][ T7004] ? do_ipv6_setsockopt+0x9e8/0x3640 [ 154.703998][ T7004] ? __pfx___mutex_lock+0x10/0x10 [ 154.709040][ T7004] ? preempt_schedule_common+0x84/0xd0 [ 154.714513][ T7004] ? preempt_schedule+0xe1/0xf0 [ 154.719383][ T7004] ? lockdep_hardirqs_on+0x99/0x150 [ 154.724598][ T7004] lock_sock_nested+0x48/0x100 [ 154.729382][ T7004] ? do_ipv6_setsockopt+0xbf7/0x3640 [ 154.734686][ T7004] do_ipv6_setsockopt+0xbf7/0x3640 [ 154.740001][ T7004] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 154.745565][ T7004] ? __pfx_try_to_wake_up+0x10/0x10 [ 154.750778][ T7004] ? __pfx_lock_release+0x10/0x10 [ 154.755817][ T7004] ? plist_del+0x3f1/0x410 [ 154.760252][ T7004] ? mark_lock+0x9a/0x360 [ 154.764596][ T7004] ? __lock_acquire+0x1397/0x2100 [ 154.769646][ T7004] ipv6_setsockopt+0x5d/0x170 [ 154.774343][ T7004] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.780251][ T7004] do_sock_setsockopt+0x3af/0x720 [ 154.785289][ T7004] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 154.790847][ T7004] ? __fget_files+0x395/0x410 [ 154.795547][ T7004] ? __fget_files+0x2a/0x410 [ 154.800161][ T7004] __x64_sys_setsockopt+0x1ee/0x280 [ 154.805385][ T7004] do_syscall_64+0xf3/0x230 [ 154.809988][ T7004] ? clear_bhb_loop+0x35/0x90 [ 154.814670][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.820585][ T7004] RIP: 0033:0x7f6cf8b85d29 [ 154.825011][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.844725][ T7004] RSP: 002b:00007f6cf9a35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.853341][ T7004] RAX: ffffffffffffffda RBX: 00007f6cf8d76080 RCX: 00007f6cf8b85d29 [ 154.861331][ T7004] RDX: 000000000000002a RSI: 0000000000000029 RDI: 000000000000000e [ 154.869318][ T7004] RBP: 00007f6cf8c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 154.877304][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.885293][ T7004] R13: 0000000000000000 R14: 00007f6cf8d76080 R15: 00007fff0c4f4b38 [ 154.893549][ T7004] [ 154.956061][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.222'. [ 154.965454][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.222'. [ 155.081868][ T5873] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.236718][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 155.247220][ T5873] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 155.259805][ T5873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.272771][ T5873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.285457][ T5873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.297977][ T5873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.311991][ T5873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.324760][ T5873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.339417][ T5873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.360670][ T5873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.375447][ T5873] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 155.385033][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 155.395742][ T5873] usb 2-1: Product: syz [ 155.400190][ T5873] usb 2-1: Manufacturer: syz [ 155.405356][ T5873] usb 2-1: SerialNumber: syz [ 155.416666][ T5873] usb 2-1: config 0 descriptor?? [ 155.700012][ T5873] usb 2-1: USB disconnect, device number 8 [ 156.921621][ T5872] usb 1-1: USB disconnect, device number 7 [ 156.936893][ T5872] usb 1-1: ath9k_htc: USB layer deinitialized