last executing test programs: 45.536213329s ago: executing program 3 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x60000000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0x80000e01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 44.602238439s ago: executing program 3 (id=627): mkdir(&(0x7f0000000380)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18040000c0ffffff0000000000000000180100002020732500000000002020201a61fe9596736c01bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000f9ffffff000000009a11c7f9c2b30112382dae5bb40cc748855f"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigprocmask(0x0, &(0x7f0000000580)={[0xfffffffffffffffd]}, &(0x7f00000005c0), 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}}, @in=@multicast2, {@in=@rand_addr=0x64010101, @in6=@private2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x8, [{{@in=@local}, 0x0, @in=@loopback, 0x1}]}]}, 0x16c}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000200)={@id}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x3168431, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',dirsync,\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r3}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd70e6fb489a00fedbdf25", @ANYRES32=0x0, @ANYBLOB="100a0500223803001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file1\x00') 42.458813862s ago: executing program 3 (id=633): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x7, 0x9, 0x200, 0x6, 0x500, 0x7, 0x398, 0x620b}}}}]}, 0x58}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) prctl$PR_MCE_KILL(0x23, 0x3, 0x7fffffffeffd) 41.376835345s ago: executing program 3 (id=635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r6, 0x89e0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4040, 0x9) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f0000000080)={0x0, 0x8, 0x201a, 0x1}) r8 = timerfd_create(0x0, 0x0) timerfd_gettime(r8, &(0x7f00000003c0)={{0x0, 0x0}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYRESDEC=r10, @ANYRES8=r9, @ANYRESOCT=r8, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x40080c0) 39.926535015s ago: executing program 3 (id=638): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x200010e8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{0x4, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2}, {0x2, 0x0, 0x0, 0x1}}], 0x18) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) 37.727556849s ago: executing program 3 (id=649): syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f60102030109022d0001000000000904000003d3223a00090501"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103ff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5610067f0200ff000005000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000a000200040010000800014004000000", 0x58}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 22.595652211s ago: executing program 32 (id=649): syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f60102030109022d0001000000000904000003d3223a00090501"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103ff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5610067f0200ff000005000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000a000200040010000800014004000000", 0x58}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 20.615197513s ago: executing program 0 (id=694): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5a8874", 0x9c, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1102a8887a2c9305895b8cb59331cdffdf8e04142a112e9e8a24dbc3ec49d3a4", "2db6a193bcc7961b3d7ffdd654edbf06b88768a543517e85683cba3eacfc34c915f14e6909b49f9237345255b67d8e45", "381da35b3b5c874ffc044f7e6bdb47fd7e6379a64c0cc354322238af", {"a263753d250cfb21bd9221645c29f7d3", "432c3aac2290feba17bfa3643cdcbbfd"}}}}}}}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 19.94230332s ago: executing program 0 (id=696): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c63a6efdecc4194d99634ff4eb90c266e83fff7dfbd3568c030612b423a36dbc", 0x23}, {&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae76812b1375a1b59f2b669bcf1f5a39f4241eef5d48ba4a16fb354031b55dd47512d0b1c6d02dce620d1cd5bad3ff8d69fe0a9e54a633953fea9e23fdf840a0b9270dfa4799e36a059f53656b65191a14e19c6330c4", 0xbb}, {&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae1", 0x1c}, {&(0x7f0000000300)="f111f39463acbac94f37eaaa931da78c8c414a4edadbcac605b6a5089e71e9b125f3a628ad2cbfd97cb9ad0e6eec571532e87f653961867d41d742ded2a2b2ae459f67d701f481c880e26696407b17b691b17a5045371c8fdcf194192c92774a796d44f528426692f08ed6a6a871569a50134a64119acae16a5b89bb77613f5152bf2faca1ff52082e2e810a084976bf5445384defc7b81efdbc46cc27c6775686e3c7b09331988195a02d1f47f754e9a632886498d9c5", 0xb7}], 0x4, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000740)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x5, 0x8, "dfd968a2cbc3ab81b62b8972f86e3ccdbddc4cdd0b2b40a6e5de3c9e4781e0e1ee236c736b8402fffed1909bf55135108947062cc005658128e0af2959a321", 0x35}, 0x60, &(0x7f0000000880)=[{&(0x7f00000007c0)="fd509685c5db69548f0871e0910401e9810cb9f20ff5edc9014d51247a9fb3a2dd3c789834fbd05f35b6c71bba04f2e9756a751f6063e6e482d259dd129492c398576c0a5d7e694b12f16160349a0132db6423f1f61b752c0711ca567274855b64e1e0f3f51b21e171a13876664fb43cba17fe431663ece5158423b70e15dc7da9a3d4e6", 0x84}, {&(0x7f0000000900)="31201b71e7e5a5d8385082ec35e66960a0a2143de56a4e46b07c445bcea39bc3494c19b1ba18a3de073f59a708dff50516f44108ef6b5b54b0bc9133ee2813542ca23009f813c1d682e0a14864486d684196da5d366d68723e721ae785fb7450b3623aef7d5642", 0x67}], 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="0693c4a38ec583e5fae3a4f301040e122b6fb1b39b46385df4d1db38a02dc97660ab99aca6ef8b3f628eac32ae31b2f62984626abd2660c305c0b8eb0ab7dcf050554d9642ffe16f44385ba08bb442e973ab7b69f6826ed5b15d882b2b52b78d1d3ea51088153e1dbcb39d82774a9c9d2ef4a6cb364601b8769e728222456d5831e394487fbb7be6dc24010301309c35ea8b2f8e1e2f52a81593"], 0x10, 0x10}, 0x44880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c001fcf6f25b4fa8402718eab7bb22252dc7790d4b4cdc27b69aec158f300562cb6f268126ed71ec8ee021ddd0a99ec9a32b170c0b14b69484f71e09c382a67c595d4feee089b9918f3d9260455e3272a041f44b992aa65afca14dc3ec3a5fac714d8c24be4331b8dbf9a19a45f1246722e59591587ed65b21d136365a914b24df164743b69a15be4e233381751287959cb0c50d7493077c271caa4c68f3d0ab582966026d8273f93a6fc40fb32d79d58396517", @ANYRES16, @ANYRES64=r0]) read$FUSE(r10, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000004200)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r10, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.857983526s ago: executing program 0 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x54}}, 0x4000800) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRESDEC=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYBLOB="3800d20fd7f822c2c8e9eac06a82fa4bc9285a835b8a438ee5bdd2ea88aa26559c0062a60c78c1ccae6ab2c60a5056d92a4a4155824aa6ac48dec2ce3f278560d27287a2c21199571a1d1bbe57eec5dc7163d4b74170424b9b0d390418b5271f9d78653f7ae451cb5ae979aa19edcb188c6393e2a794b975a282", @ANYRESHEX], 0x3c}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@deltfilter={0x210, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0xf, 0xfff1}, {0x8, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x75, 0x2}}, @filter_kind_options=@f_matchall={{0xd}, {0x1bc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_MATCHALL_ACT={0x1a0, 0x2, [@m_bpf={0x8c, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x5a, 0x6, "c64df8625a2013b9279a5fb1e8bb9afe2ce2219086eb423640d2456dd8295405b7bbc1655e69f601ca93241ed9885843f41fe3bcbdd3afabb4d91d116f6a1de36667117c270fd7607bcd0aba1e8af34851917a11afd9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x110, 0x20, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0xb, 0x7f, 0x4, {0x4, 0x0, 0x3, 0x1000, 0x40, 0x8}, {0x6, 0x1, 0x2, 0x5, 0x3a, 0x2739}, 0x58e, 0x0, 0x6}}]]}, {0x91, 0x6, "dbca59559a7118cac8b42e06b6bda0112a536b720338e34c47ce26f1bfd53bdb7c932a3096b7686d940f24e37c6718b9ef796e29f08ca02cf6ef4128aaa875bea3dd23485fb93a09cd1f28125c5dc01848ed4bf838e8d5e03ad4f0ee4771368091a9177afda9d1f6c3719fc2f62cd997e3f33fc66ad19efd590b42c34fbaee1d03b6d8a9f9e0ebbc47e3d94406"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x210}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x74}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x11e, 0x1, &(0x7f00000001c0)=@gcm_256={{0x282}, '\x00', "9bcfa2296eb0288490edef897b0348d78114845f84298bd59d9b655db1ac9aba", "000009ff", "c245411efc9da029"}, 0x38) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000080)) listen(r6, 0x7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) fcntl$getown(r8, 0x9) mlockall(0x1) rseq(&(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x7fffffff, 0x1}, 0x3}, 0x20, 0x1, 0x0) 17.603722463s ago: executing program 1 (id=700): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 14.438335502s ago: executing program 0 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd26}, 0x18}}, 0xffffffffffffffa6) 14.437364023s ago: executing program 1 (id=707): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0x20c2789fb6c04185, &(0x7f0000000300)={0x3d7f4931, 0x3}, &(0x7f0000000340)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000790000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="15000000", @ANYRES16, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) write$UHID_CREATE(r6, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x5, 0x50b, 0x9, 0xc, 0x2}}, 0x120) splice(r5, 0x0, r7, &(0x7f0000000140), 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 13.143726651s ago: executing program 1 (id=709): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000011001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 11.930431429s ago: executing program 1 (id=711): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x124, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_NAT_DST={0xfc, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x2004c010}, 0x44005) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb}, {0x4, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x6, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x3, 0x7, 0x2, 0x4, 0x34}}, {0x4}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x4, &(0x7f0000000300)="22f2ec292b6fcc26a5dbdf92389b9d42959e5685f33c6d4dd1ee492d08ae37658b84c8e5bb61752dc6cec600718f59860cdc11117964799f971390ff0e72679d881ed7b4f7a1ff7cc25896d12129feb647585990f25be51552fecb54796692750b4369699a1f01c63edf918cd98433c2725bb71555f3ced3b482f5a4e990f0adcecb590bf8a763ab2763569e8b9d256ef6c71af9549a52df65f375dede7a1e4acca83a007722af554bce62532700c321f980990a792eadfd0eddf8378f5fff3c67423fbc6af6a1f15ee6175d39b99f596c11474ce938871982336d2289dc881cf4af152bcc54aca7a65a0238cb8464611e3a68a0102a57") ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 9.753819842s ago: executing program 0 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$adsp1(0xffffffffffffff9c, 0x0, 0x300, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='ext4_ext_rm_idx\x00', r3, 0x0, 0x8}, 0x18) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000100)) write$dsp(r2, &(0x7f0000000200)='m', 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x1, 0x5, 0x1c4b8fec, 0x8, 0x10000, 0xa, 0x7ff, 0x1000207f, 0x3}}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 9.561238853s ago: executing program 1 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$adsp1(0xffffffffffffff9c, 0x0, 0x300, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='ext4_ext_rm_idx\x00', r3, 0x0, 0x8}, 0x18) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000100)) write$dsp(r2, &(0x7f0000000200)='m', 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x1, 0x5, 0x1c4b8fec, 0x8, 0x10000, 0xa, 0x7ff, 0x1000207f, 0x3}}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 8.558469931s ago: executing program 2 (id=718): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.890976617s ago: executing program 4 (id=719): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x4000}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 6.462559071s ago: executing program 4 (id=720): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x149800, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000070003902", @ANYRES32=r2, @ANYBLOB="0c000180", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28) sendto$inet6(r4, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0xfffffffffffffff0, 0x0, 0x3000137) syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x124}, 0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r5, 0x0) 5.880746427s ago: executing program 2 (id=721): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20008090) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {{}, {0x95, 0x0, 0x600}}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000680)='GPL\x00', 0xa, 0x1009, &(0x7f0000001cc0)=""/4105, 0x41000}, 0x94) 5.843681727s ago: executing program 4 (id=722): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000040)=0xf0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) close(0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 4.488337426s ago: executing program 4 (id=723): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000580)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r4, 0xfffffffc}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3ff}}, 0x10) (async) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x2d, 0x0, 0x90) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x4, 0x0) (async) r8 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) (async, rerun: 32) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) (rerun: 32) 4.410697238s ago: executing program 2 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000020000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4.283914748s ago: executing program 2 (id=725): ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) 3.86045502s ago: executing program 4 (id=726): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'team_slave_1\x00'}, 0x18) syz_open_dev$media(0x0, 0x1ff, 0x52300) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x51) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x2, 0x200, &(0x7f0000003c40)="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"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x3c, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a0102000000000000000001000000090001007379", @ANYRESOCT, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB="ea924879a0eeb946d39c216fe00311b8a2027eefe57bb6dc29d3043cd3f5892bb74abf702d3b6f9a90e5201f3ab4945b931c0636911cbac9e9a62fdd6c44269c695b78c5e16a8e2e452aaad7c7695e6d6345b33d2719a8edd9f7b8d451efecc2c19f9e1e7c2cac32afcf8a510ca52f2298c5b778d2b9cc3647cd66fc7fc00643ce55c8ac76e2cb1fd0c68d2b84e381fe959bd7e3b82625c9eeb0d4a6fb4fac0a4a1dbde61573788e81e879295b4439925c76b76bc4e039f39b903c"], 0xfc}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r7, 0x7, &(0x7f0000000400)={0x100000000}, &(0x7f0000000440)) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000100), 0x41000004, &(0x7f0000000040)) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0202000000000000140012800a00010069706f696200000004000280080005002b02"], 0x3c}, 0x1, 0xba01}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0x1, &(0x7f00000000c0)="5f129fe02db2befd1fa5e9b0ffca6f748ea8150858bdaefe317607509c029534c6dce7358442b41c73932eb6c145654c41ea699b1b3fab8aa71bb7ee809957c430e3e59cc613833376962588b6fb00acb7dd0db3ad99bcfaa0bb5ad3", &(0x7f0000000140)=""/162}, 0x20) 976.673188ms ago: executing program 2 (id=727): socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x4004014) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x4400c030) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x400, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4, 0x1}}, 0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff727bcfabaaaaaaaaaa0281ff010008"], 0x32) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0, 0x0, 0x0, 0xff97}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 154.458214ms ago: executing program 2 (id=728): socket$inet6(0xa, 0x2, 0x0) r0 = geteuid() setresuid(0xee01, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) close(0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0xfffffffe, &(0x7f0000000000)={0x2, 0x1, 0x80}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e20, @local}}) r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c03, 0xffffffffffffffff) 94.282472ms ago: executing program 0 (id=729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x6203}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_TOS={0x5, 0x9, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc084}, 0x8044) 75.214811ms ago: executing program 1 (id=730): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="2e0200000036000000410100", 0x10) madvise(&(0x7f0000889000/0x3000)=nil, 0x3000, 0x16) r1 = socket(0x8, 0xa, 0xf) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) 0s ago: executing program 4 (id=731): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5a8874", 0x9c, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1102a8887a2c9305895b8cb59331cdffdf8e04142a112e9e8a24dbc3ec49d3a4", "2db6a193bcc7961b3d7ffdd654edbf06b88768a543517e85683cba3eacfc34c915f14e6909b49f9237345255b67d8e45", "381da35b3b5c874ffc044f7e6bdb47fd7e6379a64c0cc354322238af", {"a263753d250cfb21bd9221645c29f7d3", "432c3aac2290feba17bfa3643cdcbbfd"}}}}}}}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x80) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x2a) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 86.308624][ T5827] cgroup: Unknown subsys name 'net' [ 86.417975][ T5827] cgroup: Unknown subsys name 'cpuset' [ 86.427912][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.242518][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.957352][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.965603][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.974565][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.982460][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.990470][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.998060][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.006591][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.014791][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.017877][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.040807][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.044100][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.049569][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.064874][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.078762][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.086433][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.096541][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.098500][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.104833][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.118198][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.125441][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.126876][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.140539][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.148744][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.157429][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.165717][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.709388][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 93.999475][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 94.042376][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 94.157388][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.165314][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.172795][ T5838] bridge_slave_0: entered allmulticast mode [ 94.180662][ T5838] bridge_slave_0: entered promiscuous mode [ 94.202269][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 94.214963][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 94.240259][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.247571][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.255535][ T5838] bridge_slave_1: entered allmulticast mode [ 94.262880][ T5838] bridge_slave_1: entered promiscuous mode [ 94.379302][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.386781][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.395076][ T5837] bridge_slave_0: entered allmulticast mode [ 94.402403][ T5837] bridge_slave_0: entered promiscuous mode [ 94.481350][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.488748][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.496399][ T5837] bridge_slave_1: entered allmulticast mode [ 94.503786][ T5837] bridge_slave_1: entered promiscuous mode [ 94.515493][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.584905][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.594642][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.601989][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.612032][ T5850] bridge_slave_0: entered allmulticast mode [ 94.620450][ T5850] bridge_slave_0: entered promiscuous mode [ 94.718382][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.726144][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.734629][ T5850] bridge_slave_1: entered allmulticast mode [ 94.742001][ T5850] bridge_slave_1: entered promiscuous mode [ 94.749260][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.756905][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.764314][ T5839] bridge_slave_0: entered allmulticast mode [ 94.771578][ T5839] bridge_slave_0: entered promiscuous mode [ 94.779855][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.787278][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.795040][ T5840] bridge_slave_0: entered allmulticast mode [ 94.802304][ T5840] bridge_slave_0: entered promiscuous mode [ 94.813018][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.826382][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.838478][ T5838] team0: Port device team_slave_0 added [ 94.847698][ T5838] team0: Port device team_slave_1 added [ 94.882692][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.891245][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.899229][ T5839] bridge_slave_1: entered allmulticast mode [ 94.907399][ T5839] bridge_slave_1: entered promiscuous mode [ 94.929116][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.936334][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.943536][ T5840] bridge_slave_1: entered allmulticast mode [ 94.951071][ T5840] bridge_slave_1: entered promiscuous mode [ 95.003560][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.076354][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.083365][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.111143][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.113920][ T5855] Bluetooth: hci1: command tx timeout [ 95.126391][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.134518][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.160567][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.173991][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.184153][ T5855] Bluetooth: hci2: command tx timeout [ 95.184164][ T5854] Bluetooth: hci3: command tx timeout [ 95.202652][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.215201][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.227973][ T5837] team0: Port device team_slave_0 added [ 95.237886][ T5837] team0: Port device team_slave_1 added [ 95.254358][ T5855] Bluetooth: hci4: command tx timeout [ 95.254457][ T5854] Bluetooth: hci0: command tx timeout [ 95.301990][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.315068][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.411390][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.418452][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.446106][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.461080][ T5850] team0: Port device team_slave_0 added [ 95.470440][ T5839] team0: Port device team_slave_0 added [ 95.493178][ T5840] team0: Port device team_slave_0 added [ 95.500702][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.508331][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.534569][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.557481][ T5850] team0: Port device team_slave_1 added [ 95.582959][ T5839] team0: Port device team_slave_1 added [ 95.606172][ T5840] team0: Port device team_slave_1 added [ 95.620456][ T5838] hsr_slave_0: entered promiscuous mode [ 95.627495][ T5838] hsr_slave_1: entered promiscuous mode [ 95.725515][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.732552][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.759404][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.785539][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.792554][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.819221][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.832317][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.839581][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.866809][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.882441][ T5837] hsr_slave_0: entered promiscuous mode [ 95.889310][ T5837] hsr_slave_1: entered promiscuous mode [ 95.896366][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.904404][ T5837] Cannot create hsr debugfs directory [ 95.922594][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.929879][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.956835][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.968651][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.975708][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.001956][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.077774][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.084938][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.111172][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.202652][ T5850] hsr_slave_0: entered promiscuous mode [ 96.209222][ T5850] hsr_slave_1: entered promiscuous mode [ 96.216149][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.224193][ T5850] Cannot create hsr debugfs directory [ 96.250797][ T5840] hsr_slave_0: entered promiscuous mode [ 96.257368][ T5840] hsr_slave_1: entered promiscuous mode [ 96.263485][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.271135][ T5840] Cannot create hsr debugfs directory [ 96.485870][ T5839] hsr_slave_0: entered promiscuous mode [ 96.492300][ T5839] hsr_slave_1: entered promiscuous mode [ 96.498832][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.506939][ T5839] Cannot create hsr debugfs directory [ 96.922724][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.949941][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.961529][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.985754][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.045370][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.058024][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.085648][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.099379][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.162395][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.174404][ T5854] Bluetooth: hci1: command tx timeout [ 97.190267][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.201475][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.228335][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.254732][ T5854] Bluetooth: hci3: command tx timeout [ 97.254764][ T5855] Bluetooth: hci2: command tx timeout [ 97.266102][ T9] cfg80211: failed to load regulatory.db [ 97.334482][ T5855] Bluetooth: hci0: command tx timeout [ 97.335937][ T5854] Bluetooth: hci4: command tx timeout [ 97.362312][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.373113][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.409468][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.420874][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.552572][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.570229][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.581950][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.599766][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.637229][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.676577][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.711926][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.719266][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.729811][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.737037][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.802742][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.849618][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.893928][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.921396][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.957815][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.965070][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.990021][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.997237][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.048402][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.055736][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.075533][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.082753][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.129114][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.164946][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.262704][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.288990][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.376904][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.384140][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.403384][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.410970][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.442233][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.502726][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.509982][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.556365][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.563588][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.940945][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.978639][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.166917][ T5837] veth0_vlan: entered promiscuous mode [ 99.205069][ T5840] veth0_vlan: entered promiscuous mode [ 99.254384][ T5854] Bluetooth: hci1: command tx timeout [ 99.260454][ T5840] veth1_vlan: entered promiscuous mode [ 99.287411][ T5837] veth1_vlan: entered promiscuous mode [ 99.335816][ T5854] Bluetooth: hci3: command tx timeout [ 99.335864][ T5855] Bluetooth: hci2: command tx timeout [ 99.390159][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.414931][ T5855] Bluetooth: hci0: command tx timeout [ 99.414959][ T5854] Bluetooth: hci4: command tx timeout [ 99.428691][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.439538][ T5837] veth0_macvtap: entered promiscuous mode [ 99.464893][ T5837] veth1_macvtap: entered promiscuous mode [ 99.482260][ T5838] veth0_vlan: entered promiscuous mode [ 99.536826][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.550232][ T5838] veth1_vlan: entered promiscuous mode [ 99.567814][ T5840] veth0_macvtap: entered promiscuous mode [ 99.585202][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.608082][ T5840] veth1_macvtap: entered promiscuous mode [ 99.635857][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.645802][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.655179][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.664329][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.689448][ T5850] veth0_vlan: entered promiscuous mode [ 99.716615][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.731019][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.755261][ T5850] veth1_vlan: entered promiscuous mode [ 99.784578][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.793426][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.803405][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.812332][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.831686][ T5839] veth0_vlan: entered promiscuous mode [ 99.850713][ T5838] veth0_macvtap: entered promiscuous mode [ 99.904820][ T5838] veth1_macvtap: entered promiscuous mode [ 99.918174][ T5839] veth1_vlan: entered promiscuous mode [ 99.957477][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.962953][ T5850] veth0_macvtap: entered promiscuous mode [ 99.982319][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.038260][ T5850] veth1_macvtap: entered promiscuous mode [ 100.061505][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.084257][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.092148][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.092621][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.137973][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.147484][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.158314][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.167844][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.207879][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.226518][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.235846][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.269838][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.278075][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.282288][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.323279][ T5839] veth0_macvtap: entered promiscuous mode [ 100.351211][ T5839] veth1_macvtap: entered promiscuous mode [ 100.388600][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.399947][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.414646][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.423526][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.425882][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.451608][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.507048][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.531576][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.553991][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.647406][ T5961] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 100.711841][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.724547][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.733428][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.753794][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.805738][ T5961] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 101.052593][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.070072][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.223897][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.231794][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.336551][ T5854] Bluetooth: hci1: command tx timeout [ 101.394367][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.414101][ T5854] Bluetooth: hci3: command tx timeout [ 101.419604][ T5854] Bluetooth: hci2: command tx timeout [ 101.432686][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.494434][ T5854] Bluetooth: hci4: command tx timeout [ 101.494474][ T5855] Bluetooth: hci0: command tx timeout [ 101.581692][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.590034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.598829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.773826][ T5985] Zero length message leads to an empty skb [ 101.837310][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.963945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 102.066260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.168842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.234263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.346619][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.389315][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.404137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.612817][ T5993] bond_slave_0: entered promiscuous mode [ 102.618795][ T5993] bond_slave_1: entered promiscuous mode [ 102.683771][ T5993] macvlan2: entered allmulticast mode [ 102.697848][ T5993] bond0: entered allmulticast mode [ 102.727595][ T5993] bond_slave_0: entered allmulticast mode [ 102.730333][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'. [ 102.754460][ T5993] bond_slave_1: entered allmulticast mode [ 102.777595][ T5993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.791460][ T5993] bridge0: port 3(macvlan2) entered blocking state [ 102.800297][ T5993] bridge0: port 3(macvlan2) entered disabled state [ 102.801417][ T5998] overlayfs: conflicting options: nfs_export=on,index=off [ 102.812577][ T5993] macvlan2: entered promiscuous mode [ 102.821508][ T5993] bond0: entered promiscuous mode [ 102.829410][ T5993] bridge0: port 3(macvlan2) entered blocking state [ 102.836640][ T5993] bridge0: port 3(macvlan2) entered forwarding state [ 103.313588][ T5935] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.405826][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 105.416305][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 106.093909][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.160007][ T5935] usb 3-1: string descriptor 0 read error: -71 [ 106.188380][ T5935] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.220529][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.250837][ T5935] usb 3-1: config 0 descriptor?? [ 106.284770][ T5935] usb 3-1: can't set config #0, error -71 [ 106.351792][ T5935] usb 3-1: USB disconnect, device number 2 [ 106.589368][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 106.637433][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.671555][ T6031] batadv_slave_1: entered promiscuous mode [ 106.965426][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 107.714423][ T6046] 9pnet_fd: Insufficient options for proto=fd [ 107.992187][ T6047] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.108498][ T6051] netlink: 'syz.3.27': attribute type 20 has an invalid length. [ 108.231524][ T6051] dvmrp17: entered allmulticast mode [ 108.312774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.415432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.424556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.602426][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 109.587882][ T6066] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.057851][ T6086] bridge0: entered promiscuous mode [ 117.115388][ T6086] bond0: entered promiscuous mode [ 117.123217][ T6086] bond_slave_0: entered promiscuous mode [ 117.216323][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.236948][ T6086] bond_slave_1: entered promiscuous mode [ 117.278537][ T6086] hsr1: entered allmulticast mode [ 117.318374][ T6086] bridge0: entered allmulticast mode [ 117.328857][ T6086] bond0: entered allmulticast mode [ 117.334297][ T6086] bond_slave_0: entered allmulticast mode [ 117.344067][ T6086] bond_slave_1: entered allmulticast mode [ 117.436190][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.476014][ T6090] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.502800][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 117.556636][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.755803][ T10] usb 5-1: config 0 descriptor?? [ 118.731050][ T6088] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.003847][ T6104] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.346446][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 121.007173][ T6125] sctp: failed to load transform for md5: -4 [ 122.154194][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 122.160892][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 122.793153][ T10] usb 5-1: USB disconnect, device number 2 [ 124.262202][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 124.370397][ T6163] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 124.495587][ T977] IPVS: starting estimator thread 0... [ 124.845456][ T6164] IPVS: using max 22 ests per chain, 52800 per kthread [ 127.575513][ T6196] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 127.632167][ T6204] binder: 6203:6204 unknown command 0 [ 127.664262][ T6204] binder: 6203:6204 ioctl c0306201 200000000080 returned -22 [ 127.894058][ T5910] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.920972][ T6208] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 128.087996][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 128.106251][ T5910] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 128.135689][ T5910] usb 1-1: config 0 has no interface number 0 [ 128.159896][ T5910] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.207676][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.249590][ T5910] usb 1-1: Product: syz [ 128.266373][ T5910] usb 1-1: Manufacturer: syz [ 128.277901][ T5910] usb 1-1: SerialNumber: syz [ 128.482450][ T6218] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 128.795747][ T977] IPVS: starting estimator thread 0... [ 128.911208][ T5910] usb 1-1: config 0 descriptor?? [ 128.926917][ T5910] smsc95xx v2.0.0 [ 129.123986][ T6219] IPVS: using max 28 ests per chain, 67200 per kthread [ 130.075768][ T5910] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 130.095054][ T5910] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 130.493080][ T5910] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 130.524846][ T5910] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 130.601719][ T5910] usb 1-1: USB disconnect, device number 2 [ 130.722450][ T6241] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 130.745086][ T6243] FAULT_INJECTION: forcing a failure. [ 130.745086][ T6243] name fail_futex, interval 1, probability 0, space 0, times 1 [ 130.758442][ T6243] CPU: 1 UID: 0 PID: 6243 Comm: syz.3.79 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 130.758462][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.758477][ T6243] Call Trace: [ 130.758486][ T6243] [ 130.758493][ T6243] dump_stack_lvl+0x189/0x250 [ 130.758521][ T6243] ? __pfx____ratelimit+0x10/0x10 [ 130.758537][ T6243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.758554][ T6243] ? __pfx__printk+0x10/0x10 [ 130.758585][ T6243] should_fail_ex+0x414/0x560 [ 130.758604][ T6243] get_futex_key+0xfd9/0x1640 [ 130.758631][ T6243] ? __pfx_get_futex_key+0x10/0x10 [ 130.758649][ T6243] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 130.758667][ T6243] ? __asan_memset+0x22/0x50 [ 130.758693][ T6243] futex_requeue+0x25b/0x1870 [ 130.758713][ T6243] ? __lock_acquire+0xab9/0xd20 [ 130.758735][ T6243] ? get_pid_task+0x20/0x1f0 [ 130.758757][ T6243] ? __pfx_futex_requeue+0x10/0x10 [ 130.758786][ T6243] ? rcu_read_lock_any_held+0xb3/0x120 [ 130.758809][ T6243] ? vfs_write+0x8d8/0xa90 [ 130.758831][ T6243] ? ksys_write+0x1cb/0x250 [ 130.758846][ T6243] do_futex+0x362/0x420 [ 130.758866][ T6243] ? __pfx_vfs_write+0x10/0x10 [ 130.758881][ T6243] ? __pfx_do_futex+0x10/0x10 [ 130.758907][ T6243] __se_sys_futex+0x36f/0x400 [ 130.758927][ T6243] ? fput+0xa0/0xd0 [ 130.758946][ T6243] ? ksys_write+0x22a/0x250 [ 130.758959][ T6243] ? __pfx___se_sys_futex+0x10/0x10 [ 130.758979][ T6243] ? __pfx_ksys_write+0x10/0x10 [ 130.758997][ T6243] ? __x64_sys_futex+0x21/0xf0 [ 130.759018][ T6243] do_syscall_64+0xfa/0x3b0 [ 130.759034][ T6243] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.759050][ T6243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.759065][ T6243] ? clear_bhb_loop+0x60/0xb0 [ 130.759083][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.759097][ T6243] RIP: 0033:0x7f5702b8ebe9 [ 130.759115][ T6243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.759131][ T6243] RSP: 002b:00007f5703948038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.759147][ T6243] RAX: ffffffffffffffda RBX: 00007f5702db6090 RCX: 00007f5702b8ebe9 [ 130.759159][ T6243] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 130.759168][ T6243] RBP: 00007f5703948090 R08: 0000200000048000 R09: 0000000000000000 [ 130.759178][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.759186][ T6243] R13: 00007f5702db6128 R14: 00007f5702db6090 R15: 00007ffc1edaa048 [ 130.759209][ T6243] [ 131.021210][ T6241] sctp: [Deprecated]: syz.4.80 (pid 6241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.021210][ T6241] Use struct sctp_sack_info instead [ 131.256889][ T6245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.066800][ T6253] netlink: 104 bytes leftover after parsing attributes in process `syz.4.84'. [ 132.363509][ T6257] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 137.544426][ T6287] netlink: 'syz.0.93': attribute type 7 has an invalid length. [ 138.220138][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.227381][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.724267][ T5897] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.740502][ T6297] syz.3.97 uses obsolete (PF_INET,SOCK_PACKET) [ 139.100823][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.148639][ T5897] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 139.323354][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.388094][ T5897] usb 3-1: config 0 descriptor?? [ 145.272046][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 145.326380][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 145.374418][ T5897] usb 3-1: USB disconnect, device number 3 [ 145.610164][ T5935] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 146.578781][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 147.124374][ T5935] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 147.166667][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.200355][ T5935] usb 2-1: Product: syz [ 147.205740][ T5935] usb 2-1: Manufacturer: syz [ 147.210401][ T5935] usb 2-1: SerialNumber: syz [ 147.251871][ T5935] usb 2-1: config 0 descriptor?? [ 147.466155][ T6370] netlink: 68 bytes leftover after parsing attributes in process `syz.0.115'. [ 148.203910][ T5935] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 148.214022][ T5935] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 148.416136][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.620364][ T5935] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32 [ 148.695874][ T24] usb 3-1: config index 0 descriptor too short (expected 72, got 10) [ 148.877227][ T24] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 148.946381][ T24] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 149.015692][ T24] usb 3-1: string descriptor 0 read error: -71 [ 149.027751][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.047117][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.084237][ T24] usb 3-1: can't set config #1, error -71 [ 149.119353][ T24] usb 3-1: USB disconnect, device number 4 [ 149.427277][ T6391] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 149.485643][ T6391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.089893][ T10] usb 2-1: USB disconnect, device number 2 [ 150.575488][ T6403] loop6: detected capacity change from 0 to 6656 [ 150.589610][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.598796][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.608966][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.619833][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.628685][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.637601][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.646496][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.655344][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.704994][ T6403] ldm_validate_partition_table(): Disk read failed. [ 150.713140][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.723102][ T6403] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.732883][ T6403] Dev loop6: unable to read RDB block 0 [ 150.741853][ T6403] loop6: unable to read partition table [ 150.749045][ T6403] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 151.313553][ T6396] bond2: (slave veth3): Enslaving as an active interface with a down link [ 152.208549][ T6409] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 152.320905][ T6391] bond2: (slave dummy0): making interface the new active one [ 152.402982][ T6391] dummy0: entered promiscuous mode [ 152.614776][ T6391] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 152.863720][ T6414] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.100519][ T6409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.111685][ T6391] syz.0.121 (6391) used greatest stack depth: 18328 bytes left [ 154.210015][ T6413] bond1: (slave dummy0): making interface the new active one [ 154.255086][ T6413] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 155.434536][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.627381][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.699318][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.406168][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.419449][ T10] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 156.428938][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.441306][ T10] usb 3-1: config 0 descriptor?? [ 156.998885][ T6451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.993922][ T10] chicony 0003:04F2:1236.0001: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.2-1/input0 [ 159.195658][ T5911] usb 3-1: USB disconnect, device number 5 [ 162.027777][ T6488] dvmrp1: entered allmulticast mode [ 165.064866][ T6518] netlink: 72 bytes leftover after parsing attributes in process `syz.0.155'. [ 165.314866][ T6524] netlink: 'syz.4.157': attribute type 10 has an invalid length. [ 165.323981][ T6525] netlink: 'syz.4.157': attribute type 10 has an invalid length. [ 165.449489][ T6525] team0: Port device wlan1 added [ 166.535155][ T6547] netlink: 2 bytes leftover after parsing attributes in process `syz.3.165'. [ 167.480662][ T6559] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 171.445351][ T6594] process 'syz.4.175' launched './file0' with NULL argv: empty string added [ 173.925514][ T6165] dummy0: left promiscuous mode [ 173.989294][ T6615] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 174.557098][ T6615] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 174.584248][ T6615] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 174.593066][ T6615] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.249354][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.259566][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.268835][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.278106][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.287367][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.296623][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.336162][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.345294][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.354525][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 178.364476][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 179.653469][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 180.376687][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 180.401559][ T5935] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 180.413294][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.507076][ T5935] usb 4-1: Product: syz [ 180.511332][ T5935] usb 4-1: Manufacturer: syz [ 180.545134][ T5935] usb 4-1: SerialNumber: syz [ 180.604825][ T5935] usb 4-1: config 0 descriptor?? [ 181.766518][ T5935] powermate: unknown product id 0240 [ 181.836736][ T5935] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 181.878714][ T6655] gre1: entered allmulticast mode [ 181.927533][ C1] powermate: config urb returned -71 [ 181.933300][ C1] powermate: config urb returned -71 [ 181.938847][ C1] powermate: config urb returned -71 [ 181.954003][ C1] powermate: config urb returned -71 [ 182.033851][ T5935] usb 4-1: USB disconnect, device number 2 [ 182.039797][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 186.218259][ T6704] mmap: syz.0.206 (6704) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.804965][ T6720] netlink: 'syz.3.211': attribute type 20 has an invalid length. [ 190.137490][ T6714] netlink: del zone limit has 4 unknown bytes [ 190.518486][ T6724] __nla_validate_parse: 47 callbacks suppressed [ 190.518502][ T6724] netlink: 48 bytes leftover after parsing attributes in process `syz.0.213'. [ 190.662485][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.857161][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.162601][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.262342][ T5911] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 192.035314][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.047182][ T5911] usb 2-1: config 0 descriptor?? [ 192.579997][ T5911] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 193.407450][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 193.704370][ T5911] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 193.828576][ T5911] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 193.863279][ T5911] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 193.909634][ T5911] usb 2-1: USB disconnect, device number 3 [ 193.974687][ T10] usb 3-1: config 6 has an invalid interface number: 14 but max is 0 [ 193.995570][ T10] usb 3-1: config 6 has no interface number 0 [ 194.001775][ T10] usb 3-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 194.004894][ T6750] fido_id[6750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 194.244724][ T10] usb 3-1: config 6 interface 14 has no altsetting 0 [ 194.896743][ T10] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 194.956749][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.972673][ T10] usb 3-1: Product: syz [ 194.981918][ T10] usb 3-1: Manufacturer: syz [ 194.986591][ T10] usb 3-1: SerialNumber: syz [ 195.182644][ T6764] netlink: 360 bytes leftover after parsing attributes in process `syz.1.224'. [ 195.446715][ T6767] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 195.463279][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.483815][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.561578][ T10] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 195.610789][ T10] command write [95] error -8 [ 195.635394][ T6767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.725495][ T10] usb 3-1: USB disconnect, device number 6 [ 195.875084][ T6772] bond1: (slave veth3): Enslaving as an active interface with a down link [ 196.198966][ T6773] bond1: (slave dummy0): making interface the new active one [ 196.532896][ T6773] dummy0: entered promiscuous mode [ 196.538572][ T6773] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 196.600938][ T6788] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 196.625466][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.227'. [ 198.015035][ T6801] netlink: 136 bytes leftover after parsing attributes in process `syz.2.231'. [ 198.024292][ T6801] netlink: 136 bytes leftover after parsing attributes in process `syz.2.231'. [ 199.440836][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 199.672536][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.685986][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.598075][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 200.905831][ T6823] Cannot find del_set index 2 as target [ 201.243827][ T6830] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 201.870870][ T6832] 9pnet_fd: Insufficient options for proto=fd [ 202.112410][ T6836] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 202.142455][ T6836] batman_adv: batadv0: Adding interface: ip6gretap1 [ 202.201114][ T6836] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.630566][ T6838] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 202.654511][ T6836] batman_adv: batadv0: Interface activated: ip6gretap1 [ 203.378606][ T6855] netlink: 128 bytes leftover after parsing attributes in process `syz.4.246'. [ 203.889470][ T5911] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.113541][ T6857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.239263][ T6859] capability: warning: `syz.3.248' uses deprecated v2 capabilities in a way that may be insecure [ 204.471563][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.658808][ T6862] fuse: Bad value for 'fd' [ 204.680720][ T5911] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 204.705637][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.733355][ T5911] usb 1-1: config 0 descriptor?? [ 204.978931][ T5911] usbhid 1-1:0.0: can't add hid device: -32 [ 205.013403][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 205.896806][ T6884] dvmrp1: entered allmulticast mode [ 206.381813][ T5911] usb 1-1: USB disconnect, device number 3 [ 206.496171][ T6889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 209.770458][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 209.960382][ T6920] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.131848][ T6919] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.157815][ T6919] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.165442][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 210.186874][ T6919] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.190151][ T24] usb 1-1: device descriptor read/64, error -71 [ 210.238049][ T6923] netlink: 'syz.3.268': attribute type 64 has an invalid length. [ 210.247156][ T6923] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 210.264410][ T6919] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 210.285725][ T6923] netlink: 152 bytes leftover after parsing attributes in process `syz.3.268'. [ 210.441971][ T6929] netlink: 100 bytes leftover after parsing attributes in process `syz.2.270'. [ 210.460358][ T6919] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 210.480089][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 210.590679][ T6919] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.630184][ T24] usb 1-1: device descriptor read/64, error -71 [ 210.639185][ T6919] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.649291][ T6919] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.669717][ T6931] netlink: 'syz.4.271': attribute type 2 has an invalid length. [ 210.672757][ T6919] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.701336][ T6931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.271'. [ 210.732378][ T6919] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.750638][ T24] usb usb1-port1: attempt power cycle [ 210.901127][ T6936] tipc: Started in network mode [ 210.938495][ T6936] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 210.962390][ T6936] tipc: Enabled bearer , priority 0 [ 211.120101][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.166684][ T24] usb 1-1: device descriptor read/8, error -71 [ 212.154330][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.185669][ T10] tipc: Node number set to 11578026 [ 212.331502][ T24] usb 1-1: device descriptor read/8, error -71 [ 212.356783][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 212.452061][ T6952] vlan2: entered promiscuous mode [ 212.464966][ T24] usb usb1-port1: unable to enumerate USB device [ 212.495825][ T6952] batadv0: entered promiscuous mode [ 212.713671][ T6456] dummy0: left promiscuous mode [ 217.257147][ T7002] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 217.546619][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 217.553852][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 217.561175][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 217.567279][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 217.577480][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 217.611263][ T7005] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 218.587354][ T7005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.946576][ T7014] bond1: (slave dummy0): making interface the new active one [ 219.957076][ T7014] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 219.973595][ T7024] veth0_to_team: entered promiscuous mode [ 219.984355][ T7024] veth0_to_team: entered allmulticast mode [ 220.217791][ T7035] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 222.234569][ T7030] bridge2: entered promiscuous mode [ 222.250369][ T7030] bridge2: entered allmulticast mode [ 223.373863][ T7030] team0: Port device bridge2 added [ 224.247356][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 224.588269][ T44] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 225.850345][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.114722][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.123833][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 226.134787][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 226.154050][ T44] usb 1-1: string descriptor 0 read error: -22 [ 226.160738][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.175835][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.275497][ T44] usb 1-1: 0:2 : does not exist [ 226.415091][ T7092] comedi comedi0: Minor 3 could not be opened [ 227.012042][ T44] usb 1-1: USB disconnect, device number 8 [ 227.747681][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 227.827304][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.321'. [ 228.187017][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 228.339993][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.544162][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.982213][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.051208][ T7109] netlink: 100 bytes leftover after parsing attributes in process `syz.2.324'. [ 230.204259][ T7107] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 230.242061][ T10] usb 5-1: unable to read config index 1 descriptor/start: -71 [ 230.259403][ T7112] netlink: 'syz.3.322': attribute type 10 has an invalid length. [ 230.305288][ T7112] team0: Port device wlan1 added [ 230.428006][ T10] usb 5-1: can't read configurations, error -71 [ 230.937842][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 231.530400][ T24] usb 3-1: device descriptor read/64, error -71 [ 231.817430][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.990247][ T24] usb 3-1: device descriptor read/64, error -71 [ 232.118402][ T7137] netlink: 44 bytes leftover after parsing attributes in process `syz.1.332'. [ 232.296184][ T24] usb usb3-port1: attempt power cycle [ 232.837669][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 233.447996][ T24] usb 3-1: device descriptor read/8, error -71 [ 233.451460][ T7141] virt_wifi0 speed is unknown, defaulting to 1000 [ 233.687197][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 233.688760][ T7148] loop8: detected capacity change from 0 to 8 [ 233.774360][ T5965] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 233.793499][ T5965] loop8: p1 start 3674210304 is beyond EOD, truncated [ 233.800566][ T5965] loop8: p2 start 2946521549 is beyond EOD, truncated [ 233.807730][ T5965] loop8: p3 start 3210040201 is beyond EOD, truncated [ 233.814912][ T5965] loop8: p4 start 2187423751 is beyond EOD, truncated [ 233.822183][ T5965] loop8: p5 start 1210360614 is beyond EOD, truncated [ 233.829247][ T5965] loop8: p6 start 4163130221 is beyond EOD, truncated [ 233.836388][ T5965] loop8: p7 start 65302515 is beyond EOD, truncated [ 233.871491][ T5965] loop8: p8 start 365161308 is beyond EOD, truncated [ 233.899588][ T5965] loop8: p9 start 986802111 is beyond EOD, truncated [ 233.912682][ T24] usb 3-1: device descriptor read/8, error -71 [ 233.982765][ T7148] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 234.011456][ T7148] loop8: p1 start 3674210304 is beyond EOD, truncated [ 234.031924][ T7148] loop8: p2 start 2946521549 is beyond EOD, truncated [ 234.040416][ T7148] loop8: p3 start 3210040201 is beyond EOD, truncated [ 234.040610][ T24] usb usb3-port1: unable to enumerate USB device [ 234.057381][ T7152] fuse: Bad value for 'fd' [ 234.063618][ T7148] loop8: p4 start 2187423751 is beyond EOD, truncated [ 234.094752][ T7148] loop8: p5 start 1210360614 is beyond EOD, truncated [ 234.120914][ T7148] loop8: p6 start 4163130221 is beyond EOD, truncated [ 234.227056][ T7148] loop8: p7 start 65302515 is beyond EOD, truncated [ 234.305931][ T7148] loop8: p8 start 365161308 is beyond EOD, truncated [ 234.313745][ T7148] loop8: p9 start 986802111 is beyond EOD, truncated [ 237.162100][ T7182] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 238.233731][ T7187] netlink: 'syz.1.347': attribute type 10 has an invalid length. [ 238.285999][ T7187] netdevsim netdevsim1 : entered promiscuous mode [ 238.315565][ T7187] netdevsim netdevsim1 : entered allmulticast mode [ 238.340020][ T7187] bond0: (slave ): Enslaving as an active interface with an up link [ 238.393899][ T7192] FAULT_INJECTION: forcing a failure. [ 238.393899][ T7192] name failslab, interval 1, probability 0, space 0, times 1 [ 238.467147][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.2.349 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 238.467178][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.467192][ T7192] Call Trace: [ 238.467201][ T7192] [ 238.467210][ T7192] dump_stack_lvl+0x189/0x250 [ 238.467254][ T7192] ? __pfx____ratelimit+0x10/0x10 [ 238.467277][ T7192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.467302][ T7192] ? __pfx__printk+0x10/0x10 [ 238.467337][ T7192] ? __pfx___might_resched+0x10/0x10 [ 238.467358][ T7192] ? fs_reclaim_acquire+0x7d/0x100 [ 238.467390][ T7192] should_fail_ex+0x414/0x560 [ 238.467419][ T7192] should_failslab+0xa8/0x100 [ 238.467444][ T7192] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 238.467468][ T7192] ? __kthread_create_on_node+0x1c6/0x3e0 [ 238.467500][ T7192] kvasprintf+0xdc/0x190 [ 238.467533][ T7192] ? __pfx_kvasprintf+0x10/0x10 [ 238.467565][ T7192] ? __kasan_kmalloc+0x93/0xb0 [ 238.467589][ T7192] ? __kthread_create_on_node+0xef/0x3e0 [ 238.467628][ T7192] __kthread_create_on_node+0x1c6/0x3e0 [ 238.467659][ T7192] ? __pfx___kthread_create_on_node+0x10/0x10 [ 238.467701][ T7192] ? __pfx_cec_config_thread_func+0x10/0x10 [ 238.467729][ T7192] ? __pfx_cec_config_thread_func+0x10/0x10 [ 238.467757][ T7192] kthread_create_on_node+0xdd/0x130 [ 238.467783][ T7192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.467814][ T7192] ? __pfx_kthread_create_on_node+0x10/0x10 [ 238.467842][ T7192] ? __raw_spin_lock_init+0x45/0x100 [ 238.467872][ T7192] ? __init_swait_queue_head+0xa9/0x150 [ 238.467906][ T7192] cec_claim_log_addrs+0x131/0x310 [ 238.467936][ T7192] __cec_s_log_addrs+0x15bc/0x1fe0 [ 238.467978][ T7192] cec_ioctl+0x20ef/0x2f20 [ 238.468016][ T7192] ? __pfx_cec_ioctl+0x10/0x10 [ 238.468042][ T7192] ? do_vfs_ioctl+0xf37/0x1990 [ 238.468078][ T7192] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 238.468119][ T7192] ? kasan_quarantine_put+0xdd/0x220 [ 238.468168][ T7192] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 238.468194][ T7192] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 238.468217][ T7192] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 238.468239][ T7192] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 238.468263][ T7192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.468284][ T7192] ? smack_log+0xef/0x3f0 [ 238.468317][ T7192] ? __pfx_smack_log+0x10/0x10 [ 238.468346][ T7192] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 238.468377][ T7192] ? smk_access+0x14c/0x4e0 [ 238.468426][ T7192] ? smack_file_ioctl+0x2a9/0x340 [ 238.468450][ T7192] ? __pfx_smack_file_ioctl+0x10/0x10 [ 238.468483][ T7192] ? __fget_files+0x2a/0x420 [ 238.468506][ T7192] ? __fget_files+0x3a0/0x420 [ 238.468529][ T7192] ? __fget_files+0x2a/0x420 [ 238.468557][ T7192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.468583][ T7192] ? __pfx_cec_ioctl+0x10/0x10 [ 238.468615][ T7192] __se_sys_ioctl+0xfc/0x170 [ 238.468651][ T7192] do_syscall_64+0xfa/0x3b0 [ 238.468674][ T7192] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.468696][ T7192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.468716][ T7192] ? clear_bhb_loop+0x60/0xb0 [ 238.468742][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.468761][ T7192] RIP: 0033:0x7f6c8098ebe9 [ 238.468786][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.468803][ T7192] RSP: 002b:00007f6c8172b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.468826][ T7192] RAX: ffffffffffffffda RBX: 00007f6c80bb5fa0 RCX: 00007f6c8098ebe9 [ 238.468842][ T7192] RDX: 0000200000000140 RSI: 00000000c05c6104 RDI: 0000000000000009 [ 238.468856][ T7192] RBP: 00007f6c8172b090 R08: 0000000000000000 R09: 0000000000000000 [ 238.468869][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.468882][ T7192] R13: 00007f6c80bb6038 R14: 00007f6c80bb5fa0 R15: 00007fff3ae76038 [ 238.468917][ T7192] [ 239.365441][ T7201] Can't find ip_set type b tmap:ip [ 239.455543][ T7207] fuse: Bad value for 'fd' [ 239.551255][ T7208] veth0_to_team: entered promiscuous mode [ 239.569649][ T7208] veth0_to_team: entered allmulticast mode [ 240.276394][ T980] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 240.549323][ T980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.613693][ T980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.631547][ T980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 240.704704][ T7229] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 241.149536][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.182582][ T980] usb 1-1: SerialNumber: syz [ 241.234972][ T980] usb 1-1: bad CDC descriptors [ 241.266826][ T980] usb-storage 1-1:1.0: USB Mass Storage device detected [ 241.363817][ T980] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 242.212625][ T980] scsi host1: usb-storage 1-1:1.0 [ 242.275423][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 242.293023][ T7242] ip6gretap0: entered promiscuous mode [ 242.330956][ T7242] ip6gretap0: left promiscuous mode [ 242.366605][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 243.028377][ T7252] xt_TPROXY: Can be used only with -p tcp or -p udp [ 243.902029][ T7259] IPv6: addrconf: prefix option has invalid lifetime [ 246.615754][ T7281] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 246.948011][ T7283] netlink: 'syz.3.373': attribute type 20 has an invalid length. [ 246.958697][ T980] usb 1-1: USB disconnect, device number 9 [ 247.539638][ T7286] x_tables: duplicate underflow at hook 2 [ 248.148554][ T7289] tipc: Started in network mode [ 248.163982][ T7289] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 248.201332][ T7289] tipc: Enabled bearer , priority 0 [ 249.327684][ T980] tipc: Node number set to 11578026 [ 250.495114][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 250.574866][ T7322] dvmrp1: entered allmulticast mode [ 250.667515][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 250.702547][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.745966][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 250.805571][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.836512][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 250.860331][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.892013][ T10] usb 3-1: config 0 descriptor?? [ 250.922013][ T7316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.952264][ T10] hub 3-1:0.0: USB hub found [ 251.196559][ T7327] netlink: 'syz.4.388': attribute type 10 has an invalid length. [ 251.531447][ T10] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 251.913231][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 251.948694][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 252.003711][ T10] usb 3-1: USB disconnect, device number 11 [ 254.635168][ T7347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.394'. [ 255.237661][ T7351] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 255.370851][ T7351] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 255.634213][ T7366] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.722337][ T980] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 255.773434][ T980] hid-generic 0000:FFFFFFFF:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.836266][ T7383] dvmrp1: entered allmulticast mode [ 257.860049][ T7391] netlink: 'syz.4.405': attribute type 20 has an invalid length. [ 257.989762][ T7391] dvmrp17: entered allmulticast mode [ 258.395853][ T7396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.203546][ T7407] IPv6: addrconf: prefix option has invalid lifetime [ 260.282066][ T7409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.098979][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.122035][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.303878][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 261.623820][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.636939][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.450573][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 262.468988][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.479818][ T10] usb 3-1: SerialNumber: syz [ 262.515821][ T10] usb 3-1: bad CDC descriptors [ 262.542317][ T10] usb-storage 3-1:1.0: USB Mass Storage device detected [ 262.629430][ T7433] x_tables: duplicate underflow at hook 2 [ 263.134628][ T10] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 263.385797][ T10] scsi host1: usb-storage 3-1:1.0 [ 263.768243][ T7440] macvlan3: entered allmulticast mode [ 263.781044][ T7440] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 263.790106][ T7440] bridge0: port 4(macvlan3) entered blocking state [ 263.798739][ T7440] bridge0: port 4(macvlan3) entered disabled state [ 263.980843][ T7440] macvlan3: entered promiscuous mode [ 264.072030][ T7440] bridge0: port 4(macvlan3) entered blocking state [ 264.079805][ T7440] bridge0: port 4(macvlan3) entered forwarding state [ 264.675097][ T980] usb 3-1: USB disconnect, device number 12 [ 264.924226][ T7451] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 266.005045][ T7450] veth0_to_bridge: entered promiscuous mode [ 266.101238][ T7450] geneve2: entered promiscuous mode [ 266.203387][ T7450] geneve2: entered allmulticast mode [ 267.410269][ T7449] veth0_to_bridge: left promiscuous mode [ 270.356321][ T7488] netlink: 'syz.1.434': attribute type 3 has an invalid length. [ 270.460280][ T7489] xt_TCPMSS: Only works on TCP SYN packets [ 271.237099][ T7488] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.434'. [ 273.267726][ T7507] can0: slcan on ttyS3. [ 273.694356][ T7507] can0 (unregistered): slcan off ttyS3. [ 274.383894][ T7520] netlink: 48 bytes leftover after parsing attributes in process `syz.3.443'. [ 275.063581][ T7529] tmpfs: Bad value for 'mpol' [ 275.140230][ T7525] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.320247][ T7529] bridge3: entered promiscuous mode [ 276.326306][ T7529] bridge3: entered allmulticast mode [ 276.366588][ T7529] team0: Port device bridge3 added [ 279.310100][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 279.326800][ T7556] afs: Unknown parameter 'dynort1' [ 282.666550][ T7581] tipc: Started in network mode [ 282.686609][ T7581] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 282.741674][ T7581] tipc: Enabled bearer , priority 0 [ 283.872194][ T980] tipc: Node number set to 11578026 [ 283.966611][ T7592] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 283.988195][ T7592] overlayfs: failed to set xattr on upper [ 283.997666][ T7592] overlayfs: ...falling back to index=off. [ 284.004573][ T7592] overlayfs: ...falling back to uuid=null. [ 284.583098][ T7601] veth0_to_bridge: entered promiscuous mode [ 284.598518][ T7601] geneve2: entered promiscuous mode [ 284.605937][ T7601] geneve2: entered allmulticast mode [ 284.677195][ T7600] veth0_to_bridge: left promiscuous mode [ 291.379633][ T7636] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 291.434946][ T7636] syz.4.480: attempt to access beyond end of device [ 291.434946][ T7636] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 291.488191][ T7643] usb usb6: usbfs: process 7643 (syz.1.481) did not claim interface 46 before use [ 291.497835][ T7636] exFAT-fs (nbd4): unable to read boot sector [ 291.497869][ T7636] exFAT-fs (nbd4): failed to read boot sector [ 291.497880][ T7636] exFAT-fs (nbd4): failed to recognize exfat type [ 291.547947][ T7636] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 291.574507][ T7645] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 291.590482][ T977] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 291.610876][ T7645] bond0: (slave lo): Error: Device can not be enslaved while up [ 291.777659][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 291.930338][ T5932] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 292.259204][ T977] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 292.264329][ T10] hid-generic 0000:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 292.287029][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 292.345365][ T977] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 292.380319][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.399593][ T10] hid-generic 0000:FFFFFFFF:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.424616][ T977] usb 4-1: Product: syz [ 292.456029][ T5932] usb 1-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 292.476025][ T977] usb 4-1: Manufacturer: syz [ 292.497893][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 292.506539][ T977] usb 4-1: SerialNumber: syz [ 292.520453][ T5932] usb 1-1: Product: syz [ 292.525253][ T5932] usb 1-1: Manufacturer: syz [ 292.541874][ T5932] usb 1-1: SerialNumber: syz [ 292.577956][ T5932] usb 1-1: config 0 descriptor?? [ 292.590372][ T977] usb 4-1: config 0 descriptor?? [ 292.597216][ T7638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.620460][ T7638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.634127][ T5932] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 292.664295][ T5932] dvb-usb: bulk message failed: -22 (4/0) [ 292.681780][ T977] usb 4-1: ucan: probing device on interface #0 [ 292.697754][ T5932] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 292.742969][ T7654] fido_id[7654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 292.756877][ T5932] dvb-usb: bulk message failed: -22 (5/0) [ 292.770026][ T5932] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 292.803687][ T5932] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 292.891086][ T5932] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 292.940097][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 293.049044][ T7663] Illegal XDP return value 4294967282 on prog (id 133) dev N/A, expect packet loss! [ 293.110179][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 293.133366][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 293.179305][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.312917][ T977] ucan 4-1:0.0: probe with driver ucan failed with error -22 [ 293.427049][ T10] usb 3-1: config 0 descriptor?? [ 293.711716][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.731585][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.365857][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 295.654567][ T7674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.230716][ T5911] usb 1-1: USB disconnect, device number 10 [ 296.384060][ T980] usb 4-1: USB disconnect, device number 3 [ 296.490885][ T7673] ip6gretap0: entered promiscuous mode [ 297.026625][ T7673] ip6gretap0: left promiscuous mode [ 297.717419][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 297.764840][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 298.090336][ T5932] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 298.090603][ T10] usb 3-1: USB disconnect, device number 13 [ 298.499778][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 298.508716][ T5932] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 298.552149][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.573961][ T7683] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 298.594514][ T5932] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 298.645079][ T5932] usb 1-1: config 1 has no interface number 1 [ 298.676378][ T5932] usb 1-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.678214][ T7683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.706469][ T7688] input: syz0 as /devices/virtual/input/input6 [ 298.751712][ T5932] usb 1-1: config 1 interface 242 has no altsetting 0 [ 298.798033][ T5932] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 298.817336][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.832400][ T5932] usb 1-1: Product: syz [ 298.839016][ T5932] usb 1-1: Manufacturer: syz [ 298.843605][ T10] hid-generic 0000:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 298.846913][ T5932] usb 1-1: SerialNumber: syz [ 298.896476][ T10] hid-generic 0000:FFFFFFFF:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.900864][ T7690] bond2: (slave veth3): Enslaving as an active interface with a down link [ 299.007548][ T7683] bond1: (slave dummy0): Releasing active interface [ 299.040321][ T7683] bond2: (slave dummy0): making interface the new active one [ 299.055332][ T7683] dummy0: entered promiscuous mode [ 299.062748][ T7683] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 299.281563][ T5932] aqc111 1-1:1.242: probe with driver aqc111 failed with error -22 [ 299.434197][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 299.490266][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 299.545410][ T7710] netlink: 'syz.4.505': attribute type 64 has an invalid length. [ 299.557616][ T7710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.505'. [ 299.659244][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 299.668681][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 299.678672][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.689557][ T24] usb 4-1: Product: syz [ 299.693917][ T24] usb 4-1: Manufacturer: syz [ 299.698664][ T24] usb 4-1: SerialNumber: syz [ 299.708335][ T24] usb 4-1: config 0 descriptor?? [ 299.723679][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 299.734158][ T24] usb 4-1: Detected FT-X [ 299.809415][ T5932] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 299.869315][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 300.019185][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 300.038339][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 300.062863][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.092283][ T10] usb 2-1: Product: syz [ 300.101382][ T10] usb 2-1: Manufacturer: syz [ 300.115197][ T10] usb 2-1: SerialNumber: syz [ 300.125349][ T10] usb 2-1: config 0 descriptor?? [ 300.136785][ T10] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 300.179435][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 300.763523][ T10] gspca_sn9c2028: read1 error -32 [ 300.771410][ T10] gspca_sn9c2028: read1 error -32 [ 300.913487][ T10] gspca_sn9c2028: read1 error -32 [ 300.918795][ T10] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -32 [ 300.969328][ T5897] usb 1-1: USB disconnect, device number 11 [ 301.212067][ T5897] usb 2-1: USB disconnect, device number 4 [ 301.448683][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 301.460708][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.472834][ T5932] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 301.502982][ T5932] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 301.519119][ T5932] usb 5-1: can't read configurations, error -71 [ 303.318642][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 303.448176][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 303.479647][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 303.590058][ T977] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 303.630235][ T7743] syzkaller0: entered promiscuous mode [ 303.635909][ T7743] syzkaller0: entered allmulticast mode [ 303.823509][ T5897] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 303.833354][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.833479][ T5846] usb 4-1: USB disconnect, device number 4 [ 303.841804][ T5897] usb 2-1: Product: syz [ 303.841830][ T5897] usb 2-1: Manufacturer: syz [ 303.841846][ T5897] usb 2-1: SerialNumber: syz [ 303.915541][ T7748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.514'. [ 304.017201][ T5846] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 304.103712][ T5846] ftdi_sio 4-1:0.0: device disconnected [ 304.688639][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 304.703833][ T5897] usb 2-1: config 0 descriptor?? [ 304.805903][ T977] usb 1-1: device descriptor read/all, error -71 [ 304.821311][ T5897] usb 2-1: can't set config #0, error -71 [ 304.867124][ T5897] usb 2-1: USB disconnect, device number 5 [ 306.212172][ T7764] netlink: 104 bytes leftover after parsing attributes in process `syz.1.519'. [ 306.432267][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.456505][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.660543][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 308.801267][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 308.878566][ T5897] usb 2-1: config 2 has an invalid interface number: 206 but max is 0 [ 308.943376][ T5897] usb 2-1: config 2 has no interface number 0 [ 309.011829][ T5897] usb 2-1: config 2 interface 206 has no altsetting 0 [ 309.064716][ T5897] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=b1.2a [ 309.166368][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.648789][ T5897] usb 2-1: can't set config #2, error -71 [ 309.908798][ T5897] usb 2-1: USB disconnect, device number 6 [ 311.774452][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 312.734087][ T7750] netlink: 'syz.2.515': attribute type 29 has an invalid length. [ 312.786309][ T7804] netlink: 6 bytes leftover after parsing attributes in process `syz.1.529'. [ 312.804692][ T7804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.348135][ T5897] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 313.596019][ T5897] usb 5-1: too many configurations: 227, using maximum allowed: 8 [ 314.149626][ T5897] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 314.179522][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.232341][ T5897] usb 5-1: config 0 descriptor?? [ 314.274007][ T5897] pwc: Samsung MPC-C10 USB webcam detected. [ 314.300714][ T5897] pwc: Warning: more than 1 configuration available. [ 314.659789][ T7823] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 314.667761][ T7823] netlink: 224 bytes leftover after parsing attributes in process `syz.2.537'. [ 314.688057][ T7828] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 315.505604][ T7828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.519609][ T5897] pwc: send_video_command error -71 [ 315.529613][ T5897] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 316.280542][ T7834] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 316.289805][ T7834] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 316.536421][ T5897] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 316.572102][ T5897] usb 5-1: USB disconnect, device number 7 [ 316.660157][ T7837] veth3: entered promiscuous mode [ 316.672787][ T7837] veth3: entered allmulticast mode [ 316.736733][ T7837] bond2: (slave veth3): Enslaving as an active interface with a down link [ 317.406530][ T7828] bond1: (slave dummy0): Releasing active interface [ 317.855108][ T7828] bond2: (slave dummy0): making interface the new active one [ 317.905793][ T7828] dummy0: entered promiscuous mode [ 317.912742][ T7828] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 318.054209][ T13] dummy0: left promiscuous mode [ 318.102039][ T7856] netlink: 360 bytes leftover after parsing attributes in process `syz.0.545'. [ 318.789676][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 318.887486][ T7867] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.442503][ T7879] veth0_to_bridge: entered promiscuous mode [ 319.491749][ T7879] geneve2: entered promiscuous mode [ 319.534289][ T7879] geneve2: entered allmulticast mode [ 319.604866][ T7878] veth0_to_bridge: left promiscuous mode [ 321.363484][ T7907] netlink: 'syz.3.557': attribute type 29 has an invalid length. [ 321.415721][ T7911] netlink: 'syz.3.557': attribute type 29 has an invalid length. [ 322.525519][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.537467][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.039476][ T7923] tty tty21: ldisc open failed (-12), clearing slot 20 [ 324.092281][ T7927] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 324.117571][ T7927] batman_adv: batadv0: Adding interface: ip6gretap1 [ 324.124485][ T7927] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.328710][ T7927] batman_adv: batadv0: Interface activated: ip6gretap1 [ 325.504256][ T7936] netlink: 'syz.2.568': attribute type 4 has an invalid length. [ 326.670526][ T7940] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 326.705115][ T7937] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 326.747604][ T7937] macvtap1: entered allmulticast mode [ 326.768095][ T7937] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 326.928555][ T7937] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 326.936214][ T7937] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 327.138908][ T7934] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 327.146576][ T7934] macvtap1: entered allmulticast mode [ 327.151988][ T7934] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 327.249910][ T7934] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 327.257260][ T7934] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 329.754218][ T7974] bridge1: entered promiscuous mode [ 329.764068][ T7974] bridge1: entered allmulticast mode [ 329.784604][ T7974] team0: Port device bridge1 added [ 331.647561][ T5978] IPVS: starting estimator thread 0... [ 331.785964][ T7985] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 332.357145][ T7989] IPVS: using max 26 ests per chain, 62400 per kthread [ 335.813156][ T8023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.761601][ T8024] overlayfs: failed to resolve './file0': -2 [ 337.043010][ T6457] dummy0: left promiscuous mode [ 338.025581][ T8042] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 338.025747][ T8042] FAULT_INJECTION: forcing a failure. [ 338.025747][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 338.025859][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.3.597 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 338.025883][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.025910][ T8042] Call Trace: [ 338.025918][ T8042] [ 338.025927][ T8042] dump_stack_lvl+0x189/0x250 [ 338.025955][ T8042] ? __pfx____ratelimit+0x10/0x10 [ 338.025977][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.026001][ T8042] ? __pfx__printk+0x10/0x10 [ 338.026042][ T8042] should_fail_ex+0x414/0x560 [ 338.026070][ T8042] _copy_to_user+0x31/0xb0 [ 338.026101][ T8042] simple_read_from_buffer+0xe1/0x170 [ 338.026129][ T8042] proc_fail_nth_read+0x1df/0x250 [ 338.026159][ T8042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.026186][ T8042] ? rw_verify_area+0x258/0x650 [ 338.026210][ T8042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.026230][ T8042] vfs_read+0x200/0x980 [ 338.026258][ T8042] ? __pfx___mutex_lock+0x10/0x10 [ 338.026283][ T8042] ? __pfx_vfs_read+0x10/0x10 [ 338.026308][ T8042] ? __fget_files+0x2a/0x420 [ 338.026330][ T8042] ? __fget_files+0x3a0/0x420 [ 338.026346][ T8042] ? __fget_files+0x2a/0x420 [ 338.026370][ T8042] ksys_read+0x145/0x250 [ 338.026385][ T8042] ? __pfx_ksys_read+0x10/0x10 [ 338.026397][ T8042] ? rcu_is_watching+0x15/0xb0 [ 338.026419][ T8042] ? do_syscall_64+0xbe/0x3b0 [ 338.026439][ T8042] do_syscall_64+0xfa/0x3b0 [ 338.026457][ T8042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.026471][ T8042] ? asm_sysvec_call_function_single+0x1a/0x20 [ 338.026487][ T8042] ? clear_bhb_loop+0x60/0xb0 [ 338.026505][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.026520][ T8042] RIP: 0033:0x7f5702b8d5fc [ 338.026534][ T8042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 338.026547][ T8042] RSP: 002b:00007f5703948030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.026563][ T8042] RAX: ffffffffffffffda RBX: 00007f5702db6090 RCX: 00007f5702b8d5fc [ 338.026576][ T8042] RDX: 000000000000000f RSI: 00007f57039480a0 RDI: 0000000000000005 [ 338.026586][ T8042] RBP: 00007f5703948090 R08: 0000000000000000 R09: 0000000000000000 [ 338.026595][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.026604][ T8042] R13: 00007f5702db6128 R14: 00007f5702db6090 R15: 00007ffc1edaa048 [ 338.026628][ T8042] [ 338.924211][ T8047] ip6tnl1: entered promiscuous mode [ 338.952772][ T8047] ip6tnl1: entered allmulticast mode [ 339.936658][ T5978] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 340.115595][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 340.124673][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 340.136148][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 340.160687][ T5978] usb 4-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7 [ 340.170019][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.208903][ T5978] usb 4-1: Product: syz [ 340.213230][ T5978] usb 4-1: Manufacturer: syz [ 340.225294][ T5978] usb 4-1: SerialNumber: syz [ 340.245308][ T5978] usb 4-1: config 0 descriptor?? [ 340.488866][ T8072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.944564][ T5978] usb 4-1: USB disconnect, device number 5 [ 342.133390][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.642047][ T8096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 345.716187][ T5846] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 346.191240][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.259682][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.289774][ T5846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 346.511973][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 346.545206][ T5846] usb 1-1: SerialNumber: syz [ 346.824753][ T8119] netlink: 48 bytes leftover after parsing attributes in process `syz.4.621'. [ 346.866071][ T5846] usb 1-1: bad CDC descriptors [ 346.866750][ T5846] usb-storage 1-1:1.0: USB Mass Storage device detected [ 346.879750][ T5846] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 346.899439][ T5846] scsi host1: usb-storage 1-1:1.0 [ 347.526311][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.617'. [ 348.619741][ T8134] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 349.830650][ T8144] overlayfs: failed to resolve './file0': -2 [ 350.468376][ T5846] usb 1-1: USB disconnect, device number 14 [ 351.250226][ T8164] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 351.356814][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 354.728988][ T8197] xt_hashlimit: size too large, truncated to 1048576 [ 355.129291][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 355.742807][ T5932] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 355.822763][ T5897] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 355.932812][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 355.940792][ T5932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.968089][ T5932] usb 3-1: config index 0 descriptor too short (expected 65534, got 116) [ 355.996020][ T5897] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 355.996071][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.996097][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 355.996143][ T5897] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 355.996177][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.000092][ T5897] usb 2-1: config 0 descriptor?? [ 356.003273][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.003336][ T5932] usb 3-1: config 1 interface 1 has no altsetting 0 [ 356.015238][ T5932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.015298][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.015322][ T5932] usb 3-1: Product: Є [ 356.015341][ T5932] usb 3-1: Manufacturer: Ў [ 356.015358][ T5932] usb 3-1: SerialNumber: ⫕熃鹞詅阷᢫Ҩ񹝋࿵ɿﮜ郡갿␡慞 [ 356.279516][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 356.284162][ T5932] usb 3-1: selecting invalid altsetting 0 [ 356.284297][ T5932] usb 3-1: selecting invalid altsetting 0 [ 356.284413][ T5932] cdc_ncm 3-1:1.0: bind() failure [ 356.303968][ T5932] usb 3-1: selecting invalid altsetting 0 [ 356.304165][ T5932] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -22 [ 356.304519][ T5932] usb 3-1: selecting invalid altsetting 0 [ 356.304566][ T5932] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -22 [ 356.305523][ T5932] usb 3-1: selecting invalid altsetting 0 [ 356.305578][ T5932] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 356.366701][ T5932] usb 3-1: USB disconnect, device number 14 [ 356.447881][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 356.915139][ T5897] holtek_kbd 0003:04D9:A055.0006: item fetching failed at offset 5/7 [ 356.916149][ T5897] holtek_kbd 0003:04D9:A055.0006: probe with driver holtek_kbd failed with error -22 [ 356.993023][ T44] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 356.993048][ T44] usb 5-1: config 179 has no interface number 0 [ 356.993078][ T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 356.993105][ T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 356.993127][ T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 356.993147][ T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 356.993167][ T44] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 356.993187][ T44] usb 5-1: config 179 interface 65 has no altsetting 0 [ 356.993212][ T44] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 356.993230][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.313908][ T44] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 357.355969][ T5192] input input9: unable to receive magic message: -110 [ 357.564993][ T5192] input input9: unable to receive magic message: -32 [ 357.583986][ T5192] input input9: unable to receive magic message: -32 [ 357.592069][ T5192] input input9: unable to receive magic message: -32 [ 358.588828][ T8237] IPv6: addrconf: prefix option has invalid lifetime [ 358.638236][ T5192] input input9: unable to receive magic message: -32 [ 358.683325][ T5918] input input9: unable to receive magic message: -32 [ 358.748330][ T5192] input input9: unable to receive magic message: -32 [ 358.771422][ T5192] input input9: unable to receive magic message: -32 [ 359.456601][ T5932] usb 2-1: USB disconnect, device number 7 [ 359.558258][ T8245] FAULT_INJECTION: forcing a failure. [ 359.558258][ T8245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.558408][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: syz.0.656 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 359.558435][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.558448][ T8245] Call Trace: [ 359.558456][ T8245] [ 359.558465][ T8245] dump_stack_lvl+0x189/0x250 [ 359.558496][ T8245] ? __pfx____ratelimit+0x10/0x10 [ 359.558519][ T8245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.558544][ T8245] ? __pfx__printk+0x10/0x10 [ 359.558572][ T8245] ? __might_fault+0xb0/0x130 [ 359.558606][ T8245] should_fail_ex+0x414/0x560 [ 359.558635][ T8245] _copy_from_user+0x2d/0xb0 [ 359.558667][ T8245] __sys_bpf+0x1ed/0x860 [ 359.558702][ T8245] ? __pfx___sys_bpf+0x10/0x10 [ 359.558758][ T8245] ? irqentry_exit+0x74/0x90 [ 359.558791][ T8245] __x64_sys_bpf+0x7c/0x90 [ 359.558821][ T8245] do_syscall_64+0xfa/0x3b0 [ 359.558847][ T8245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.558868][ T8245] ? asm_sysvec_call_function_single+0x1a/0x20 [ 359.558890][ T8245] ? clear_bhb_loop+0x60/0xb0 [ 359.558916][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.558936][ T8245] RIP: 0033:0x7f2a6038ebe9 [ 359.558953][ T8245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.558970][ T8245] RSP: 002b:00007f2a61128038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.558994][ T8245] RAX: ffffffffffffffda RBX: 00007f2a605b6090 RCX: 00007f2a6038ebe9 [ 359.559009][ T8245] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 359.559022][ T8245] RBP: 00007f2a61128090 R08: 0000000000000000 R09: 0000000000000000 [ 359.559035][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.559046][ T8245] R13: 00007f2a605b6128 R14: 00007f2a605b6090 R15: 00007fff837a5458 [ 359.559077][ T8245] [ 360.997247][ T8220] tty tty29: ldisc open failed (-12), clearing slot 28 [ 361.274066][ T5846] usb 5-1: USB disconnect, device number 8 [ 361.274199][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 362.310933][ T8266] 9pnet_fd: Insufficient options for proto=fd [ 362.358233][ T8266] netlink: 292 bytes leftover after parsing attributes in process `syz.4.663'. [ 362.378418][ T8269] veth0_to_bridge: entered promiscuous mode [ 362.642021][ T5897] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 362.881914][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 362.882217][ T8272] geneve3: entered promiscuous mode [ 362.941852][ T8272] geneve3: entered allmulticast mode [ 362.946108][ T5897] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 362.979066][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 363.006262][ T5897] usb 5-1: config 0 has no interface number 0 [ 363.016385][ T5897] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 363.023807][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.028741][ T5897] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 363.057135][ T5897] usb 5-1: config 0 interface 41 has no altsetting 0 [ 363.075067][ T5897] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 363.085945][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.094677][ T5897] usb 5-1: Product: syz [ 363.099437][ T5897] usb 5-1: Manufacturer: syz [ 363.124574][ T5897] usb 5-1: SerialNumber: syz [ 363.146547][ T5897] usb 5-1: config 0 descriptor?? [ 363.159215][ T8266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.172497][ T8266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.221019][ T8275] bridge_slave_1 (unregistering): left allmulticast mode [ 363.233437][ T8275] bridge_slave_1 (unregistering): left promiscuous mode [ 363.240562][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.263551][ T8268] veth0_to_bridge: left promiscuous mode [ 363.400373][ T8266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.431914][ T8266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.570938][ T8283] loop2: detected capacity change from 0 to 7 [ 363.599909][ T5918] loop2: [ 363.606116][ T5918] loop2: partition table partially beyond EOD, truncated [ 363.680667][ T8283] loop2: [ 363.688737][ T8283] loop2: partition table partially beyond EOD, truncated [ 363.921981][ T8288] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 364.684652][ T5897] Error reading MAC address [ 364.706955][ T5897] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 364.984868][ T5897] usb 5-1: USB disconnect, device number 9 [ 369.337859][ T30] audit: type=1326 audit(1755689896.459:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8098ebe9 code=0x0 [ 369.338355][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 371.698166][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 371.803595][ T8354] vlan2: entered promiscuous mode [ 371.840816][ T8354] batadv0: entered promiscuous mode [ 371.980693][ T977] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 372.111919][ T8357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.191032][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 372.328999][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 372.344294][ T977] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 372.391570][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.400055][ T977] usb 3-1: Product: syz [ 372.440066][ T977] usb 3-1: Manufacturer: syz [ 372.517386][ T977] usb 3-1: SerialNumber: syz [ 372.818851][ T977] usb 3-1: config 0 descriptor?? [ 372.891861][ T977] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 373.130722][ T977] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 373.191544][ T977] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 373.298821][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.308716][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.317720][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.328343][ T977] usb 3-1: USB disconnect, device number 15 [ 373.365245][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.374967][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.470436][ T5851] Bluetooth: hci4: command tx timeout [ 375.473820][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.993754][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.049352][ T8372] virt_wifi0 speed is unknown, defaulting to 1000 [ 376.051754][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 376.183182][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.367071][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.387638][ T8392] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 376.488496][ T8392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.352876][ T8393] veth5: entered promiscuous mode [ 377.551750][ T5851] Bluetooth: hci4: command tx timeout [ 377.719652][ T8393] bond3: (slave veth5): Enslaving as an active interface with a down link [ 379.048480][ T8392] bond2: (slave dummy0): Releasing active interface [ 379.103898][ T8392] bond3: (slave dummy0): making interface the new active one [ 379.114104][ T8392] dummy0: entered promiscuous mode [ 379.123566][ T8392] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 379.270152][ T5911] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 379.442891][ T8372] chnl_net:caif_netlink_parms(): no params data found [ 379.462018][ T5911] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 379.479556][ T5911] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 379.557404][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 379.632237][ T5851] Bluetooth: hci4: command tx timeout [ 379.653008][ T5911] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 380.402263][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.541317][ T5911] usb 5-1: config 0 descriptor?? [ 380.859031][ T8411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.046895][ T8431] capability: warning: `syz.2.708' uses 32-bit capabilities (legacy support in use) [ 381.539234][ T5911] usb 5-1: string descriptor 0 read error: -71 [ 381.590303][ T5911] ath6kl: Failed to submit usb control message: -71 [ 381.597465][ T5911] ath6kl: unable to send the bmi data to the device: -71 [ 381.626014][ T5911] ath6kl: Unable to send get target info: -71 [ 381.721271][ T5851] Bluetooth: hci4: command tx timeout [ 381.804145][ T5911] ath6kl: Failed to init ath6kl core: -71 [ 381.815131][ T5911] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 381.844401][ T5911] usb 5-1: USB disconnect, device number 10 [ 381.853728][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.967014][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.051663][ T8372] bridge_slave_0: entered allmulticast mode [ 382.261675][ T8372] bridge_slave_0: entered promiscuous mode [ 382.507404][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.529748][ T8435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 382.585408][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.619711][ T8372] bridge_slave_1: entered allmulticast mode [ 382.642966][ T8372] bridge_slave_1: entered promiscuous mode [ 382.978085][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.023700][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.054347][ T1151] bridge_slave_1: left allmulticast mode [ 383.072085][ T1151] bridge_slave_1: left promiscuous mode [ 383.094448][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.144392][ T1151] bridge_slave_0: left allmulticast mode [ 383.160908][ T1151] bridge_slave_0: left promiscuous mode [ 383.186259][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.957344][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.979321][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.602875][ T1151] dvmrp17 (unregistering): left allmulticast mode [ 387.125784][ T1151] bridge0 (unregistering): left promiscuous mode [ 388.618936][ T1151] bond0 (unregistering): left promiscuous mode [ 388.625202][ T1151] bond_slave_0: left promiscuous mode [ 388.639066][ T1151] bond_slave_1: left promiscuous mode [ 389.214927][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.265723][ T1151] bond_slave_0: left allmulticast mode [ 389.292232][ T8498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.724'. [ 389.326164][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.346881][ T1151] bond_slave_1: left allmulticast mode [ 389.367542][ T1151] bond0 (unregistering): Released all slaves [ 390.472262][ T1151] bond1 (unregistering): Released all slaves [ 390.632810][ T8510] netlink: 76 bytes leftover after parsing attributes in process `syz.4.726'. [ 392.897304][ T1151] bond2 (unregistering): (slave veth3): Releasing active interface [ 392.907340][ T1151] dummy0: entered promiscuous mode [ 392.972272][ T1151] bond2 (unregistering): (slave dummy0): Releasing active interface [ 393.021871][ T1151] bond2 (unregistering): Released all slaves [ 394.054557][ T1151] [ 394.057018][ T1151] ====================================================== [ 394.064157][ T1151] WARNING: possible circular locking dependency detected [ 394.071228][ T1151] 6.16.0-syzkaller #0 Not tainted [ 394.076368][ T1151] ------------------------------------------------------ [ 394.083426][ T1151] kworker/u8:7/1151 is trying to acquire lock: [ 394.089619][ T1151] ffff88807f208e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 394.099291][ T1151] [ 394.099291][ T1151] but task is already holding lock: [ 394.106689][ T1151] ffff88802ed00768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 394.117091][ T1151] [ 394.117091][ T1151] which lock already depends on the new lock. [ 394.117091][ T1151] [ 394.127509][ T1151] [ 394.127509][ T1151] the existing dependency chain (in reverse order) is: [ 394.136575][ T1151] [ 394.136575][ T1151] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 394.144329][ T1151] lock_acquire+0x120/0x360 [ 394.149405][ T1151] __mutex_lock+0x182/0xe80 [ 394.154466][ T1151] ieee80211_open+0xed/0x1f0 [ 394.159620][ T1151] __dev_open+0x470/0x880 [ 394.164482][ T1151] netif_open+0xaa/0x170 [ 394.169298][ T1151] dev_open+0x125/0x260 [ 394.174054][ T1151] team_add_slave+0xb36/0x2840 [ 394.179376][ T1151] do_set_master+0x530/0x6d0 [ 394.184518][ T1151] do_setlink+0xcf0/0x41c0 [ 394.189486][ T1151] rtnl_newlink+0x160b/0x1c70 [ 394.194706][ T1151] rtnetlink_rcv_msg+0x7cc/0xb70 [ 394.200229][ T1151] netlink_rcv_skb+0x205/0x470 [ 394.205540][ T1151] netlink_unicast+0x75c/0x8e0 [ 394.210853][ T1151] netlink_sendmsg+0x805/0xb30 [ 394.216161][ T1151] __sock_sendmsg+0x21c/0x270 [ 394.221373][ T1151] ____sys_sendmsg+0x505/0x830 [ 394.226673][ T1151] ___sys_sendmsg+0x21f/0x2a0 [ 394.231891][ T1151] __x64_sys_sendmsg+0x19b/0x260 [ 394.237372][ T1151] do_syscall_64+0xfa/0x3b0 [ 394.242414][ T1151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.248841][ T1151] [ 394.248841][ T1151] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 394.257041][ T1151] validate_chain+0xb9b/0x2140 [ 394.262346][ T1151] __lock_acquire+0xab9/0xd20 [ 394.267579][ T1151] lock_acquire+0x120/0x360 [ 394.272615][ T1151] __mutex_lock+0x182/0xe80 [ 394.277662][ T1151] team_del_slave+0x32/0x1c0 [ 394.282882][ T1151] team_device_event+0x285/0xa20 [ 394.288350][ T1151] notifier_call_chain+0x1b3/0x3e0 [ 394.293997][ T1151] unregister_netdevice_many_notify+0x15d8/0x2320 [ 394.300969][ T1151] unregister_netdevice_queue+0x33c/0x380 [ 394.307234][ T1151] _cfg80211_unregister_wdev+0x165/0x590 [ 394.313413][ T1151] ieee80211_remove_interfaces+0x49a/0x6d0 [ 394.319763][ T1151] ieee80211_unregister_hw+0x5d/0x2c0 [ 394.325677][ T1151] mac80211_hwsim_del_radio+0x275/0x460 [ 394.331766][ T1151] hwsim_exit_net+0x584/0x640 [ 394.336999][ T1151] ops_undo_list+0x497/0x990 [ 394.342132][ T1151] cleanup_net+0x4c5/0x800 [ 394.347178][ T1151] process_scheduled_works+0xade/0x17b0 [ 394.353269][ T1151] worker_thread+0x8a0/0xda0 [ 394.358396][ T1151] kthread+0x70e/0x8a0 [ 394.363062][ T1151] ret_from_fork+0x3fc/0x770 [ 394.368243][ T1151] ret_from_fork_asm+0x1a/0x30 [ 394.373582][ T1151] [ 394.373582][ T1151] other info that might help us debug this: [ 394.373582][ T1151] [ 394.383821][ T1151] Possible unsafe locking scenario: [ 394.383821][ T1151] [ 394.391287][ T1151] CPU0 CPU1 [ 394.396663][ T1151] ---- ---- [ 394.402042][ T1151] lock(&rdev->wiphy.mtx); [ 394.406562][ T1151] lock(team->team_lock_key#3); [ 394.414072][ T1151] lock(&rdev->wiphy.mtx); [ 394.421116][ T1151] lock(team->team_lock_key#3); [ 394.426180][ T1151] [ 394.426180][ T1151] *** DEADLOCK *** [ 394.426180][ T1151] [ 394.434350][ T1151] 5 locks held by kworker/u8:7/1151: [ 394.439684][ T1151] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 394.450607][ T1151] #1: ffffc90003b4fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 394.461167][ T1151] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 394.470695][ T1151] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 394.480572][ T1151] #4: ffff88802ed00768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 394.491392][ T1151] [ 394.491392][ T1151] stack backtrace: [ 394.497306][ T1151] CPU: 1 UID: 0 PID: 1151 Comm: kworker/u8:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 394.497326][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.497338][ T1151] Workqueue: netns cleanup_net [ 394.497370][ T1151] Call Trace: [ 394.497380][ T1151] [ 394.497387][ T1151] dump_stack_lvl+0x189/0x250 [ 394.497410][ T1151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.497428][ T1151] ? __pfx__printk+0x10/0x10 [ 394.497450][ T1151] ? print_lock_name+0xde/0x100 [ 394.497478][ T1151] print_circular_bug+0x2ee/0x310 [ 394.497501][ T1151] check_noncircular+0x134/0x160 [ 394.497524][ T1151] validate_chain+0xb9b/0x2140 [ 394.497543][ T1151] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.497565][ T1151] ? rcu_is_watching+0x15/0xb0 [ 394.497584][ T1151] ? trace_sched_exit_tp+0x38/0x120 [ 394.497615][ T1151] __lock_acquire+0xab9/0xd20 [ 394.497633][ T1151] ? team_del_slave+0x32/0x1c0 [ 394.497655][ T1151] lock_acquire+0x120/0x360 [ 394.497669][ T1151] ? team_del_slave+0x32/0x1c0 [ 394.497692][ T1151] ? preempt_schedule_irq+0xde/0x150 [ 394.497714][ T1151] __mutex_lock+0x182/0xe80 [ 394.497732][ T1151] ? team_del_slave+0x32/0x1c0 [ 394.497753][ T1151] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.497771][ T1151] ? rcu_is_watching+0x15/0xb0 [ 394.497789][ T1151] ? trace_irq_disable+0x37/0x110 [ 394.497813][ T1151] ? team_del_slave+0x32/0x1c0 [ 394.497836][ T1151] ? __pfx___mutex_lock+0x10/0x10 [ 394.497863][ T1151] team_del_slave+0x32/0x1c0 [ 394.497887][ T1151] team_device_event+0x285/0xa20 [ 394.497904][ T1151] notifier_call_chain+0x1b3/0x3e0 [ 394.497928][ T1151] unregister_netdevice_many_notify+0x15d8/0x2320 [ 394.497959][ T1151] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 394.497983][ T1151] ? __lock_acquire+0xab9/0xd20 [ 394.498009][ T1151] unregister_netdevice_queue+0x33c/0x380 [ 394.498029][ T1151] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 394.498051][ T1151] _cfg80211_unregister_wdev+0x165/0x590 [ 394.498078][ T1151] ieee80211_remove_interfaces+0x49a/0x6d0 [ 394.498099][ T1151] ? __pfx_synchronize_rcu+0x10/0x10 [ 394.498119][ T1151] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 394.498139][ T1151] ? rcu_is_watching+0x15/0xb0 [ 394.498160][ T1151] ieee80211_unregister_hw+0x5d/0x2c0 [ 394.498188][ T1151] mac80211_hwsim_del_radio+0x275/0x460 [ 394.498215][ T1151] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 394.498251][ T1151] hwsim_exit_net+0x584/0x640 [ 394.498274][ T1151] ? __pfx_hwsim_exit_net+0x10/0x10 [ 394.498297][ T1151] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 394.498323][ T1151] ops_undo_list+0x497/0x990 [ 394.498348][ T1151] ? __pfx_ops_undo_list+0x10/0x10 [ 394.498376][ T1151] cleanup_net+0x4c5/0x800 [ 394.498400][ T1151] ? __pfx_cleanup_net+0x10/0x10 [ 394.498423][ T1151] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.498437][ T1151] ? process_scheduled_works+0x9ef/0x17b0 [ 394.498455][ T1151] ? process_scheduled_works+0x9ef/0x17b0 [ 394.498479][ T1151] process_scheduled_works+0xade/0x17b0 [ 394.498509][ T1151] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.498533][ T1151] worker_thread+0x8a0/0xda0 [ 394.498562][ T1151] kthread+0x70e/0x8a0 [ 394.498585][ T1151] ? __pfx_worker_thread+0x10/0x10 [ 394.498603][ T1151] ? __pfx_kthread+0x10/0x10 [ 394.498625][ T1151] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.498639][ T1151] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.498655][ T1151] ? __pfx_kthread+0x10/0x10 [ 394.498676][ T1151] ret_from_fork+0x3fc/0x770 [ 394.498693][ T1151] ? __pfx_ret_from_fork+0x10/0x10 [ 394.498712][ T1151] ? __switch_to_asm+0x39/0x70 [ 394.498733][ T1151] ? __switch_to_asm+0x33/0x70 [ 394.498752][ T1151] ? __pfx_kthread+0x10/0x10 [ 394.498774][ T1151] ret_from_fork_asm+0x1a/0x30 [ 394.498801][ T1151] [ 394.855263][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.384510][ T1151] team0: Port device wlan1 removed [ 396.101403][ T1151] hsr_slave_0: left promiscuous mode [ 396.107427][ T1151] hsr_slave_1: left promiscuous mode [ 396.121831][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.139624][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.147723][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.155629][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.166300][ T1151] veth1_macvtap: left promiscuous mode [ 396.180428][ T1151] veth0_macvtap: left promiscuous mode [ 396.186289][ T1151] veth1_vlan: left promiscuous mode [ 396.207982][ T1151] veth0_vlan: left promiscuous mode [ 396.477949][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 396.502974][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 396.698134][ T13] dummy0: left promiscuous mode [ 396.903978][ T1151] IPVS: stop unused estimator thread 0... [ 396.935226][ T1151] ------------[ cut here ]------------ [ 396.941045][ T1151] WARNING: CPU: 0 PID: 1151 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x270/0x2f0 [ 396.950927][ T1151] Modules linked in: [ 396.955292][ T1151] CPU: 0 UID: 0 PID: 1151 Comm: kworker/u8:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 396.965788][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.976251][ T1151] Workqueue: netns cleanup_net [ 396.981402][ T1151] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 396.987007][ T1151] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 397.007090][ T1151] RSP: 0018:ffffc90003b4f898 EFLAGS: 00010293 [ 397.013575][ T1151] RAX: ffffffff8a0f293f RBX: ffff8880761c8000 RCX: ffff888026c53c00 [ 397.021929][ T1151] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888026c53c00 [ 397.030498][ T1151] RBP: ffffc90003b4f9b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 397.038810][ T1151] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 397.047135][ T1151] R13: 1ffff92000769f40 R14: ffff8880761c94c0 R15: dffffc0000000000 [ 397.055615][ T1151] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 397.065007][ T1151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.071991][ T1151] CR2: 00005624d9391950 CR3: 000000000df38000 CR4: 00000000003526f0 [ 397.080519][ T1151] Call Trace: [ 397.083935][ T1151] [ 397.086910][ T1151] xfrm_net_exit+0x2d/0x70 [ 397.091666][ T1151] ops_undo_list+0x497/0x990 [ 397.096321][ T1151] ? __pfx_ops_undo_list+0x10/0x10 [ 397.101674][ T1151] cleanup_net+0x4c5/0x800 [ 397.106149][ T1151] ? __pfx_cleanup_net+0x10/0x10 [ 397.111194][ T1151] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.116442][ T1151] ? process_scheduled_works+0x9ef/0x17b0 [ 397.122255][ T1151] ? process_scheduled_works+0x9ef/0x17b0 [ 397.128048][ T1151] process_scheduled_works+0xade/0x17b0 [ 397.133665][ T1151] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.139746][ T1151] worker_thread+0x8a0/0xda0 [ 397.144428][ T1151] kthread+0x70e/0x8a0 [ 397.148662][ T1151] ? __pfx_worker_thread+0x10/0x10 [ 397.153834][ T1151] ? __pfx_kthread+0x10/0x10 [ 397.158663][ T1151] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.163908][ T1151] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.169180][ T1151] ? __pfx_kthread+0x10/0x10 [ 397.173822][ T1151] ret_from_fork+0x3fc/0x770 [ 397.178498][ T1151] ? __pfx_ret_from_fork+0x10/0x10 [ 397.183662][ T1151] ? __switch_to_asm+0x39/0x70 [ 397.188548][ T1151] ? __switch_to_asm+0x33/0x70 [ 397.193408][ T1151] ? __pfx_kthread+0x10/0x10 [ 397.198195][ T1151] ret_from_fork_asm+0x1a/0x30 [ 397.203027][ T1151] [ 397.206099][ T1151] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 397.213415][ T1151] CPU: 0 UID: 0 PID: 1151 Comm: kworker/u8:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 397.223611][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.233718][ T1151] Workqueue: netns cleanup_net [ 397.238549][ T1151] Call Trace: [ 397.241874][ T1151] [ 397.244846][ T1151] dump_stack_lvl+0x99/0x250 [ 397.249482][ T1151] ? __asan_memcpy+0x40/0x70 [ 397.254154][ T1151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.259490][ T1151] ? __pfx__printk+0x10/0x10 [ 397.264141][ T1151] panic+0x2db/0x790 [ 397.268085][ T1151] ? __pfx_panic+0x10/0x10 [ 397.272557][ T1151] ? ret_from_fork_asm+0x1a/0x30 [ 397.277608][ T1151] __warn+0x31b/0x4b0 [ 397.281634][ T1151] ? xfrm_state_fini+0x270/0x2f0 [ 397.286623][ T1151] ? xfrm_state_fini+0x270/0x2f0 [ 397.291589][ T1151] report_bug+0x2be/0x4f0 [ 397.295934][ T1151] ? xfrm_state_fini+0x270/0x2f0 [ 397.300890][ T1151] ? xfrm_state_fini+0x270/0x2f0 [ 397.305856][ T1151] ? xfrm_state_fini+0x272/0x2f0 [ 397.310834][ T1151] handle_bug+0x84/0x160 [ 397.315097][ T1151] exc_invalid_op+0x1a/0x50 [ 397.319615][ T1151] asm_exc_invalid_op+0x1a/0x20 [ 397.324479][ T1151] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 397.330046][ T1151] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 397.349683][ T1151] RSP: 0018:ffffc90003b4f898 EFLAGS: 00010293 [ 397.355768][ T1151] RAX: ffffffff8a0f293f RBX: ffff8880761c8000 RCX: ffff888026c53c00 [ 397.363763][ T1151] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888026c53c00 [ 397.371854][ T1151] RBP: ffffc90003b4f9b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 397.379856][ T1151] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 397.387863][ T1151] R13: 1ffff92000769f40 R14: ffff8880761c94c0 R15: dffffc0000000000 [ 397.395863][ T1151] ? xfrm_state_fini+0x26f/0x2f0 [ 397.401038][ T1151] ? xfrm_state_fini+0x26f/0x2f0 [ 397.406103][ T1151] xfrm_net_exit+0x2d/0x70 [ 397.410537][ T1151] ops_undo_list+0x497/0x990 [ 397.415158][ T1151] ? __pfx_ops_undo_list+0x10/0x10 [ 397.420299][ T1151] cleanup_net+0x4c5/0x800 [ 397.425088][ T1151] ? __pfx_cleanup_net+0x10/0x10 [ 397.430047][ T1151] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.435259][ T1151] ? process_scheduled_works+0x9ef/0x17b0 [ 397.441037][ T1151] ? process_scheduled_works+0x9ef/0x17b0 [ 397.446776][ T1151] process_scheduled_works+0xade/0x17b0 [ 397.452353][ T1151] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.458362][ T1151] worker_thread+0x8a0/0xda0 [ 397.462977][ T1151] kthread+0x70e/0x8a0 [ 397.467085][ T1151] ? __pfx_worker_thread+0x10/0x10 [ 397.472215][ T1151] ? __pfx_kthread+0x10/0x10 [ 397.476823][ T1151] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.482046][ T1151] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.487260][ T1151] ? __pfx_kthread+0x10/0x10 [ 397.491871][ T1151] ret_from_fork+0x3fc/0x770 [ 397.496474][ T1151] ? __pfx_ret_from_fork+0x10/0x10 [ 397.501602][ T1151] ? __switch_to_asm+0x39/0x70 [ 397.506383][ T1151] ? __switch_to_asm+0x33/0x70 [ 397.511165][ T1151] ? __pfx_kthread+0x10/0x10 [ 397.515775][ T1151] ret_from_fork_asm+0x1a/0x30 [ 397.520569][ T1151] [ 397.523875][ T1151] Kernel Offset: disabled [ 397.528308][ T1151] Rebooting in 86400 seconds..