last executing test programs: 50.570789173s ago: executing program 2 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0xfcffffffffffffff, 0x0, 0x4044851}, 0x0) 50.304021608s ago: executing program 2 (id=147): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000010a00)=""/255, 0xfffffffffffffe83}], 0x1, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x305001, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000140)=0x80000000) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 44.781665329s ago: executing program 3 (id=185): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000140)=0x61) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) recvfrom$inet6(r1, 0x0, 0x0, 0x40000300, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r1, 0x0) 43.341022875s ago: executing program 2 (id=189): mmap(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0x2000005, 0x2010, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x800, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001600210900000000fcffffff0a00000055e2e10210b43251fefef3be945c9ef6434e83e17d7b7934ea8a8b45e6a913c2043352bd1c6010122fc4bac792d23d8f9f8fc07d27ed63f59778b0af96b3c3c414862c45cd88393e9076e9e1ee56fac363b0b765a1bf1bd0e2fdc4623dcd4ceb5d01d8ec26f6ed77bc745c38632cf83f405584bfca6f50eba6b16f327e8470e07a4474734a55b042b7500c5186d24a45fce2dbc33107", @ANYRES32=0x0], 0x18}}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = fsopen(&(0x7f0000000000)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r5 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000004c0)={0x0, 0x80000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) 43.107380258s ago: executing program 1 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0xc, 0x3, 0x4, 0x1}], {0x95, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 42.992467376s ago: executing program 4 (id=194): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x29}) (async) timerfd_create(0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) 42.935438087s ago: executing program 1 (id=195): syz_open_dev$evdev(0x0, 0x26a0e78, 0x4802) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x10) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000050605000a0000000000000000000000100043006269746d61703a706f72740005000400000000000900020073797a30000000000500050000000000050001"], 0x64}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x20000000000000}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 42.708542267s ago: executing program 4 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x300, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}}, 0x4000050) 42.581392307s ago: executing program 4 (id=199): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x8, 0xffff, 0x11, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8, 0x1, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x65, '\x00', r3, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400900}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff0000000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0) r5 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='addr\x00\xde\xbc\x1fB\x82\xff\x1ef\xfan\xcc\xa4\xcc~-3\x8dZ\xdd\x06(\xbeG\xd8\x00\x0f\x95_\xd0\xf5\xbc\xfc\xa1\x02a\xd9\xf9q\xb2j\x0f\xfel\x9a\xc0\xae8\x8bT\xaa\xde\xbe\x98E\xf3-\xab\xc2\n\x13\xe9X\x89\t\fC\xbc\xd5\n\xe1r\x0eq\xb6\xdc\xc9M:Y6F\xf13\x90\x1dO[P,\x8csKv\xdbJ\xf9\x00r`C\f)\"\x10\xb2\x8f\x876\xcd\x86\x95\x8dV\x0eF\x12\xf7\x89s\x98\xa5\xed\xfb\xc5\x86\x85\x9e\xf0Ee\xc4\x11\xc0\xc7%#\x95D\x84rq\xedb\xc4h\xd7\x05\x00\x04\x009\x96\x1d\xd2+\x1ay\x86N\xe3\xf4\xedw\xd7\xa3\xbe\xd7\x800\x0f\xa1\x90c%\xb1\x0e\xb2\x80C\xb3\x13`\x88\x13mH\x86[F4\x97)\r\x9e$\x934(\x7f\xa5 &\xabb\x00\x00\x00\x00\x00', &(0x7f0000000200)='127\x9b\xe5\x8e\x18.1B\xe8\x0e\xcf+W\x1fz\x9ch\b\xb0\xba_*bm\xfd\xa6\xc89%\x95\x82(\xf5Sk\x113\x04\x0f\xf4v\x8c\x18\xc0\x903\x9e\xc6\xd3\x04\b`\x80\xe2\x05\xfe\x82\x91\xa5c\xfa\xac\xf8\xdfh\xb2\xae\xbb1L\x1e\x06`\xb5IK\xa5u:\xab\xbcz\x99\x86\xd3%o\\\"\x93\xf5\xb8\x01Y\xf3<\xe9\xbdJ.2\x9d\xc9\tj\xaf\x9a\xa9\xef\xd1\xec\x8f5\xd8\xecO\x86\xa1ua\xfa\xd3M\x9eBQ\xe7\xb1_s\xef\x9c\x19\x89 \xd3\xc23\x06l\xb1]*SD\x0e', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x12) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x8008af83, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0xfeff, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 41.625771403s ago: executing program 0 (id=200): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04fd05fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007afeff4a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) 41.212195224s ago: executing program 1 (id=201): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0xec, 0x1, 0x80, 0x38000000000000, 0x6c, 0x4, 0x4, 0xf0, 0x5, 0x10, 0xffff, 0x0, 0x1, 0xff, 0xb08, 0xfff], 0x0, 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40.734720225s ago: executing program 0 (id=202): r0 = socket(0x10, 0x803, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x8, 0xb, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x80, 0x7, 0x40}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x67f3, 0x40f, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x36f}}], 0x1, &(0x7f0000000340)={0x2e, 0x70, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x80000000000000, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 40.639585251s ago: executing program 3 (id=203): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) eventfd(0x2) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000580)="93e1aa9a7bf6fb3cc207fe22cf2109e0e72513f3dafa33f9155ef57d76580ca7df0ab47be6a6e0b0209703d0d0029eb23de493cf1b64440eeb9388dcbb574b7205665e0a5ab39724ea5ea76f74dc42ad3b03af12c3d612ef6c4e64becd8eec80e268b92c2113be02121e0971099429173dca5cb6e9c0ae841ba2213311822bffedf74c393604d69320c3f4bc81ed9f5b938aa68b859c937160371982346fa9dfb5105f17a7f4b6e0174dadaaa188f94ae795785c5ad44342b7751593f53aa1cbd959aae02a8a5eac47a31b77c7d4c8dbcafe5e7f030e1bf8143b555dc7adf2da108185af2d7fff59f2f76ad99fc9687b", &(0x7f0000000680)=@udp, 0x2}, 0x20) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x1, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0) syz_emit_ethernet(0x13c5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000001e80)={0x1, 0x3, [0xe9a, 0x8f6, 0x8fa, 0x965]}) 40.508499073s ago: executing program 1 (id=204): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2001) write$sndseq(r0, &(0x7f0000000040)=[{0xab, 0x3, 0x81, 0x6, @time={0x6, 0x1}, {0xba, 0x7f}, {0xb, 0x3}, @raw8={"e4d07401b612a4c247e31892"}}, {0x6, 0x9, 0x8, 0xb, @tick=0x8, {0x21, 0x4}, {0x2e, 0xb}, @addr={0x3, 0x8}}], 0x38) 40.446095277s ago: executing program 1 (id=205): unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0001000000100002000000020000000600000e000000000800010064010102"], 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x2810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) 40.198183014s ago: executing program 1 (id=206): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x8, 0x20000006, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0x5, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x15, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0xf6e, 0x800c, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x9, 0x1000005, 0x9, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc23, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0xffffffff, 0x2, 0x3, 0xf36, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x937, 0x5, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0xe6d4, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x57, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff8, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x3, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c40), 0x4) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='cmdline\x00') unshare(0x20000000) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x101900, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) close_range(r3, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x89, @multicast1, 0x4e21, 0x3, 'lc\x00', 0x2e, 0xa85, 0x5b}, 0x2c) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010990f2c310cc13220004006d330411db55556a687c110902120000"], 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) (async, rerun: 32) creat(&(0x7f0000001180)='./file0\x00', 0xa6) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 40.027190001s ago: executing program 4 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xfff5}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 39.916692282s ago: executing program 2 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 39.733577737s ago: executing program 2 (id=209): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x208, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x60030000, {0x7fffffe, 0xff000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x7fff, 0xf, 0x10001, 'syz1\x00', 'syz0\x00', {0x1}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x15}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0x0, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xffffff00], 'veth1_to_bond\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x76, 0xf7, 0x6, 0x66}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 39.712179916s ago: executing program 4 (id=210): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x8, 0x144, 0x0, 0x1, [@nested={0x4, 0xf3}]}]}, 0x1c}}, 0x4000080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x72210000) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x1a53) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)=',,\x00', &(0x7f0000000340)='/dev/net/tun\x00', 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x47550000) r5 = dup3(r2, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x48001) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x48001) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0xa, 0x0, 0x28}, @fd}, &(0x7f0000000740)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x200, 0x4e9b}}, './file0\x00'}) socket$tipc(0x1e, 0x5, 0x0) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r8, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) (async) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="6e63cf1f04e4152bc7d60b165685df2b220472d6a97b8fa703189f8d0c59c8"], &(0x7f0000000380)='GPL\x00', 0x20000008, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="6e63cf1f04e4152bc7d60b165685df2b220472d6a97b8fa703189f8d0c59c8"], &(0x7f0000000380)='GPL\x00', 0x20000008, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa41, &(0x7f00000005c0)="c6"}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') 39.610911769s ago: executing program 3 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 39.508458674s ago: executing program 0 (id=212): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) r2 = socket(0x840000000002, 0x3, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x20, 0x0, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) io_uring_enter(r3, 0x128, 0xffffffdc, 0x16, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000007c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe9}]}, 0x38}, 0x1, 0x0, 0x0, 0x6044001}, 0x4000054) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4098) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0xf, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="258d7acf0800", 0x0, 0x0, 0x23, 0x0, 0x0}) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x811) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, 0x0, 0x0) 39.502092913s ago: executing program 2 (id=213): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x100843, 0x9c) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r3, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r3, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0x3, 0x0, 0x3}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e20, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000300)=0xff, 0x6, 0x6) write$cgroup_int(r6, &(0x7f0000000200)=0x4, 0x12) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) (async) io_submit(0x0, 0x0, &(0x7f0000000540)) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r7) (async) syz_usb_disconnect(r7) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) (async) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r9 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x50, 0x0, 0x0}) syz_usb_control_io(r8, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x3, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5d4d}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x0, 0x1000000}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x94baca8f5aaf80e0}}]}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa27a4fd320a1c4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 39.480116755s ago: executing program 3 (id=214): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) syslog(0x3, &(0x7f0000000200)=""/88, 0x58) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}, 0x1, 0x41}, 0x0) 38.668654635s ago: executing program 0 (id=215): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2001) write$sndseq(r0, &(0x7f0000000040)=[{0xab, 0x3, 0x81, 0x6, @time={0x6, 0x1}, {0xba, 0x7f}, {0xb, 0x3}, @raw8={"e4d07401b612a4c247e31892"}}], 0x1c) 38.668283619s ago: executing program 3 (id=216): syz_clone(0xda8472c8b24ed002, 0x0, 0x13, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}}, 0x0) 38.624866348s ago: executing program 4 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x4200) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x2000c800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac010203010902"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)=0x8) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000280)="c423d4a06caebe6e7d219ebf5f315e32cde95c", 0x13}], 0x1) 38.607616496s ago: executing program 0 (id=218): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800003000004000000cb2004001001000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xff2, &(0x7f0000000fc0)=""/4082, 0x40f00, 0x2d}, 0x94) 38.491895049s ago: executing program 0 (id=219): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/185) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x5, &(0x7f0000000600)=""/223, &(0x7f0000000700)=0xdf) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f00000001c0)={0x180, 0x6, 0x2, 0x8001, 0x9}, 0x14) close(r14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r15, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_ublk_setup_queues(r12, r10, &(0x7f00000003c0)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0xe0ffffff, {}, 0x1f, r9, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) 38.483171746s ago: executing program 3 (id=220): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00X\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x200) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 0s ago: executing program 32 (id=219): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/185) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x5, &(0x7f0000000600)=""/223, &(0x7f0000000700)=0xdf) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f00000001c0)={0x180, 0x6, 0x2, 0x8001, 0x9}, 0x14) close(r14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r15, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_ublk_setup_queues(r12, r10, &(0x7f00000003c0)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0xe0ffffff, {}, 0x1f, r9, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 63.657781][ T5595] cgroup: Unknown subsys name 'net' [ 63.786177][ T5595] cgroup: Unknown subsys name 'cpuset' [ 63.788846][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.160815][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.146385][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.146998][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.147397][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.148292][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.149042][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.149794][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.150002][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.151012][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.151179][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.152760][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.153281][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.154033][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.154498][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.154877][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.156414][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.156973][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.160308][ T4933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.163359][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.165408][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.166201][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.167758][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.170762][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.172847][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.187917][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.210105][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.310335][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.310498][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.310926][ T5629] bridge_slave_0: entered allmulticast mode [ 70.313670][ T5629] bridge_slave_0: entered promiscuous mode [ 70.352756][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.352860][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.353033][ T5631] bridge_slave_0: entered allmulticast mode [ 70.355292][ T5631] bridge_slave_0: entered promiscuous mode [ 70.371156][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.371267][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.371400][ T5629] bridge_slave_1: entered allmulticast mode [ 70.376314][ T5629] bridge_slave_1: entered promiscuous mode [ 70.418788][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.418906][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.418991][ T5628] bridge_slave_0: entered allmulticast mode [ 70.419913][ T5628] bridge_slave_0: entered promiscuous mode [ 70.424027][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.424125][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.424254][ T5628] bridge_slave_1: entered allmulticast mode [ 70.425928][ T5628] bridge_slave_1: entered promiscuous mode [ 70.443284][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.443384][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.443754][ T5631] bridge_slave_1: entered allmulticast mode [ 70.445480][ T5631] bridge_slave_1: entered promiscuous mode [ 70.548451][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.564735][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.567020][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.569556][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.569768][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.569862][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.569974][ T5632] bridge_slave_0: entered allmulticast mode [ 70.571492][ T5632] bridge_slave_0: entered promiscuous mode [ 70.628877][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.630780][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.647233][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.647386][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.647504][ T5632] bridge_slave_1: entered allmulticast mode [ 70.649214][ T5632] bridge_slave_1: entered promiscuous mode [ 70.650698][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.651031][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.651152][ T5630] bridge_slave_0: entered allmulticast mode [ 70.653326][ T5630] bridge_slave_0: entered promiscuous mode [ 70.657499][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.657653][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.658023][ T5630] bridge_slave_1: entered allmulticast mode [ 70.659862][ T5630] bridge_slave_1: entered promiscuous mode [ 70.664993][ T5629] team0: Port device team_slave_0 added [ 70.748908][ T5629] team0: Port device team_slave_1 added [ 70.751051][ T5628] team0: Port device team_slave_0 added [ 70.753647][ T5631] team0: Port device team_slave_0 added [ 70.756604][ T5631] team0: Port device team_slave_1 added [ 70.775263][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.801224][ T5628] team0: Port device team_slave_1 added [ 70.815149][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.817914][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.846455][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.846472][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.846495][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.863338][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.877737][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.877752][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.877775][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.909495][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.909512][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.909542][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.930085][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.930103][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.930127][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.042261][ T5630] team0: Port device team_slave_0 added [ 71.043131][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.043144][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.043166][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.045389][ T5630] team0: Port device team_slave_1 added [ 71.052944][ T5632] team0: Port device team_slave_0 added [ 71.095701][ T5629] hsr_slave_0: entered promiscuous mode [ 71.096797][ T5629] hsr_slave_1: entered promiscuous mode [ 71.127864][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.127880][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.127903][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.143989][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.144007][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.144031][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.147109][ T5632] team0: Port device team_slave_1 added [ 71.176504][ T5618] Bluetooth: hci4: command tx timeout [ 71.176509][ T5615] Bluetooth: hci0: command tx timeout [ 71.196688][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.196704][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.196728][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.226359][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.226375][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.226398][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.252406][ T5618] Bluetooth: hci1: command tx timeout [ 71.292004][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.292021][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.292045][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.308891][ T5631] hsr_slave_0: entered promiscuous mode [ 71.312856][ T5631] hsr_slave_1: entered promiscuous mode [ 71.322374][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 71.322478][ T5631] Cannot create hsr debugfs directory [ 71.332410][ T5618] Bluetooth: hci3: command tx timeout [ 71.332600][ T5618] Bluetooth: hci2: command tx timeout [ 71.414867][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.414937][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.416065][ T5630] hsr_slave_0: entered promiscuous mode [ 71.417060][ T5630] hsr_slave_1: entered promiscuous mode [ 71.417619][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 71.417635][ T5630] Cannot create hsr debugfs directory [ 71.489974][ T5628] hsr_slave_0: entered promiscuous mode [ 71.490603][ T5628] hsr_slave_1: entered promiscuous mode [ 71.490994][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 71.491011][ T5628] Cannot create hsr debugfs directory [ 71.561096][ T5632] hsr_slave_0: entered promiscuous mode [ 71.562047][ T5632] hsr_slave_1: entered promiscuous mode [ 71.563071][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 71.563090][ T5632] Cannot create hsr debugfs directory [ 71.995349][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.004931][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.006004][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.015641][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.017664][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.025225][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.032883][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.044624][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.125982][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.131529][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.144384][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.155389][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.157549][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.170695][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.174384][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.189780][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.275789][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.279211][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.279870][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.293339][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.314784][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.319614][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.337321][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.340961][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.384727][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.450511][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.464523][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.465350][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.468175][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.469051][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.471803][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.475262][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.484552][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.501196][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.537456][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.537542][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.582307][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.582418][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.665964][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.686698][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.689228][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.691051][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.697509][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.722132][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.734691][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.738433][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.760205][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.764790][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.786382][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.786480][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.818714][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.818772][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.863831][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.918397][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.950627][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.968022][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.974245][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.974358][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.998177][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.998252][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.045409][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.066419][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.066480][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.098774][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.098836][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.139989][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.181041][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.193081][ T5631] veth0_vlan: entered promiscuous mode [ 73.210127][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.231755][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.231814][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.253765][ T5615] Bluetooth: hci4: command tx timeout [ 73.253800][ T5615] Bluetooth: hci0: command tx timeout [ 73.277277][ T5631] veth1_vlan: entered promiscuous mode [ 73.288939][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.288996][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.332553][ T5618] Bluetooth: hci1: command tx timeout [ 73.387773][ T5629] veth0_vlan: entered promiscuous mode [ 73.397893][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.412786][ T5618] Bluetooth: hci2: command tx timeout [ 73.412819][ T5618] Bluetooth: hci3: command tx timeout [ 73.430163][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.431084][ T5631] veth0_macvtap: entered promiscuous mode [ 73.462114][ T5631] veth1_macvtap: entered promiscuous mode [ 73.469418][ T5629] veth1_vlan: entered promiscuous mode [ 73.511605][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.547135][ T5630] veth0_vlan: entered promiscuous mode [ 73.549450][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.581757][ T5629] veth0_macvtap: entered promiscuous mode [ 73.597005][ T5629] veth1_macvtap: entered promiscuous mode [ 73.601238][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.634996][ T5630] veth1_vlan: entered promiscuous mode [ 73.652544][ T5628] veth0_vlan: entered promiscuous mode [ 73.675561][ T1171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.676676][ T1171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.676932][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.676971][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.683512][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.705364][ T5628] veth1_vlan: entered promiscuous mode [ 73.762452][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.837759][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.837784][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.859452][ T5630] veth0_macvtap: entered promiscuous mode [ 73.861829][ T5632] veth0_vlan: entered promiscuous mode [ 73.884415][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.886585][ T1171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.887369][ T5632] veth1_vlan: entered promiscuous mode [ 73.912395][ T5630] veth1_macvtap: entered promiscuous mode [ 73.944222][ T5628] veth0_macvtap: entered promiscuous mode [ 73.952775][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.954693][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.954712][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.005513][ T5628] veth1_macvtap: entered promiscuous mode [ 74.040214][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.061432][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.061453][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.073712][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.109044][ T5631] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.113798][ T1171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.148915][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.159043][ T5632] veth0_macvtap: entered promiscuous mode [ 74.165388][ T5632] veth1_macvtap: entered promiscuous mode [ 74.185633][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.185654][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.189338][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.244464][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.284360][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301979][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.313104][ T1171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.345349][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.345397][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.374817][ T5706] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.434980][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.453237][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.453345][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.453378][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.453416][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.453430][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.453619][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.500062][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.503423][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.503468][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.503502][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.664841][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.664863][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.699091][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.699112][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.830774][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.830794][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.964500][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.964520][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.096355][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.096375][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.333629][ T5615] Bluetooth: hci0: command tx timeout [ 75.333874][ T5615] Bluetooth: hci4: command tx timeout [ 75.339345][ T5720] loop6: detected capacity change from 0 to 2640 [ 75.413113][ T5618] Bluetooth: hci1: command tx timeout [ 75.451429][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 75.493125][ T5618] Bluetooth: hci3: command tx timeout [ 75.493157][ T5618] Bluetooth: hci2: command tx timeout [ 75.503437][ T5723] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5'. [ 75.503654][ T5723] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.061358][ T5738] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 76.158957][ T5741] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 77.160651][ T5744] Zero length message leads to an empty skb [ 77.413529][ T5615] Bluetooth: hci4: command tx timeout [ 77.413564][ T5615] Bluetooth: hci0: command tx timeout [ 77.493119][ T5618] Bluetooth: hci1: command tx timeout [ 77.523054][ T5683] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.555990][ T5602] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.573671][ T5618] Bluetooth: hci2: command tx timeout [ 77.573704][ T5618] Bluetooth: hci3: command tx timeout [ 77.693506][ T5602] usb 5-1: device descriptor read/64, error -71 [ 77.697103][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 77.700037][ T5683] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 77.739320][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.739353][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 77.739379][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.739429][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.784783][ T5759] tap0: tun_chr_ioctl cmd 1074025677 [ 77.784920][ T5759] tap0: linktype set to 774 [ 77.850142][ T5683] usb 3-1: config 0 descriptor?? [ 77.852179][ T5749] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 77.885922][ T5683] hub 3-1:0.0: USB hub found [ 77.935030][ T5602] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.062368][ T5602] usb 5-1: device descriptor read/64, error -71 [ 78.079595][ T5683] hub 3-1:0.0: 2 ports detected [ 78.179329][ T5602] usb usb5-port1: attempt power cycle [ 78.210142][ T5765] process 'syz.0.16' launched './file0' with NULL argv: empty string added [ 78.271589][ T5765] xt_cgroup: path and classid specified [ 78.304148][ T5749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 78.312017][ T5765] input: syz1 as /devices/virtual/input/input5 [ 78.352478][ T5682] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.355985][ T5765] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 78.440041][ T5683] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 78.466695][ T5683] usbhid 3-1:0.0: can't add hid device: -71 [ 78.466794][ T5683] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 78.518579][ T5683] usb 3-1: USB disconnect, device number 2 [ 78.522471][ T5602] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.546574][ T5602] usb 5-1: device descriptor read/8, error -71 [ 78.625087][ T50] nvmet: connect request for invalid subsystem t! [ 78.626232][ T5765] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 78.782339][ T5602] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.804359][ T5602] usb 5-1: device descriptor read/8, error -71 [ 78.812337][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.832535][ T5682] usb 4-1: device descriptor read/64, error -71 [ 78.913026][ T5602] usb usb5-port1: unable to enumerate USB device [ 78.965631][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.966605][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.966626][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.966645][ T10] usb 2-1: config 1 has no interface number 0 [ 78.966681][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.966713][ T10] usb 2-1: config 1 interface 1 has no altsetting 1 [ 78.968977][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.968999][ T10] usb 2-1: Product: syz [ 78.969013][ T10] usb 2-1: Manufacturer: syz [ 78.969027][ T10] usb 2-1: SerialNumber: syz [ 78.995980][ T10] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 78.996027][ T10] cdc_ncm 2-1:1.1: bind() failure [ 79.112771][ T5682] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.194182][ T10] usb 2-1: USB disconnect, device number 2 [ 79.267044][ T5682] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 79.269275][ T5682] usb 4-1: config index 0 descriptor too short (expected 69, got 51) [ 79.269301][ T5682] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.311610][ T5682] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.335996][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.336024][ T5682] usb 4-1: Product: syz [ 79.336038][ T5682] usb 4-1: Manufacturer: syz [ 79.336052][ T5682] usb 4-1: SerialNumber: syz [ 79.418862][ T5682] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 79.418908][ T5682] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 79.590714][ T5682] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 79.688517][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.081515][ T5789] could not allocate digest TFM handle michael_mic [ 80.262923][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 80.300662][ T5675] usb 4-1: USB disconnect, device number 3 [ 80.546232][ T5791] x_tables: duplicate underflow at hook 2 [ 81.161835][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.164676][ T10] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 81.170089][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 81.170126][ T10] usb 5-1: can't read configurations, error -71 [ 81.633383][ T5811] kvm: requested 150857 ns i8254 timer period limited to 200000 ns [ 81.644744][ T5811] kvm: requested 144152 ns i8254 timer period limited to 200000 ns [ 81.651213][ T5811] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 81.651539][ T5811] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 81.651931][ T5811] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 81.690591][ T5811] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 81.695165][ T5811] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 81.716049][ T5811] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 81.729159][ T5811] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 81.746605][ T5811] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 81.832333][ T5682] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.962719][ T5682] usb 1-1: device descriptor read/64, error -71 [ 82.102706][ T5668] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.212336][ T5682] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.257442][ T5668] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 82.264460][ T5668] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 82.264486][ T5668] usb 4-1: config 1 has no interface number 0 [ 82.281499][ T5668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.281524][ T5668] usb 4-1: Product: syz [ 82.281536][ T5668] usb 4-1: Manufacturer: syz [ 82.281550][ T5668] usb 4-1: SerialNumber: syz [ 82.324804][ T5668] usb 4-1: 3:1 : does not exist [ 82.324819][ T5668] usb 4-1: 3:2 : does not exist [ 82.362565][ T5682] usb 1-1: device descriptor read/64, error -71 [ 82.473029][ T5682] usb usb1-port1: attempt power cycle [ 82.812343][ T5682] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.833051][ T5682] usb 1-1: device descriptor read/8, error -71 [ 83.072677][ T5682] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.093638][ T5682] usb 1-1: device descriptor read/8, error -71 [ 83.168966][ T1236] usb 4-1: USB disconnect, device number 4 [ 83.203260][ T5682] usb usb1-port1: unable to enumerate USB device [ 83.652476][ T5682] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.802286][ T5682] usb 3-1: Using ep0 maxpacket: 32 [ 83.810008][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.810058][ T5682] usb 3-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice= d.10 [ 83.810593][ T5682] usb 3-1: config 121 has no interfaces? [ 83.844917][ T5682] usb 3-1: string descriptor 0 read error: -22 [ 83.845062][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.091541][ T1236] usb 3-1: USB disconnect, device number 3 [ 84.725135][ T5860] tipc: Can't bind to reserved service type 0 [ 85.084530][ T5682] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.233971][ T5682] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 85.237086][ T5682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.239895][ T5682] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 85.239920][ T5682] usb 3-1: Product: syz [ 85.239934][ T5682] usb 3-1: Manufacturer: syz [ 85.239948][ T5682] usb 3-1: SerialNumber: syz [ 85.304976][ T5682] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 85.305009][ T5682] em28xx 3-1:1.0: DVB interface 0 found: bulk [ 85.605288][ T5875] netlink: 'syz.4.45': attribute type 11 has an invalid length. [ 86.078387][ T5682] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 86.193451][ T5881] x_tables: duplicate underflow at hook 1 [ 86.792513][ T89] cfg80211: failed to load regulatory.db [ 87.342325][ T89] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.493611][ T89] usb 2-1: Using ep0 maxpacket: 32 [ 87.494296][ T89] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 87.498081][ T89] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 87.498107][ T89] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 87.498129][ T89] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.500441][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.500464][ T89] usb 2-1: Product: syz [ 87.500477][ T89] usb 2-1: Manufacturer: syz [ 87.500491][ T89] usb 2-1: SerialNumber: syz [ 87.509163][ T89] usb 2-1: config 0 descriptor?? [ 87.730552][ T5913] FAULT_INJECTION: forcing a failure. [ 87.730552][ T5913] name failslab, interval 1, probability 0, space 0, times 0 [ 87.730605][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.3.57 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.730623][ T5913] Tainted: [L]=SOFTLOCKUP [ 87.730627][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.730639][ T5913] Call Trace: [ 87.730646][ T5913] [ 87.730651][ T5913] dump_stack_lvl+0xe8/0x150 [ 87.730679][ T5913] should_fail_ex+0x410/0x560 [ 87.730709][ T5913] should_failslab+0xa8/0x100 [ 87.730736][ T5913] __kmalloc_noprof+0xfe/0x720 [ 87.730757][ T5913] ? kobject_get_path+0xc5/0x2f0 [ 87.730775][ T5913] ? kobject_get_path+0xc5/0x2f0 [ 87.730793][ T5913] kobject_get_path+0xc5/0x2f0 [ 87.730813][ T5913] kobject_uevent_env+0x29e/0x9e0 [ 87.730840][ T5913] device_add+0x544/0xb80 [ 87.730867][ T5913] nfc_register_device+0x4e/0x370 [ 87.730893][ T5913] ? mutex_init_lockdep+0xdf/0x110 [ 87.730983][ T5913] nci_register_device+0x8a2/0xa00 [ 87.731019][ T5913] ? __pfx_nci_register_device+0x10/0x10 [ 87.731046][ T5913] ? __raw_spin_lock_init+0x45/0x100 [ 87.731072][ T5913] ? __raw_spin_lock_init+0x45/0x100 [ 87.731088][ T5913] ? __init_waitqueue_head+0xa8/0x150 [ 87.731104][ T5913] virtual_ncidev_open+0x129/0x1a0 [ 87.731120][ T5913] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 87.731141][ T5913] misc_open+0x2d5/0x350 [ 87.731164][ T5913] chrdev_open+0x4d9/0x600 [ 87.731190][ T5913] ? __pfx_chrdev_open+0x10/0x10 [ 87.731214][ T5913] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 87.731232][ T5913] ? __pfx_chrdev_open+0x10/0x10 [ 87.731244][ T5913] do_dentry_open+0x816/0x1380 [ 87.731263][ T5913] vfs_open+0x3b/0x340 [ 87.731275][ T5913] ? path_openat+0x1428/0x1d60 [ 87.731297][ T5913] path_openat+0x1443/0x1d60 [ 87.731334][ T5913] do_file_open+0x23e/0x4a0 [ 87.731359][ T5913] ? __pfx_do_file_open+0x10/0x10 [ 87.731403][ T5913] ? _raw_spin_unlock+0x28/0x50 [ 87.731422][ T5913] ? alloc_fd+0x651/0x6c0 [ 87.731442][ T5913] do_sys_openat2+0x115/0x200 [ 87.731470][ T5913] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.731496][ T5913] ? ksys_write+0x242/0x270 [ 87.731517][ T5913] ? __pfx_ksys_write+0x10/0x10 [ 87.731539][ T5913] __x64_sys_openat+0x138/0x170 [ 87.731556][ T5913] do_syscall_64+0x166/0x520 [ 87.731570][ T5913] ? trace_irq_disable+0x3b/0x140 [ 87.731581][ T5913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.731592][ T5913] ? clear_bhb_loop+0x70/0xc0 [ 87.731615][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.731634][ T5913] RIP: 0033:0x7fbbc6b9e159 [ 87.731660][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.731676][ T5913] RSP: 002b:00007fbbc79f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.731697][ T5913] RAX: ffffffffffffffda RBX: 00007fbbc6e25fa0 RCX: 00007fbbc6b9e159 [ 87.731704][ T5913] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 87.731711][ T5913] RBP: 00007fbbc79f3090 R08: 0000000000000000 R09: 0000000000000000 [ 87.731718][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.731723][ T5913] R13: 00007fbbc6e26038 R14: 00007fbbc6e25fa0 R15: 00007fbbc6f4fa48 [ 87.731740][ T5913] [ 87.812986][ T5682] em28xx 3-1:1.0: read from i2c device at 0xa0 failed with unknown error (status=254) [ 87.813046][ T5682] em28xx 3-1:1.0: board has no eeprom [ 88.024262][ T5903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.025170][ T5903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.038346][ T89] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 88.222409][ T5682] em28xx 3-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 88.222454][ T5682] em28xx 3-1:1.0: dvb set to bulk mode. [ 88.225057][ T5683] em28xx 3-1:1.0: Binding DVB extension [ 88.236217][ T5683] em28xx 3-1:1.0: writing to i2c device at 0x1e failed (error=-5) [ 88.236263][ T5683] zl10353_read_register: readreg error (reg=127, ret==-5) [ 88.236324][ T5683] em28xx 3-1:1.0: frontend initialization failed [ 88.243177][ T5683] em28xx 3-1:1.0: Remote control support is not available for this card. [ 88.244829][ T5682] usb 3-1: USB disconnect, device number 4 [ 88.251765][ T5682] em28xx 3-1:1.0: Disconnecting em28xx [ 88.251860][ T5682] em28xx 3-1:1.0: Closing input extension [ 88.307304][ T89] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 88.307572][ T89] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 88.370838][ T5682] em28xx: Freeing device [ 88.503544][ T1236] usb 2-1: USB disconnect, device number 3 [ 89.087870][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 89.087899][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 89.459130][ T5946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.460163][ T5940] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3333159381 (13332637524 ns) > initial count (1750453420 ns). Using initial count to start timer. [ 90.034024][ T104] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.034068][ T104] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.035286][ T104] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.035324][ T104] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.058558][ T5968] IPv6: NLM_F_REPLACE set, but no existing node found! [ 90.262130][ T5973] xt_hashlimit: size too large, truncated to 1048576 [ 90.402476][ T5975] xt_hashlimit: size too large, truncated to 1048576 [ 90.440205][ T5981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.79'. [ 91.011916][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 91.011950][ T6008] netlink: 59 bytes leftover after parsing attributes in process `syz.4.90'. [ 91.562325][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 91.685615][ T6030] FAULT_INJECTION: forcing a failure. [ 91.685615][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 91.685650][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.2.98 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.685676][ T6030] Tainted: [L]=SOFTLOCKUP [ 91.685683][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.685694][ T6030] Call Trace: [ 91.685702][ T6030] [ 91.685711][ T6030] dump_stack_lvl+0xe8/0x150 [ 91.685743][ T6030] should_fail_ex+0x410/0x560 [ 91.685772][ T6030] should_failslab+0xa8/0x100 [ 91.685799][ T6030] __kvmalloc_node_noprof+0x176/0x820 [ 91.685827][ T6030] ? record_stack_access+0xc71/0x1110 [ 91.685850][ T6030] ? record_stack_access+0xc71/0x1110 [ 91.685881][ T6030] record_stack_access+0xc71/0x1110 [ 91.685918][ T6030] ? __pfx_record_stack_access+0x10/0x10 [ 91.685953][ T6030] analyze_subprog+0x4544/0x9e00 [ 91.685976][ T6030] ? __uprobe_perf_func+0xaf/0x1380 [ 91.686049][ T6030] ? __pfx_analyze_subprog+0x10/0x10 [ 91.686071][ T6030] ? __x64_sys_bpf+0xba/0xd0 [ 91.686089][ T6030] ? gss_match+0x4d0/0x5a0 [ 91.686115][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.686173][ T6030] ? call_instance+0x263/0x560 [ 91.686195][ T6030] ? rcu_is_watching+0x16/0xb0 [ 91.686219][ T6030] ? call_instance+0x263/0x560 [ 91.686240][ T6030] ? trace_kmalloc+0x2a/0xf0 [ 91.686262][ T6030] ? call_instance+0x263/0x560 [ 91.686284][ T6030] ? __kvmalloc_node_noprof+0x52f/0x820 [ 91.686308][ T6030] ? __kvmalloc_node_noprof+0x345/0x820 [ 91.686329][ T6030] ? call_instance+0x263/0x560 [ 91.686350][ T6030] ? call_instance+0x263/0x560 [ 91.686390][ T6030] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 91.686413][ T6030] ? bpf_base_func_proto+0x2f8/0xb00 [ 91.686439][ T6030] ? __pfx_sk_filter_func_proto+0x10/0x10 [ 91.686485][ T6030] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 91.686513][ T6030] ? __kvmalloc_node_noprof+0x345/0x820 [ 91.686534][ T6030] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 91.686556][ T6030] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 91.686584][ T6030] bpf_compute_live_registers+0x8d3/0x1ff0 [ 91.686623][ T6030] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 91.686658][ T6030] bpf_check+0x2746/0x2ef0 [ 91.686699][ T6030] ? __pfx_bpf_check+0x10/0x10 [ 91.686724][ T6030] ? bpf_obj_name_cpy+0x194/0x1e0 [ 91.686757][ T6030] bpf_prog_load+0x14d6/0x1c20 [ 91.686799][ T6030] ? __pfx_bpf_prog_load+0x10/0x10 [ 91.686852][ T6030] __sys_bpf+0xd0d/0xd90 [ 91.686884][ T6030] ? __pfx___sys_bpf+0x10/0x10 [ 91.686919][ T6030] ? __fget_files+0x2a/0x420 [ 91.686964][ T6030] ? ksys_write+0x242/0x270 [ 91.686985][ T6030] ? __pfx_ksys_write+0x10/0x10 [ 91.687009][ T6030] __x64_sys_bpf+0xba/0xd0 [ 91.687034][ T6030] do_syscall_64+0x166/0x520 [ 91.687060][ T6030] ? trace_irq_disable+0x3b/0x140 [ 91.687080][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.687106][ T6030] ? clear_bhb_loop+0x70/0xc0 [ 91.687134][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.687154][ T6030] RIP: 0033:0x7f56e4f9e159 [ 91.687172][ T6030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.687188][ T6030] RSP: 002b:00007f56e5e0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.687210][ T6030] RAX: ffffffffffffffda RBX: 00007f56e5225fa0 RCX: 00007f56e4f9e159 [ 91.687224][ T6030] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 91.687237][ T6030] RBP: 00007f56e5e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 91.687249][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.687261][ T6030] R13: 00007f56e5226038 R14: 00007f56e5225fa0 R15: 00007f56e534fa48 [ 91.687293][ T6030] [ 91.858449][ T6035] netlink: 'syz.3.99': attribute type 11 has an invalid length. [ 92.299286][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 92.299316][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 92.306679][ T6050] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 92.316964][ T6050] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 92.319397][ T6050] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 92.322345][ T1236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.361961][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 92.371843][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 92.371881][ T10] usb 5-1: can't read configurations, error -71 [ 92.455779][ T6053] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.473493][ T1236] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 92.474372][ T1236] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 92.474386][ T1236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.474396][ T1236] usb 4-1: config 0 has no interface number 0 [ 92.476215][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.476228][ T1236] usb 4-1: Product: syz [ 92.476236][ T1236] usb 4-1: Manufacturer: syz [ 92.476243][ T1236] usb 4-1: SerialNumber: syz [ 92.479801][ T1236] usb 4-1: config 0 descriptor?? [ 92.485969][ T1236] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 92.502381][ T5683] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.672381][ T5683] usb 1-1: device descriptor read/64, error -71 [ 92.690173][ T1236] usb 4-1: USB disconnect, device number 5 [ 92.913195][ T5683] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.945644][ T1171] IPVS: starting estimator thread 0... [ 93.042343][ T6058] IPVS: using max 33 ests per chain, 79200 per kthread [ 93.042362][ T5683] usb 1-1: device descriptor read/64, error -71 [ 93.154518][ T5683] usb usb1-port1: attempt power cycle [ 93.494295][ T5683] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.513186][ T5683] usb 1-1: device descriptor read/8, error -71 [ 93.753288][ T5683] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.773680][ T5683] usb 1-1: device descriptor read/8, error -71 [ 93.883872][ T5683] usb usb1-port1: unable to enumerate USB device [ 93.910043][ T6091] loop4: detected capacity change from 0 to 2640 [ 93.936697][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.936759][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.936787][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.936813][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.936839][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.936880][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.936919][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.936946][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.936960][ T6091] ldm_validate_partition_table(): Disk read failed. [ 93.936985][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.937012][ T6091] Buffer I/O error on dev loop4, logical block 0, async page read [ 93.937054][ T6091] Dev loop4: unable to read RDB block 0 [ 93.937235][ T6091] loop4: unable to read partition table [ 93.946328][ T6091] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 94.190190][ T6100] syzkaller0: entered promiscuous mode [ 94.190212][ T6100] syzkaller0: entered allmulticast mode [ 95.119990][ T6140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.140'. [ 95.362068][ T31] audit: type=1326 audit(1790729472.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.3.142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbc6b9e159 code=0x0 [ 95.453705][ T6148] bridge0: port 3(syz_tun) entered blocking state [ 95.453812][ T6148] bridge0: port 3(syz_tun) entered disabled state [ 95.453978][ T6148] syz_tun: entered allmulticast mode [ 95.463418][ T6148] syz_tun: entered promiscuous mode [ 95.474758][ T6148] bridge0: port 3(syz_tun) entered blocking state [ 95.474880][ T6148] bridge0: port 3(syz_tun) entered forwarding state [ 95.576603][ T6150] netlink: 'syz.4.144': attribute type 11 has an invalid length. [ 95.576628][ T6150] netlink: 104 bytes leftover after parsing attributes in process `syz.4.144'. [ 95.816068][ T6156] netlink: 76 bytes leftover after parsing attributes in process `syz.4.144'. [ 95.920275][ T31] audit: type=1326 audit(1790729473.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56e4f9e159 code=0x0 [ 96.224940][ T6169] FAULT_INJECTION: forcing a failure. [ 96.224940][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 96.224978][ T6169] CPU: 1 UID: 0 PID: 6169 Comm: syz.0.151 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.224999][ T6169] Tainted: [L]=SOFTLOCKUP [ 96.225004][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.225012][ T6169] Call Trace: [ 96.225018][ T6169] [ 96.225024][ T6169] dump_stack_lvl+0xe8/0x150 [ 96.225049][ T6169] should_fail_ex+0x410/0x560 [ 96.225070][ T6169] ? __alloc_skb+0x1db/0x7a0 [ 96.225088][ T6169] should_failslab+0xa8/0x100 [ 96.225110][ T6169] ? __alloc_skb+0x1db/0x7a0 [ 96.225127][ T6169] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 96.225143][ T6169] ? __alloc_skb+0x18d/0x7a0 [ 96.225163][ T6169] ? __alloc_skb+0x1db/0x7a0 [ 96.225187][ T6169] __alloc_skb+0x1db/0x7a0 [ 96.225210][ T6169] alloc_skb_with_frags+0xc6/0x760 [ 96.225242][ T6169] sock_alloc_send_pskb+0x878/0x990 [ 96.225276][ T6169] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 96.225300][ T6169] ? kasan_quarantine_put+0xbb/0x1f0 [ 96.225318][ T6169] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.225342][ T6169] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 96.225358][ T6169] ? kmem_cache_free+0x182/0x650 [ 96.225379][ T6169] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 96.225406][ T6169] unix_dgram_sendmsg+0x4da/0x17b0 [ 96.225434][ T6169] ? __pfx___css_rstat_updated+0x10/0x10 [ 96.225463][ T6169] ? __lock_acquire+0x747/0x2de0 [ 96.225484][ T6169] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 96.225507][ T6169] ? aa_sock_msg_perm+0x129/0x210 [ 96.225533][ T6169] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 96.225556][ T6169] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 96.225576][ T6169] sock_sendmsg_nosec+0x13a/0x180 [ 96.225600][ T6169] ____sys_sendmsg+0x54e/0x850 [ 96.225632][ T6169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.225661][ T6169] ? import_iovec+0x73/0xa0 [ 96.225689][ T6169] ___sys_sendmsg+0x2a5/0x360 [ 96.225722][ T6169] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.225753][ T6169] ? __lock_acquire+0x747/0x2de0 [ 96.225816][ T6169] __sys_sendmmsg+0x273/0x4d0 [ 96.225849][ T6169] ? __pfx___sys_sendmmsg+0x10/0x10 [ 96.225885][ T6169] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.225925][ T6169] ? ksys_write+0x242/0x270 [ 96.225946][ T6169] ? __pfx_ksys_write+0x10/0x10 [ 96.225970][ T6169] __x64_sys_sendmmsg+0xa0/0xc0 [ 96.226000][ T6169] do_syscall_64+0x166/0x520 [ 96.226024][ T6169] ? trace_irq_disable+0x3b/0x140 [ 96.226044][ T6169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.226064][ T6169] ? clear_bhb_loop+0x70/0xc0 [ 96.226087][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.226107][ T6169] RIP: 0033:0x7f5223d9e159 [ 96.226125][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.226141][ T6169] RSP: 002b:00007f5224d19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.226161][ T6169] RAX: ffffffffffffffda RBX: 00007f5224025fa0 RCX: 00007f5223d9e159 [ 96.226175][ T6169] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 96.226188][ T6169] RBP: 00007f5224d19090 R08: 0000000000000000 R09: 0000000000000000 [ 96.226200][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.226212][ T6169] R13: 00007f5224026038 R14: 00007f5224025fa0 R15: 00007f522414fa48 [ 96.226241][ T6169] [ 96.407542][ T1219] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.612702][ T1219] usb 3-1: Using ep0 maxpacket: 8 [ 96.622136][ T1219] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 96.648357][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.648384][ T1219] usb 3-1: Product: syz [ 96.648398][ T1219] usb 3-1: Manufacturer: syz [ 96.648412][ T1219] usb 3-1: SerialNumber: syz [ 97.074507][ T6179] loop4: detected capacity change from 0 to 2640 [ 97.100653][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'. [ 97.100740][ T6179] team0: entered allmulticast mode [ 97.100759][ T6179] team_slave_0: entered allmulticast mode [ 97.100777][ T6179] team_slave_1: entered allmulticast mode [ 97.124758][ T1236] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.283357][ T1236] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.288462][ T1236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.288491][ T1236] usb 5-1: Product: syz [ 97.288505][ T1236] usb 5-1: Manufacturer: syz [ 97.288518][ T1236] usb 5-1: SerialNumber: syz [ 97.420792][ T5683] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 97.428424][ T6198] netlink: 84 bytes leftover after parsing attributes in process `syz.0.163'. [ 97.532632][ T5668] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 97.605105][ T6202] loop4: detected capacity change from 0 to 2640 [ 97.608642][ T6202] netlink: 112 bytes leftover after parsing attributes in process `syz.0.165'. [ 97.608677][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'. [ 97.684158][ T5668] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 97.685295][ T5668] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.695104][ T5668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.695128][ T5668] usb 4-1: Product: syz [ 97.695142][ T5668] usb 4-1: Manufacturer: syz [ 97.695155][ T5668] usb 4-1: SerialNumber: syz [ 97.851500][ T6206] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.937921][ T5668] usb 4-1: unit 8 not found! [ 97.937948][ T5668] usb 4-1: unit 6 not found! [ 97.940835][ T6211] FAULT_INJECTION: forcing a failure. [ 97.940835][ T6211] name failslab, interval 1, probability 0, space 0, times 0 [ 97.940911][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.1.169 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.940937][ T6211] Tainted: [L]=SOFTLOCKUP [ 97.940944][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.940955][ T6211] Call Trace: [ 97.940962][ T6211] [ 97.940971][ T6211] dump_stack_lvl+0xe8/0x150 [ 97.941003][ T6211] should_fail_ex+0x410/0x560 [ 97.941034][ T6211] should_failslab+0xa8/0x100 [ 97.941058][ T6211] ? __kernfs_new_node+0xe6/0x980 [ 97.941085][ T6211] kmem_cache_alloc_noprof+0xa1/0x600 [ 97.941106][ T6211] ? __kernfs_new_node+0xe6/0x980 [ 97.941132][ T6211] __kernfs_new_node+0xe6/0x980 [ 97.941158][ T6211] ? __pfx___kernfs_new_node+0x10/0x10 [ 97.941178][ T6211] ? kernfs_root+0x1c/0x230 [ 97.941201][ T6211] ? kernfs_root+0x1c/0x230 [ 97.941218][ T6211] ? kernfs_root+0x1c/0x230 [ 97.941234][ T6211] ? kernfs_root+0x1c/0x230 [ 97.941256][ T6211] kernfs_new_node+0xea/0x140 [ 97.941281][ T6211] __kernfs_create_file+0x4b/0x2e0 [ 97.941308][ T6211] sysfs_add_file_mode_ns+0x237/0x300 [ 97.941342][ T6211] internal_create_group+0x679/0x1180 [ 97.941379][ T6211] ? __pfx_internal_create_group+0x10/0x10 [ 97.941402][ T6211] ? up_write+0x19d/0x4a0 [ 97.941434][ T6211] sysfs_create_groups+0x59/0x120 [ 97.941456][ T6211] device_add_attrs+0xde/0x600 [ 97.941480][ T6211] ? __pfx_device_add_attrs+0x10/0x10 [ 97.941506][ T6211] ? device_add_class_symlinks+0x21f/0x240 [ 97.941532][ T6211] device_add+0x488/0xb80 [ 97.941554][ T6211] netdev_register_kobject+0x197/0x350 [ 97.941581][ T6211] register_netdevice+0x1433/0x1eb0 [ 97.941610][ T6211] ? __pfx_register_netdevice+0x10/0x10 [ 97.941629][ T6211] ? __hw_addr_insert+0x1f8/0x220 [ 97.941652][ T6211] ? dev_addr_mod+0x174/0x350 [ 97.941682][ T6211] ? dev_addr_mod+0x1ba/0x350 [ 97.941712][ T6211] ip6gre_newlink_common+0x403/0x5b0 [ 97.941740][ T6211] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 97.941764][ T6211] ? ip6gre_tunnel_find+0x500/0x5a0 [ 97.941796][ T6211] ip6erspan_newlink+0x472/0x870 [ 97.941819][ T6211] ? __pfx_ip6erspan_newlink+0x10/0x10 [ 97.941845][ T6211] rtnl_newlink_create+0x305/0x7b0 [ 97.941878][ T6211] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 97.941910][ T6211] ? __pfx___mutex_lock+0x10/0x10 [ 97.941945][ T6211] ? ns_capable+0x89/0xe0 [ 97.941973][ T6211] rtnl_newlink+0x166d/0x1c30 [ 97.942012][ T6211] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.942035][ T6211] ? do_syscall_64+0x166/0x520 [ 97.942058][ T6211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.942119][ T6211] ? kasan_quarantine_put+0xbb/0x1f0 [ 97.942141][ T6211] ? lockdep_hardirqs_on+0x7b/0x110 [ 97.942168][ T6211] ? nlmon_xmit+0xb0/0x100 [ 97.942189][ T6211] ? kmem_cache_free+0x182/0x650 [ 97.942220][ T6211] ? __lock_acquire+0x747/0x2de0 [ 97.942247][ T6211] ? __local_bh_enable_ip+0xd6/0x140 [ 97.942271][ T6211] ? lockdep_hardirqs_on+0x7b/0x110 [ 97.942294][ T6211] ? __dev_queue_xmit+0x29b/0x3820 [ 97.942309][ T6211] ? __local_bh_enable_ip+0xd6/0x140 [ 97.942330][ T6211] ? __dev_queue_xmit+0x29b/0x3820 [ 97.942353][ T6211] ? lock_acquire+0x115/0x350 [ 97.942388][ T6211] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.942411][ T6211] rtnetlink_rcv_msg+0x802/0xc00 [ 97.942441][ T6211] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 97.942465][ T6211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.942488][ T6211] ? ref_tracker_free+0x689/0x830 [ 97.942515][ T6211] ? __pfx_ref_tracker_free+0x10/0x10 [ 97.942539][ T6211] ? __asan_memcpy+0x40/0x70 [ 97.942557][ T6211] ? __skb_clone+0x5c/0x6c0 [ 97.942589][ T6211] netlink_rcv_skb+0x226/0x4a0 [ 97.942610][ T6211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.942638][ T6211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.942671][ T6211] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.942690][ T6211] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.942716][ T6211] netlink_unicast+0x7bd/0x940 [ 97.942755][ T6211] netlink_sendmsg+0x813/0xb40 [ 97.942785][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.942813][ T6211] ? apparmor_socket_sendmsg+0x98/0x360 [ 97.942838][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.942858][ T6211] sock_sendmsg_nosec+0x13a/0x180 [ 97.942883][ T6211] ____sys_sendmsg+0x54e/0x850 [ 97.942917][ T6211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.942953][ T6211] ? import_iovec+0x73/0xa0 [ 97.942983][ T6211] ___sys_sendmsg+0x2a5/0x360 [ 97.943009][ T6211] ? __lock_acquire+0x747/0x2de0 [ 97.943039][ T6211] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.943107][ T6211] ? __fget_files+0x2a/0x420 [ 97.943134][ T6211] ? __fget_files+0x3a2/0x420 [ 97.943170][ T6211] __x64_sys_sendmsg+0x1b1/0x290 [ 97.943201][ T6211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.943251][ T6211] do_syscall_64+0x166/0x520 [ 97.943276][ T6211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.943296][ T6211] ? clear_bhb_loop+0x70/0xc0 [ 97.943320][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.943339][ T6211] RIP: 0033:0x7f0146b9e159 [ 97.943358][ T6211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.943374][ T6211] RSP: 002b:00007f0144df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.943394][ T6211] RAX: ffffffffffffffda RBX: 00007f0146e25fa0 RCX: 00007f0146b9e159 [ 97.943409][ T6211] RDX: 0000000000009080 RSI: 0000200000000200 RDI: 0000000000000008 [ 97.943421][ T6211] RBP: 00007f0144df6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.943433][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.943445][ T6211] R13: 00007f0146e26038 R14: 00007f0146e25fa0 R15: 00007f0146f4fa48 [ 97.943476][ T6211] [ 98.083676][ T5668] usb 4-1: USB disconnect, device number 6 [ 98.197039][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.550496][ T5683] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 98.572347][ T89] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 98.591745][ T5683] ath9k_htc: Failed to initialize the device [ 98.644457][ T5683] usb 5-1: ath9k_htc: USB layer deinitialized [ 98.708020][ T6222] capability: warning: `syz.1.173' uses deprecated v2 capabilities in a way that may be insecure [ 98.726417][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 98.727237][ T89] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 98.729000][ T6222] UHID_CREATE from different security context by process 98 (syz.1.173), this is not allowed. [ 98.734741][ T89] usb 1-1: string descriptor 0 read error: -71 [ 98.734875][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.801969][ T89] usb 1-1: can't set config #1, error -71 [ 98.819818][ T89] usb 1-1: USB disconnect, device number 10 [ 99.019897][ T1219] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 99.020315][ T1219] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 99.020397][ T1219] mxuport 3-1:254.0: probe with driver mxuport failed with error -71 [ 99.061100][ T1219] usb 3-1: USB disconnect, device number 5 [ 99.872049][ T6228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.176'. [ 99.929631][ T10] usb 5-1: USB disconnect, device number 10 [ 100.062358][ T89] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 100.215577][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 100.217442][ T89] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 100.217481][ T89] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 100.219358][ T89] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.219380][ T89] usb 4-1: config 0 has no interface number 0 [ 100.219419][ T89] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.219440][ T89] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.220424][ T89] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.220445][ T89] usb 4-1: config 0 has no interface number 0 [ 100.220480][ T89] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.220500][ T89] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.221482][ T89] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.221503][ T89] usb 4-1: config 0 has no interface number 0 [ 100.221540][ T89] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.221560][ T89] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.222549][ T89] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.222570][ T89] usb 4-1: config 0 has no interface number 0 [ 100.222607][ T89] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.222626][ T89] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.223570][ T89] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.223602][ T89] usb 4-1: config 0 has no interface number 0 [ 100.223638][ T89] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.223658][ T89] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.224627][ T89] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.224647][ T89] usb 4-1: config 0 has no interface number 0 [ 100.224682][ T89] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.224701][ T89] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.225760][ T89] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.225781][ T89] usb 4-1: config 0 has no interface number 0 [ 100.225817][ T89] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.225837][ T89] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.226711][ T89] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.226731][ T89] usb 4-1: config 0 has no interface number 0 [ 100.226773][ T89] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.226793][ T89] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.228869][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.228889][ T89] usb 4-1: Product: syz [ 100.228902][ T89] usb 4-1: Manufacturer: syz [ 100.228915][ T89] usb 4-1: SerialNumber: syz [ 100.231727][ T89] usb 4-1: config 0 descriptor?? [ 100.246963][ T89] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 100.501232][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.504264][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.508064][ T89] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 101.384507][ T6251] ip_tables: iptables: counters copy to user failed while replacing table [ 102.823849][ T89] usb 4-1: USB disconnect, device number 7 [ 102.837737][ T89] etas_es58x 4-1:0.2: Disconnecting syz syz [ 103.462358][ T89] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.545493][ T31] audit: type=1326 audit(1790729480.810:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.0.198" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5223d9e159 code=0x0 [ 103.562537][ T5675] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.614509][ T89] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.639934][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.639964][ T89] usb 4-1: Product: syz [ 103.639987][ T89] usb 4-1: Manufacturer: syz [ 103.640001][ T89] usb 4-1: SerialNumber: syz [ 103.695216][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 103.721310][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 103.733746][ T5675] usb 3-1: Using ep0 maxpacket: 8 [ 103.735546][ T5675] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.738648][ T5675] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.738678][ T5675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.738692][ T5675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.738703][ T5675] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.738726][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.904102][ T89] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.073650][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.075166][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.280366][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.307340][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.600834][ T6284] tipc: Started in network mode [ 104.600868][ T6284] tipc: Node identity ac14140f, cluster identity 4711 [ 104.617903][ T6284] tipc: Enabled bearer , priority 10 [ 104.807424][ T6303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.826295][ T6303] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.868525][ T6303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.012667][ T89] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 105.012904][ T89] ath9k_htc: Failed to initialize the device [ 105.069394][ T89] usb 4-1: ath9k_htc: USB layer deinitialized [ 105.093563][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.099670][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.109718][ T6303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.109750][ T6303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.129719][ T6303] veth1_vlan: left promiscuous mode [ 105.140037][ T6303] veth0_vlan: left promiscuous mode [ 105.146891][ T6303] veth0_vlan: entered promiscuous mode [ 105.159952][ T6303] veth1_vlan: entered promiscuous mode [ 105.170961][ T6303] veth1_macvtap: left promiscuous mode [ 105.181604][ T6303] veth0_macvtap: left promiscuous mode [ 105.184232][ T6303] veth0_macvtap: entered promiscuous mode [ 105.186529][ T6303] veth1_macvtap: entered promiscuous mode [ 105.198346][ T6303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.199751][ T6303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.201275][ T6303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.211160][ T6303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.257673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.257776][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.308510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.308611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.406945][ T89] usb 4-1: USB disconnect, device number 8 [ 105.716214][ T30] tipc: Node number set to 2886997007 [ 106.036039][ T5675] usb 3-1: usb_control_msg returned -71 [ 106.036069][ T5675] usbtmc 3-1:16.0: can't read capabilities [ 106.162720][ T5675] usb 3-1: USB disconnect, device number 6 [ 106.434646][ T6368] binder: BINDER_SET_CONTEXT_MGR already set [ 106.434661][ T6368] binder: 6365:6368 ioctl 4018620d 200000000100 returned -16 [ 106.531003][ T6368] binder: 6365:6368 ioctl c0306201 200000000080 returned -14 [ 106.548918][ T6375] netlink: 92 bytes leftover after parsing attributes in process `syz.3.211'. [ 106.622894][ T6367] binder: 6365:6367 ioctl c0189377 2000000001c0 returned -22 [ 106.627561][ T6354] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20001 [ 106.684350][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 106.689279][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 107.142414][ T5668] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.220324][ T6385] raw_sendmsg: syz.0.212 forgot to set AF_INET. Fix it! [ 107.293992][ T5668] usb 3-1: Using ep0 maxpacket: 32 [ 107.296384][ T5668] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.299247][ T5668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.299279][ T5668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.299316][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.324526][ T5668] usb 3-1: config 0 descriptor?? [ 107.355895][ T5668] hub 3-1:0.0: USB hub found [ 107.533313][ T5668] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 107.837864][ T5668] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 108.472451][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 108.592251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 108.957207][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.965958][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.121201][ T10] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 109.136462][ T10] usb 5-1: config 0 has no interfaces? [ 109.247748][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.247800][ T10] usb 5-1: Product: syz [ 109.247814][ T10] usb 5-1: Manufacturer: syz [ 109.247827][ T10] usb 5-1: SerialNumber: syz [ 109.274890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 109.348083][ T5668] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 109.433729][ T10] usb 5-1: config 0 descriptor?? [ 110.648636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 110.689388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.708715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 110.728598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.748611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 110.769132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 110.788987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 110.828805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 128.342267][ C0] sched: DL replenish lagged too much [ 133.310511][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.323269][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.062272][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 249.069257][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5628/1:b..l P5668/1:b..l [ 249.078329][ C0] rcu: (detected by 0, t=10502 jiffies, g=18741, q=827553 ncpus=2) [ 249.086330][ C0] task:kworker/0:4 state:R running task stack:20672 pid:5668 tgid:5668 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 249.099936][ C0] Workqueue: usb_hub_wq hub_event [ 249.105008][ C0] Call Trace: [ 249.108293][ C0] [ 249.111232][ C0] __schedule+0x17db/0x58f0 [ 249.115774][ C0] ? __lock_acquire+0x747/0x2de0 [ 249.120725][ C0] ? __pfx___schedule+0x10/0x10 [ 249.125594][ C0] ? __lock_acquire+0x747/0x2de0 [ 249.130556][ C0] preempt_schedule_irq+0x4b/0x90 [ 249.135597][ C0] irqentry_exit+0x14f/0x910 [ 249.140203][ C0] ? trace_irq_disable+0x3b/0x140 [ 249.145243][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.151232][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 249.156540][ C0] Code: ff ff ff e8 a0 5d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 0f 62 46 0a cc 48 8d 3d 77 54 da [ 249.176158][ C0] RSP: 0018:ffffc90004a9ebe0 EFLAGS: 00000292 [ 249.182245][ C0] RAX: 5e4263e72f190f00 RBX: 0000000000000000 RCX: 0000000000000046 [ 249.190239][ C0] RDX: 000000003aa33b35 RSI: ffffffff8e69f454 RDI: ffffffff8c6dad80 [ 249.198220][ C0] RBP: ffff88802c750000 R08: ffffffff8177f1df R09: 0000000000000000 [ 249.206203][ C0] R10: ffffc90004a9ed18 R11: ffffffff81b2a320 R12: ffffffff8ed5c8a0 [ 249.214281][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 249.222277][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.228513][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.233656][ C0] ? __slab_free+0x274/0x2c0 [ 249.238355][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.243490][ C0] unwind_next_frame+0xac/0x2550 [ 249.248448][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.253683][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 249.259018][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.264154][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.270324][ C0] arch_stack_walk+0x11b/0x150 [ 249.275115][ C0] ? __slab_free+0x274/0x2c0 [ 249.279740][ C0] stack_trace_save+0xa9/0x100 [ 249.284517][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 249.290088][ C0] save_stack+0x122/0x230 [ 249.294438][ C0] ? __pfx_save_stack+0x10/0x10 [ 249.299304][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 249.304688][ C0] ? __slab_free+0x274/0x2c0 [ 249.309318][ C0] ? page_ext_put+0x97/0xc0 [ 249.313852][ C0] __reset_page_owner+0x71/0x1f0 [ 249.318804][ C0] __free_frozen_pages+0xc93/0xd90 [ 249.323936][ C0] __slab_free+0x274/0x2c0 [ 249.328382][ C0] qlist_free_all+0x99/0x100 [ 249.332987][ C0] kasan_quarantine_reduce+0x148/0x160 [ 249.338461][ C0] __kasan_kmalloc+0x22/0xb0 [ 249.343072][ C0] __kmalloc_cache_noprof+0x321/0x600 [ 249.348456][ C0] ? __kmalloc_cache_noprof+0x14d/0x600 [ 249.354016][ C0] ? device_add+0xb6/0xb80 [ 249.358440][ C0] ? device_add+0xb6/0xb80 [ 249.362877][ C0] device_add+0xb6/0xb80 [ 249.367135][ C0] usb_create_ep_devs+0x12c/0x230 [ 249.372259][ C0] usb_set_configuration+0x1c1e/0x2180 [ 249.377754][ C0] usb_generic_driver_probe+0x8d/0x150 [ 249.383234][ C0] usb_probe_device+0x1c3/0x3b0 [ 249.388111][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 249.393536][ C0] really_probe+0x254/0xae0 [ 249.398062][ C0] __driver_probe_device+0x1e8/0x360 [ 249.403362][ C0] driver_probe_device+0x4f/0x240 [ 249.408404][ C0] __device_attach_driver+0x270/0x410 [ 249.413799][ C0] bus_for_each_drv+0x258/0x2f0 [ 249.418661][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 249.424569][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 249.429955][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 249.435787][ C0] __device_attach+0x2c4/0x450 [ 249.440574][ C0] ? __pfx___device_attach+0x10/0x10 [ 249.445877][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 249.451013][ C0] ? _raw_spin_unlock+0x28/0x50 [ 249.455878][ C0] device_initial_probe+0xa1/0xd0 [ 249.461095][ C0] bus_probe_device+0x12a/0x220 [ 249.465966][ C0] device_add+0x7d7/0xb80 [ 249.470329][ C0] usb_new_device+0x9aa/0x1690 [ 249.475116][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 249.480330][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.485551][ C0] hub_event+0x28e8/0x4d30 [ 249.489981][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 249.495154][ C0] ? __pfx_hub_event+0x10/0x10 [ 249.499945][ C0] ? rcu_is_watching+0x16/0xb0 [ 249.504734][ C0] ? process_scheduled_works+0x97a/0x1630 [ 249.510834][ C0] process_scheduled_works+0xc3d/0x1630 [ 249.516428][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.522438][ C0] ? assign_work+0x3cf/0x5d0 [ 249.527060][ C0] worker_thread+0xa47/0xfb0 [ 249.531682][ C0] ? __kthread_parkme+0x71/0x1f0 [ 249.536647][ C0] kthread+0x38b/0x480 [ 249.540730][ C0] ? __pfx_worker_thread+0x10/0x10 [ 249.545859][ C0] ? __pfx_kthread+0x10/0x10 [ 249.550469][ C0] ret_from_fork+0x514/0xb70 [ 249.555202][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 249.560325][ C0] ? __switch_to+0xc89/0x1420 [ 249.565034][ C0] ? __pfx_kthread+0x10/0x10 [ 249.569641][ C0] ret_from_fork_asm+0x1a/0x30 [ 249.574440][ C0] [ 249.577496][ C0] task:syz-executor state:R running task stack:22016 pid:5628 tgid:5628 ppid:5611 task_flags:0x400140 flags:0x00080000 [ 249.590994][ C0] Call Trace: [ 249.594282][ C0] [ 249.597222][ C0] __schedule+0x17db/0x58f0 [ 249.601765][ C0] ? __lock_acquire+0x747/0x2de0 [ 249.606716][ C0] ? __pfx___schedule+0x10/0x10 [ 249.611591][ C0] ? __lock_acquire+0x747/0x2de0 [ 249.616554][ C0] preempt_schedule_irq+0x4b/0x90 [ 249.621598][ C0] irqentry_exit+0x14f/0x910 [ 249.626206][ C0] ? trace_irq_disable+0x3b/0x140 [ 249.631246][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.637248][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 249.642549][ C0] Code: ff ff ff e8 a0 5d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 0f 62 46 0a cc 48 8d 3d 77 54 da [ 249.662171][ C0] RSP: 0018:ffffc900044cf0e0 EFLAGS: 00000292 [ 249.668254][ C0] RAX: c2ad429fcf272700 RBX: 0000000000000000 RCX: 0000000000000046 [ 249.676238][ C0] RDX: 000000002230fe55 RSI: ffffffff8e69f454 RDI: ffffffff8c6dad80 [ 249.684231][ C0] RBP: ffff8880203b0000 R08: ffffffff8177f1df R09: 0000000000000000 [ 249.692213][ C0] R10: ffffc900044cf218 R11: ffffffff81b2a320 R12: ffffffff8ed5c8a0 [ 249.700193][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 249.708185][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.714366][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.719508][ C0] ? __reset_page_owner+0x71/0x1f0 [ 249.724726][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.729856][ C0] unwind_next_frame+0xac/0x2550 [ 249.734808][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.739937][ C0] ? save_stack+0x122/0x230 [ 249.744457][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.749585][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.755777][ C0] arch_stack_walk+0x11b/0x150 [ 249.760596][ C0] ? __reset_page_owner+0x71/0x1f0 [ 249.765725][ C0] stack_trace_save+0xa9/0x100 [ 249.770497][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 249.775878][ C0] ? __lock_acquire+0x747/0x2de0 [ 249.780838][ C0] save_stack+0x122/0x230 [ 249.785186][ C0] ? __pfx_save_stack+0x10/0x10 [ 249.790071][ C0] ? page_ext_put+0x97/0xc0 [ 249.794592][ C0] __reset_page_owner+0x71/0x1f0 [ 249.799548][ C0] __free_frozen_pages+0xc93/0xd90 [ 249.804684][ C0] __slab_free+0x274/0x2c0 [ 249.809125][ C0] qlist_free_all+0x99/0x100 [ 249.813735][ C0] kasan_quarantine_reduce+0x148/0x160 [ 249.819206][ C0] __kasan_slab_alloc+0x22/0x80 [ 249.824075][ C0] __kmalloc_noprof+0x307/0x720 [ 249.828944][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 249.833976][ C0] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 249.839533][ C0] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 249.845102][ C0] __memcg_list_lru_alloc+0x1d9/0x760 [ 249.850500][ C0] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 249.856429][ C0] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 249.862339][ C0] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 249.868437][ C0] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 249.874257][ C0] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 249.880250][ C0] ? __d_alloc+0x37/0x6f0 [ 249.884593][ C0] ? __d_alloc+0x37/0x6f0 [ 249.888936][ C0] __d_alloc+0x37/0x6f0 [ 249.893113][ C0] d_alloc_cursor+0x44/0xd0 [ 249.897623][ C0] ? __pfx_dcache_dir_open+0x10/0x10 [ 249.902915][ C0] dcache_dir_open+0x41/0x80 [ 249.907512][ C0] ? __pfx_dcache_dir_open+0x10/0x10 [ 249.912807][ C0] do_dentry_open+0x816/0x1380 [ 249.917595][ C0] vfs_open+0x3b/0x340 [ 249.921672][ C0] ? path_openat+0x1428/0x1d60 [ 249.926445][ C0] path_openat+0x1443/0x1d60 [ 249.931067][ C0] do_file_open+0x23e/0x4a0 [ 249.935583][ C0] ? __pfx_do_file_open+0x10/0x10 [ 249.940642][ C0] ? _raw_spin_unlock+0x28/0x50 [ 249.945502][ C0] ? alloc_fd+0x651/0x6c0 [ 249.949859][ C0] do_sys_openat2+0x115/0x200 [ 249.954671][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.959892][ C0] ? rcu_is_watching+0x16/0xb0 [ 249.964779][ C0] __x64_sys_openat+0x138/0x170 [ 249.969660][ C0] do_syscall_64+0x166/0x520 [ 249.974276][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.980389][ C0] ? clear_bhb_loop+0x70/0xc0 [ 249.985092][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.991081][ C0] RIP: 0033:0x7f9c1339d47c [ 249.995518][ C0] RSP: 002b:00007f9c1374fd40 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 250.003938][ C0] RAX: ffffffffffffffda RBX: 0000000000000075 RCX: 00007f9c1339d47c [ 250.011922][ C0] RDX: 0000000000090800 RSI: 00007f9c134349ad RDI: 00000000ffffff9c [ 250.019906][ C0] RBP: 00007f9c1374fdec R08: 0000000000000000 R09: 0000000000000000 [ 250.027906][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000002b [ 250.035902][ C0] R13: 0000000000000000 R14: 000000000001acc9 R15: 00007f9c1374fe40 [ 250.043918][ C0] [ 252.740318][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.750243][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.847183][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.857828][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.156708][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 256.156757][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 256.156786][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 256.156831][ T4933] Bluetooth: hci0: command 0x0406 tx timeout [ 256.156856][ T4933] Bluetooth: hci1: command 0x0406 tx timeout