last executing test programs: 2m45.009520775s ago: executing program 1 (id=1334): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5000000, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m44.757190809s ago: executing program 2 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev}}}]}]}, 0x58}}, 0x0) 2m44.711921928s ago: executing program 1 (id=1335): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}, {0x2000000}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) 2m44.371212255s ago: executing program 1 (id=1336): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "174f1e863b"}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x50}}, 0xe00) 2m42.989819946s ago: executing program 1 (id=1340): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a0000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m42.842174342s ago: executing program 1 (id=1343): syz_open_dev$video(&(0x7f0000000080), 0x1cf, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r1}, 0x18) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r1, 0x0, 0x5}, 0x18) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x20000000000000f0, &(0x7f0000001740)=ANY=[@ANYBLOB="8a137b6b8de6801bcb562d3dfa05f3932bba5a0e3e2fb4b589239c7873901dd183f1c0bc54557aeb0cc6e0ac28004be1d9a88aafe699f78be10ec7e98f5973c3355a94ef09eaf109fb60c04ac21023cad93da59cad7545ae16eef2ca11f0df4ce4a5dc9bed24dccdcd273a323223cc3359f29d5a68b7f010dae8f4cf153cb305c78d0e0f0e4e053d2d72"], &(0x7f0000000440)='GPL\x00', 0x21, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x0, 0x4, 0x9f, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0x1, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001680)={r3, 0x0, 0x34, 0x0, &(0x7f0000001600)="e74b02613cf7af8b303ba96b8a1a9b117047ae52213f29cd174eb9e4a5684902bbbbf8d02251beac4a5fa1b518ad97fd35bfc463", 0x0, 0x2, 0x0, 0xf, 0x0, &(0x7f0000001640)="1630f0ed312be410ba9db5918f44f8", 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/232, 0xb5}, {0x0}], 0x2, 0x4, 0x5) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r7, 0x5501) preadv(r6, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) r8 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r8, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x46, 0x2, 0x9, 0x7, @loopback, @mcast1, 0x40, 0x10, 0x571, 0x2}}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000003c0)={r9, 0x1, 0x6, @remote}, 0x10) userfaultfd(0x80001) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00f50100000004"], 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$kcm(0x2, 0xa, 0x2) 2m39.521322562s ago: executing program 1 (id=1354): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x7ee8}}, './file0\x00'}) sync() sync() ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sync() sync() sync() sync() sync() sync() sync() 2m27.102754894s ago: executing program 2 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev}}}]}]}, 0x58}}, 0x0) 2m24.06581344s ago: executing program 32 (id=1354): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x7ee8}}, './file0\x00'}) sync() sync() ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sync() sync() sync() sync() sync() sync() sync() 2m6.041791461s ago: executing program 0 (id=1456): unshare(0x6020400) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r1, 0xfb59b128081ca7fb}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d68bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527ffd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f891f547c7e69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = epoll_create(0x100) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x10000008}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x80000000, 0x2, 0x4}) syz_open_dev$video(&(0x7f0000000580), 0x0, 0x8c200) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r6 = epoll_create(0x1f) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000f80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000050) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x200a}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[], 0x0) 2m5.177248905s ago: executing program 0 (id=1459): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000f0ff020001c0"]) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) 2m4.70268834s ago: executing program 0 (id=1460): r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0x8, 0x1) mount$pvfs2(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x1000000, @mcast2, 0x9}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0x80000001, 0x302) preadv(r4, &(0x7f0000002040)=[{0x0}], 0x1, 0x1, 0x1) quotactl$Q_QUOTAOFF(0x3, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc884}, 0x4008) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r5, &(0x7f00000015c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001680)="2b2e69238b8abd895b476111935833cfe872053a12965e0d8bbfaef249b583ce290052bc40869a35bbd1daed045be4db10beb2a4c34bf0f2cb0984026e6d15f9e1804b7e08ccb1edfe5066e3abe60f2b2d82c4e7bc72e82244bddbde94f26a644394a11725452853e24b165105831a4625fab443e5198cb8957436341c09a58c5a64c26b467bc6a2a7a32bbeb909c7b7f80a5b0bc341c33a7e30360ab7085ead97bc659a83bcead5dbea8f9173f13dd09539309daf33847bdd7a94806fe76e585f99236ae57d0ce6e148124e3be95125cc83df2faf0773fcfdb31d409e8fba", 0xdf}, {&(0x7f0000000340)="1fd4f39e6dd189c8c893e3ca6062adb53031fd4c68f763945e7df7f1eeec3b6e3c69ebfd8a5d4268e0ada72552877e018598be4facc86eeb015ff26d2de38470d397cd8a0ae8936ba26f625db26dd13080b7332fb024c5fe14fd63e361dff7d625da18a4a3b44b949e4259bdb9fcd193fba3b8528a30cad832571f0028ad1cb724517f0babeba9afaedee4c8c999954bb7a9aec59b4606d4cde9c1e2ba5a3b74e74cbe49ec6d0f0f004aec8ceb8d2e069bdc9a12262716010a5ffe79c5840d4c24650deca404ddef49443c1f9618476296910bbadd2c776af61179f436ce8e5611674d83e226e40ee8dd36d74a1d97292a7212964d974e1576fd8dfdfc2a806e7849b09bb3a4d6c62b49340d43f4d161e7a23ba79f46a23bd4bec00b7bff80ff69c128945c9f1a1632545d4a6c6128eb17af0c013ae3a9cf56c69d876c52dd08ec239376484d97f521644286afef0a671c49702c8ef61c8dd8b0e4839a27b8e1f8351d82ce19d967a297baa4dec531eb3b901c5a642115bdc5816e8826dc885c5084feffb39bc3220b0140920562bfb31631dc3fb99d355f327d08e51a85d91ce5ed647fa0894b62b9a8fa80945f1e8764da17c8cdeedb7c25f92b6dd86995fab789daea7809d3fd10358c813eac41803446a9cac88299cf5aad87d0c0ad3d8d8be97457d12e32fb843c3673a87ab4a8e2c9fcc1ba1642eeb374379b9ab66412efcd19b6c20b5157dd2df6985808eec132b2c8e1d2be5cdf25d8e1f072dd778d4bbd7e253631b99378a454fa3c19aeb483e49ea329dc0e01858ab3f66ed646a6f7fe905514891f92207c9220669c01e57be921469488eb26af5ad05ca18556293c0fe7ddfd17bfe521bb7a45e647dde912f682867932ad37e49a88a89019336e55278ea7b7a78af56a6da7c10fa5de0df40fd3abc82186c582fe6f6e7689d3934ae3bce6284d09d8cf94daba52ebb659d3191c15a365885f5f1d8c5b608c3543617d7ebb7c18837abf7eb7e469a9fc919e70db651a42e105553035b42e5a6465d1b45255b6723247ae3f75516a56f9f53639af0f9ed803ffe4461ff0cee4ee9cf5a112e92fc92643389f012228c8bcffee8adf3fddd80c5bb6dca7bb1c655413273f9f6ce5afaea52361f77708b93f0d1f57775b52ae9bb0a4f2988bc8ca70bf1bd16881ca0deaf6debb62fe1306ff70180a94dded629f9590ae798f4be70a7a2e2c85d5eb6b4e1770e467135072e63dcc77b68723a05393a4e2c7f644664646ab3b8bde259349e08b41e5f409b9054b1e6229c98b6076e1bc08f41313ecadcb3188861bf85f17a82ac5841e5d80f1efdcba104adc44dbe188b41874e20bccae8ff09beb2e7ccc2bf619c16a20927871d47ed7e3dd92d648fb2e06dec1f1054d159c708f00de65ed0795c23b17ee0d7a97adf40cf3ebd265c4b6248fd64372dfe29bb84f99e93abda7dfc6b350ed6b53760c69e0d70a454c3c630cd98cbec37489c9745749b0d61d91435de5685de5895ad10967ee7f7f0952ab32b8254646cbf793af488a84a91fecdb6541057c735289189322980cfb9e6b1657fcb47718ef3d31c056e93eb97cc38646d1983aa83c2cf60d5794484a74ef51d4d9f0c70032fa4b9cedb8dd33cc37f8dc0310f31aca2a49deb5bb3495ce6b3f3753ca4f5ffd49aeb73d52abf3975d4e295baf15d129b452ce1aa3e486c702fa2126a4b4aa2dfec4970e629c2afc9d03f9febcbff4dfa51177151ddcb4b0c57fc252835301cd9863268e8a688740b5a3ef15839ffffa5de94838b187a3e7ec760339c4eb82585e53941c59fcc3a1f99f71767b8d9d46f9ffb05cb421499ada333a27408530cdd0f5c8e6f95a8405caf4487683894f61e4642e8e9a2bb62b4dc7f88c40ccc3b73eac26c0d921c62d48c8fc9c0e1f3b7d05a6a34e218d838e660ccb3425f31868f49c01c2ebbf4f343e6c397fc4717707791d709e2ff69970586a426237ed4dcf7ccb62f30742ed6ed6e7c9dd9330d51f8a72a7ef9b548dd8bed083a5ce80b3369b92cba8c2a62b738acd3d4b5acac07707dd8ca49ff1418345d6de7542ba8f00563a28ba86f2fbf6ab690d71988bf177a4b54cbbaeb52fcedf65f93d650306a01a30f09da966bc3ff2ab73cb0c899e1f2fc22cb1ef00494449aab70302316b3182e3054098c82fcdac709561bab5da5e126e9e706135dd4b5512145382483c2d3795eaded8814c40b49c9e5bb9b8f7054ba7d8a578cfa38033d1d20a6888d764fe55f42f6c0018bdc11002107b4e475a6432b819abab868be36c58d3df80ff1e18bef63c375b4b2b6d2dc01b2191468f755d7cd9cc310b8c984a46c53d88e601d1ed75ba4f05132bb4b650aac01c76a7a186335172864b401a089fef24dafbccb239bb317345747ab32412882141d33c4f2eb563b5be44978ae1c9f2c372bafea8c83476e3596e040a8ba777afeaf7bcf76492bc02d067eb488043fe3999bdecc341a20599e28167c6bb680a3080cd31e9f9e5abd13e35277e29fe3e1b6b86e8cee6ff7f5ce297a69272056718d45b208451fea8251f8f32c7ce96391565e3d923aa7c010d8b327b4e4f11d1137627e13eaeaa08ba8d3112bf76ef22aeba8590687136630dff10592423e756a96882344d478ea5b610e70434c449c7fbfda6a5aef84f12166e4d7f2b55e3d3617dc6f81dc91aaa5e81f5255fa75400a1525e17843d4376345136d681e0c1c94f8ceacb66ff7c0fe5053160f2ac42907783d4b554c7460c7239b3940917a4ad0f605700735687dcbff7d3da867f58377c3aaac7d951f0a02205f38204c3608e643b7a331b1966646c7dcac76f4ceede64fdba73875a5899fef03f3dd2125ed62e0eb8475e6a313e5927ba40384a61378ae4b669c4b5a2a851fdb2c0f4bc755908dce28dc65a8b9f719d66dd7d71e74721a8d5b25aac0b849b20163b9bd53f2fc507dc888f6f662ab73c5a11e0488c76d4191742112f4b546f77cc23bd3241fbab4ddab4529523256457435903db27ea87149905175287276ee6dd9475c926047dd65cb9134d69b147f4baa29240a8651c9daafd8d08a8f32baac1a9c1fe020eb89857aabe5de2bc45d7d26aa753ea2a5226f1e8205a2fe910fec3f270f5bdbddfbede38e80ce1f1b8f8c5970061ea842e0e7e70be6992bf370a234007479b7ac9c3c91f25552abdd12d928bcd4a899e164a3c4b2190d4b6697fa87e7dbff7aefbdba55cf9baabca1f4a315945720182b02adb6b81199ba483cda16e644ad382795d2005977918586796953ca1beaf38ccc3db8b56fad06ef9e0a2706825e897321864cc16ec680e55030c5ebbded379c882f49fca3274ff0c39a421cd4952bdf6a24a003cf7db1d92a49e4b4dbc715d663136a89b52148008fcfdd6cc08423fbee3341d5616fbad46fe18a5630c033c6960b07f63904e763d796f09f1a311bcdc447ee9ac381162805dbc801fb020b1c83e29bf1bf4c0f0bb5631f68d8faa9493d45a3f2fae00e5f9f803f7b7babcb9bb85648c31371ef7600578f0ece3354b01f5079c39d914f1412d3083e85c473dcc27da4e5d69cb5e0f0803136b8f13d82b0015a24b9ea0b9bb9ae09b2bbf506e31d090f92340c71e04d3de3a70e92010e2082b4fc109f55b9c56a828eebd824fbd2325f95688193a5d5a189900024c137346f6f6a5bd5e3debc3a711bd57034d94ed8cec266e8567ff9440df7019b5018781ca5309fb70ce26c779dc6b2e80dda1ad0b0eb5de9f2d1a45649308c215793949bffc0227f1861e6ed97b48b45064e893958fca629a97ce5d39b37ba33cc84445e93fefc9ba05b3978a50517e19e6d6f3869018f78c80da4d8179b361acccffa2f37b553f1a2547ffb034d2b47932a92dda7292b7d66ecbd78c79c0ddbe398f173f78d99be865eb1aa80a31954951e9acf394a4e1cc409b02d6f281eb6a00d624d199ac3f251136e272ab6756b965ff1ce936fc7a87b0b87e8c5090e87d2f2d0f08780504317f17c96bdf9b5b6e4e1f6178eab854c92d66c097b06f8a384b1387434b4f8146eb68f0e5e6e389a1625daf9218877973c8bc944224d1b405ff283a4986a6d239a5b230ed8651729c652c63ec4c6da5a0f49cc836dd263eb1f93bc2b2a388ce3607c3b0820651b7fbe13c14d416f7d395eb66c1df42a0314b827d4c60ac7b3271f09bdabcf4924e1c054b39e5b37164c9c73e57b85899a43c108821f4c288f3141f257999cf3624bf12fe354a8fcd69c0232145d67c3d14f43815de4b31888e651d6de37df085c41a279a3f97a208281125df5a2499ae4252259567959fcdb5444d9e5883f6a3a29d333effe4ed8e6d30e16867d8003a12eb4d3a595c19e5fd6081a8bc76430b4da238b5929c3ab024fc928490ba57c3d1a76f4426fdb2c3cd450a5a9643800cb7c70572eed5a0b41be055f36c045175f761cc637352ddb628332e639c2f6ee4212337cfb8336cc66ef03d79916a5e7072837e6d57b2ad5563013d4b44f1249ba98e6e1d60bc092ba1099461dc4982099dcb6e27330b7ad3551081af0ed29c99a37ee0700938861a019a7084dbba2c0e4750a486158cefafe232f08fb73424861981debd9430aaa128202e658a0ca2924b9ef95bbe314db6bff0de92fac01f308d79dccbab6d15932325337aa697f893c18c5f6d847f866cc32dc5bd6aaa7618c72928181cf8ae965a361e9a1fd237584f6e9cd5317b392da89278e1189cabb5b444947a15cceed1bb6c2b5935353621c987314ff40a76d5998ae7ad2c9bebed0c22901c38bba294900de00c3188c56b76b79d29448782e0da2d163766186ba72f5d60e94da94f583ed9ebadefedc05761515147d8313971f7ed0807e47006b9dec1a2e0e6416b011e9067fde3f461aed3f4a2f560ab0c8a728d718447c22d0caa00291eba4c93f3461ecd15f133a4519ea3a61ab98fdf5854a74ca072620c9faaad7c077261f9944fd7ceb8c6955b623813bda06f37b878d72fe4dfe7915e598d2cdb0d30d428214cab579f713c60507c10f6292b57e9480413c00e369b2947afc7d7985238f1ea368b6b1c75c2441a54d7b24a0cde80a2aa795c9834ee085c17616cd220c049a3edcbb3bdb795d9bfa9ec5a73c546557c36d8d90fd625bafb3cf12271e697129ee6bf6942d1c6492e4031b8f8b1d78858d9ddab3990282c6709a9f59d0d3115ef10bb957e1067537e937c98ba45678e4cb8c081a82433f90ef99a07e3e312e15e6e897299c13c33d7604e05c8dd9904384628ebfe4163011876d86790cb0160286bc781de899837256d76649c709703bb2775816a446017c675d6735f4e26554d499220de0ad0d27e22291ad4ba1fb65d968c2313a9ea3004f1a6301d5d796359816c91c0286a9afc25fc540f19aba77e32cd5a65720ed504ce5d81ff61b272eae274989cc863a97197534ded2441e7d41d261a23509a495e9c3295467ab780a8c3d9dee6a4d68053fa10bd2a036e770993cc5dae7ed6c6673986b805e1dbda79a26a5380a6cfb97c879b5ea6f16d04d6cbac7cd3ed47df1158684ad4f0606ee28ef778ca0bc7807bd5a67f2718475fbe82889cae1bbb1c07c227f6ae8734384ab8e419b7dd5b55c2952beafced59e77be855369f34ad2a40faf06a3d83802d944527351c8706cf78cf1402ab184de13a5582ffe7f7f5406783ce60b146bff042941323715805b77918c61e4c9188984d3a5299044e1189b13fc40901152521d5edfd8a06070a9904f9939c91c96a04d5e7f3f1d883567644fc4e1b0e5bac9e", 0x1000}, {&(0x7f0000000100)}, {&(0x7f0000001340)="166074a875773a8e400bc6912f150afed402531e145bc04e1ed636abecdfe0b9acfc81715ad3047e322f57d7a7b8c67803300e80d51eeefe2c8fc3b4eb6ccfeadf2642782fafe35cca23de8c6378891bd01668445f33b1dee2583a6137c8f296326233e90ab357b37102195ceb90acb9142498dc4278a0e861ea4c8a35465443f47bc5f31c9bbcf4dcb06f2292f3f0dd985692b4b89cd194", 0x98}, {&(0x7f0000001400)="3a529808657edb6a72b3e91c150cd80672f160c645b36dd821c5b110dd2e3df2f6eb000f4e4a73d3e31b88a518d50ca80216bb47a55113b0131faa015e73e606d7adeb5a4082e9e9ff448de79a1a5e68fdd9fbcb6a092310dd602367922a926f9d68d27a71ba7be4bb61eb8ba65e67c5631e6a27acb0ddd54b1bd4c661e48e5459b20d20dad152257d39e815e0057b6dc3cfff89cbeab0ee28a277317ee18cb1c36968e13112ff550ad4e53899a6abc2910e50dfdec0e3f59ff92e1196cfb5065325ff41edc541adbc914c58f3c5", 0xce}, {&(0x7f0000000140)="7c5b198ce090ff667e502d0e331ac5f33bd234833a671ea99a6c7c0e5f6a7e18e8e3c52a0a5cb44cab217c97ce5553d975129abf9615dd2d135e8d3e99d6c37ab6268650448f33d2bc88da7c84ee67feeabc6c8ec52e437ea1edc9573cecbf7b92", 0x61}], 0x6, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000000000000000000070000004404cd514404c953"], 0x18}, 0x4004004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m3.413460377s ago: executing program 0 (id=1463): r0 = epoll_create1(0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000140)) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) write(r3, &(0x7f0000000140)='/', 0x1) sendfile(r3, r3, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r3, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x41000, 0x0) mount(&(0x7f0000000080)=@filename='\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x105043, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) sendfile(r2, r1, 0x0, 0x80000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x18c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x8d, 0x6, "4ea874ba532d5a1efe9d885475bbc5853a81abd56bdef62bacc7ee4c08946f0d8f3514c2992e413b67989b59626d6603dce61ac651e07e250d5a6735b5ac3a4e3b7c4b1038951b8d95632cc0c13bd9b96c53823d8dd3a67f286812b7c3efe02e5f2d2bde08398789d1a31d9032c6f81f8c3eea9fbe7c4617af6e5cbb9e8fa855fd73136902f1da84ca"}, @NFTA_TABLE_USERDATA={0x64, 0x6, "a9701705322e2825ca27624c813a67cba3a17ff365826b8060c6780c50f8aeaa14eaac08191e85f2676142fefbc07253d0d9d82fe852c3c473bd48d7ab52bcb9f49620875cbcfc52d8c868ee774c60cde546a2078c18b348b5cc5c111e8f572f"}, @NFTA_TABLE_USERDATA={0x77, 0x6, "851ec012bf31e8b4c746684dab77b07b857ebb201943e9716f7fa5787e5fea084999c1c23185d82b6923e5e66ec0ff69799e8889ec924d257279fe1c9c30810fb4d49922c61873608061e3ed16f5add1216c4da03f8a1f5172aede75b11192f98ca52fc85c3531b307306b084d12f325a23fd9"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xc0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x2a4}}, 0x80) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000640)={{0x4, @name="a603a35e168153344af2d40ca7bbfc33f0abfaf115b6ed5dddcb1e0e09d13573"}, 0x8, 0x6, 0x3}) 2m1.423493476s ago: executing program 0 (id=1468): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000851000000300000018200000000000000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000064b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m1.154178008s ago: executing program 0 (id=1469): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000f0ff020001c0"]) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) 2m0.423773442s ago: executing program 33 (id=1469): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000f0ff020001c0"]) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) 1m55.155149369s ago: executing program 2 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev}}}]}]}, 0x58}}, 0x0) 1m29.308511479s ago: executing program 2 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev}}}]}]}, 0x58}}, 0x0) 39.438971893s ago: executing program 2 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev}}}]}]}, 0x58}}, 0x0) 18.363102782s ago: executing program 4 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c) r3 = io_uring_setup(0x177f, &(0x7f0000000140)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000300)="57f88e5e7d7ca8d453b6b27acebe9bff98297bcd068e797adb3faf5b66b7fe568270302a6ee18b0c6ed2634584390d278cf42cee51e755eb61e13a8f9dea51a85cbffe8b63d2e12384b686", 0x4b}, {&(0x7f0000000380)="e46861eec8a17fdfc0b61f7f40773822ece7d655448e499b75dfc022319b86ecd93345fc92bb829c7b182f8b21c7abd8330b387122d22f2e2ef35ed2022ede2c01451dcfab122eff34d73651", 0x4c}, {&(0x7f0000000100)="53cf94cb0f5b6dbe7368c89d6fb3d293d10eacfd1d840727d493ecfb916f9963eee22a2ce2cad38d734fe9e65386e48274b309557290a901", 0x38}, {&(0x7f00000008c0)="cb64bbeb37b251baecf0560a5fc387eecce428aba30ce0cab626c93ea525deb62534a89c0318a56989a98bbdab3ddfa0143c92033c6564021eb2450ab86d1c1e02c70d20ad671123ef69dda6d94160d8ca57add2149f2d8b2fe1ea52e5a0104b59e50fefded1bab03ac49575895910b30c323c7fedcf4a1f54105ca544b98ac63fd7a358bf346bfdc45565f36d0b547a2e588223b580e1173cbf959f01eb15891a4b2cdd9ef1d2d4654fd4b9ebbdf0219969f79cafccd5b25383bed864f36568b150d7e7f8ed12", 0xc7}, {&(0x7f00000009c0)="291a9e7651f97291e799d43841445f37bf59084d1200c8e8a6a2edaf616492b1c82dc925e5075c1221094149a31634a36f1e10db2eb281990a5f24754fa87f9968befc6c93f83f1c79c1cfc5222b640ec3bc", 0x52}, {&(0x7f0000000a40)="7bbe6e59fc0a34d28a0e1125f9ac70283915b1c616bca07d95a9fc59082e1c65a3ce432927b97afccb5064b4b6672adcccc4194398008c03b25bb54e8ed0044e742b91a32beb748f836d25467a536e9cdacae466150c0dbcf965f53de3cae0529f1289afe5534185fd9922cef8a5dce2059346651dd39a741a582a0c644aef7c85a59d390d2f2352445cc1f9a3c78ddf42776b3382c900d30d64023a2561487deeacfd3cd8c034825c4965e14ea0d5f2c930a7330c34dd55746903f3a8f95f2c7079b20820bbc01f179aa4c609f57e2cd322fa842c8ec7e3a660246d4bca443d15937ddacce17555dc8857759e4c3fce8c8583c7e88b25ba6c782bab97be3044ca4aac9db2159e59ed3bc07c822f970e72eb7140eccd18e0d0a892184dce405c23ca854b29059ecbaa7773cfe67c7e064bf75528ab9c6d84513de10db6619bf1a73080057a4b5247f0a3b1c0ad5257f31b59543c4737cb3e45a93663eba03225c10e72806a2eb17646a2f1b3e921aa8166dba58ceb4bb744a4afdf2d8766c1fbe5cca0661384e4bd648436d1e5a5aac846dd536f4dac5daf81264614de44d8d83928875a125383b10dd2fa78c37e72fb8921e97c29a80a53d76ca60a25072a9b31a1d4fff3419fda1ac9cef760b34ed95bc8fbd5bea09cd75cd72f44c7f50b07461f4fd8231e619c48f634dd5809ba66d77e8a1a8a98b727a860462fda92b2a780dd5d6bc0d69ea0f6bea145490d0f29b65b324572ea56e3b924fb1984d04197d75b91132e9c2e7c738270bfe172b348b836ec8e8c73a9b5004de792e0c1aa3187e501b44c21eb1603eaa69f0a22f49430c4aa42d4406d7dacfe676deff328d3b189b250467b0a564c57cf30105bc86b3b73d5893c0aab462043fbf9e105864e4faa04cd466647829509649595b1428ebfff103967a088971919d2c4a1eaf31ef3d7807e5ac13ce01ca66cc1684de0b2a31e8f9c661f107c17030fdd43a4d1110e12d0cfd06b2d08edfa3b9fb002ea302f7707f1d28db5b93344d63241502fd37ff8020905e1f2e1341dd0d20b55d44e7eb252d1a123f26e004b30593fa086a912d5ba63dabe1b13710e4195cfb0847bd82711699f9d2c1209f9b2493fa83980a368645201330a6e7d5dea040e03fc15bad2dfbea2f57fd5dc97efbc8a26b0c9db3610b87002c8853d57c385de1f9037b60bacea3f72dc588e2f963e5d3a66bedfdc625d5772995bb86c7be99d86029bbf23ca9f1e5e5cdbfedf6f1cff50b8ec36c1beff8fdbd656be9312e1765f0cd245a4d2b069b3ea98c076171af631a2eabe40048b85b9e8783acbda7f17f9de0e774814c7b62600828a530a57619a72a2c1169ef9ca1796571f08b6f8ffed2538edb49fbc1a88afd2b8cd28c20572fdd0fdd0dd1a76b74a193e6916bcd7eb1876b0d2674fb6639174077a31ae16e32d0e76060c652525d5ff41fbc3f4d8b19c10cafc52e40ce512f27f1819679cfa4bb51dad2704ab3f7846dbd7f112fd8d8295499f3e23f29e0b6645ada2b2fa1a0a433409aa03dd0491c8cb117548c5458c884766519b51272a71e683869d1790c7101513776cc0dd12d2162f74df4b6d641c1a1122d448ae565380b386ffb9df1edaf75137f93b4cdbcf5d6f9e508eb3987122224f4b723890d6a4a526f2a3219094b747581fd254c9ee836715213cebc5d3af6982d9cbf3369476a239c9733fcd90982a985a43c07c4dd959831ab32a05ae1596a0db03765eb69a1b0297fe853c75e2f281e523620b44db1c63be734800bdcf0d0a44bbfe4e6333102eb7a6cb0a0c4e3151c211f343ad1b733b99fcf796d12c05a2738436a2ec0351d80798a9c3ab239bcb224f39edffedbab7c969872a7b2c249efa9160f9ab8ab20933632d61018d4ba94405e57f3f831680ad07ce6889f687db4b26cf739213fc6ab5e94cee9f5d02ca2b596c3b9b7f2718564d9c0c9f38267d170aecf01cccc878b48885ee07857f632308521cd3b16bb89502b6f4d8acd70fdaeebb21b7674d2b29773f7c73a733dbbf4d3bbece2d672b04113358469f64329891aeac571d19a5735ba3aaa4b011c6da4c644eee01f28bd64f75db8cb363c9b6b99f9b7b2c4975836a6c163c6fd4962fb6dacc1c4aacfd78f70a588219b4a3ea990efbccbaf23659ef1633bffdd4988ffda376892e0d9046b085da825463f907e91275ce0126cb9d336f9957e7cafe6c8a1b8ec1f4b949d8f5bee1b15fc258e5abff0ca5cd157dbd3c6757284c0a3f15b2dc7a3715a06ee11f7ca412d4f59b5fa7965a86bab5c5979135dcde8f02ec0170fcceb48dd7f14366865cb99bb0e7d6116b5fbbb4988eb5519951294c602a28568232ccf3bedb76420b1a37a7c4a256c113b86181531db2af0dfa29e256daedde8083edc9dc95f16e03c8c4daf8ce2ce777aca451b4054395d8446d5a17d1f376a481c38792f9f1e1bfc0c4b6d2e60e88a2b8cfa288f145b66e4fd2ddea5c0503946ff9eacb9a043603dd395fbf20086747b071c2709fa09a879e10ca72d3753e63fc7e34d0137245b5e9e22980ae63823438ed2b67d603867e1572adedbd3cc7655f4f2785407ec7391dafee87a602e3e9d128dcf751485d3133c3a3e0a87b48b643e7c230d3f0053c242735564ffa13003fad47445815ac2988f24325b8ad52eb4476faf54ec18e270608e43275713712e8d20566df89ed2a317f5567d23610ff6b4c766b62f73c7c147e4eeb5bbb894f2ebd7efdf13ea3a30ca8835008a73b41523c78010125811796f0b0bea101bc511397ea34927e3d5da325c6a424289923132ccb6a0b53dfa2787d94d72edbdf66c04d8bff468276cfc7454419f5ee60a575693a5a1df4fcab46fba9edc44bc0254cd64616f41144b377856c3a7f6d432515ded8ed75b0d4f2ce3e74fc0b6524ebbb1998da436f15ef5a99f3ef5bfac8d1233adfb73e2678610ac8d576a477db63e18b989d08abebde768d8484b75cdcaf061cd5d9704853b6b44d7847ca42894383fed9f88ac20638fc22fccee64d9e8a896ebbd78a099a86acdd563c2ca1bfc8b9459cc5938230287feed3e39e008cc5d4dd8b4f3ed448cfdb9142ad4d7e361ca53962f3289e5e94a460898d000d980486435eecde10ba47b5e09d1eb0af3e96c70df13d99925a5df626f39cbf12fd8b06a16fdb77f8049a163ed5ad7a3693f8dec7c55a205ded31ccc4ddbe00855e1232b40b6776888d90076e0ae670b7021907f7bc580dcd02f6d4295183daa3cb431315b3dc0763150c77517e3b6667e5f0ca6793de300b891860295646ef8109a5ae42ab91cb242fd6b3106cd9fee49c81a0c5c2d1fcf494c833e8b3327ba80c4b5dcb5632a23faec817d54ca48d1ea48d20c88d75790ad0f1c67ec04bbc09a586c1b7ceed6acf78f01b25a3aa326881d777b5d692da1087aff959ca1379f4071e18e1cadc445abb4ed86e7679e582ea5eeeb0d4dc989c067c937f71ea2995347903676936e32edb83bbdab7d888140dd8b2ce88b7018b3a433af90656cb039a830cc10240fe28ba6166da58690df625e55d0c084e65642336196ba5a8e48a35ff45553327525dd902af1ab0387a89d48cd0b0b1fda5192b9a388abe128eabf855557ff9bd7d8ee598e784e7f38497f4dfdbfd49455b45c0b8323df5a363ff8af81c96d29f3210ad0195f5008522cfe7c9f23a42f21341f4f61cf82a61c85f8911eadb20e0c6f9a0dbc3ddd5777d3bcd5821a3e14b44e6f2254d830fcb11d144b96bf9b602264efd9f303b7bcbb0e0f460a05991125d80bed28a0e15fea4fb3aa412576c15b853729278cfd06e8b5558e8aab07fd3872f3831db5cf22dd6c232f07bc48a4425eb52bac90bc63c2db3d8b778dd5ff3f9ea66d7a6b8a89d25279e97466da512c09b12e620903632f88acb54c8a88795c22e50395039bef76a9abcf9c2e85b4722ad34ffc75b19f2271aa6db38a8485bc6b1f17d6339a7b145128d5bd02f9d900d6061e17bd6a96fc2cd41c06247bc9250d8ecdbbfda21a6058222fb804ad8c13e60dfd6f607ea70d9f7f869c0e1f0f3fc1f4179c673b3000a80e21a7dfea1b87aa1d2fb6526df9a19ca789009a7332daec8f074051560b01a497fe16ed57fe9ae59f26976ccbe7632f7c10f20ffd8e70daf665ec887816a4cba85a3a34beb5c378c5772e2f6e813e3407cda6ad528690a4d1ba67a2b014c1797a0b5b401e3211235f84f072701804c7a4f52b80839044ef5dd183989578346d239996f46cbcac271db81fd4962db06a6fe164c1dff8023484b0b40eba4af26ffa9e3369385ccf07e7c29a8c6b3a37954f9aba997c5f3e32829c77e394643875c94aa42a2de2c89a134ad571a1130c553ea3f2958e69f1c47a49cdb812c74725d504d826587baba0a3a52b617442f9d2b677f0789993d266196f9429cb0cffa0ff63ebef3094250d521f19377ab2e8adf0cb3cb2ffb47d2a63b0a8624386e451220ce0f0264b1bb9361d7f8ec08e5470f285bdeb81adb2e6f1124a76c6f2176bdf0dea5f39e0af7bbb1fc53c80ca33a348478dde53dff9e2b83736a0c58b1726c5267b58ab5ef62aa29df8350a37e87e4f0c158954c2708055b46d316f313519134bb4c6f0a60524c940d54b45508633a33d9f30059284b81436590124806d6404b116db933b8d495dac3da115a30047ee85394b5670cfb28b058869af48a66ab44747034dbeadf36e3f3d2457573f660140c87a295d716f079da6500b8365763eb31adcf6ba73b2e2ec42d11b324ff3db219f609fb49e90b448a8c740eaec95a242a6863d0bceb5a605d555c8fd8e9a1ea2fe6064ecff34253842a3b28f141173bdde268c009a83487b7e12f93fb3b87d28215cc94b48aa86f20b21a930e676a0aa9a6b77a593b0e46082c92dc48196e27b0c095e69a293834786f07c917241d4e02777e9db8a07027e99949a6727beafd5b0ee9b864b7521e2ef4e400bdc707c55f97d87efb80fa6ed112928d260a12a055ba2556180fb9aa5d94d51fa1c2e9ddd625de5d90b5a2f3265c78252b46531bb6e696223d06f03c54efdc5d71c8a4349c5577d77a42f478b780871b4104b6fefd7caa382ae0bc4f1c7d29c8bb4630fa8353526c5848f2727624c8dbbedd567a374fac508eef863a6fb0d1c1da24a921e8ad7bd5ebc86634ec5040188702c205cec12e57b4e41421df979ca017347e4b2cd2c533d87028f0aa9f3c6bed442b576535c908dc504cd062380ea305588cd555e79d864fbfc4fa2637f6493039cfe912323ff5a0bbd10789a4dd61d65810ade5a4c9d8366f4b2ac7ef1b3553f631d01a3172c5705edc7bad0dd2b8ec849cb90d5e729a74f71929171bfdca48cdef63a418b2b3ad6a921f163d82b403e3faf14648582f4dd3c1b5fd25a17959d64662babc63ddfcbc39165e32b5", 0xf00}], 0x6) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x80ff, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 12.37579238s ago: executing program 4 (id=1723): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x3) (async) r1 = openat$smackfs_revoke_subject(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x6) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) write(r0, &(0x7f0000000100)="19ffc92e862ccc9f04aaa5911e11ee1dff02ae23937065aaa78005ff36b487b1000452fa5a25763b83f7a29e3777b9b5faf06f16d63f6585512f843a6a322f", 0x3f) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x100) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') (async) rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x250) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.192041171s ago: executing program 3 (id=1728): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/197, 0xc5}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000008000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 10.089753312s ago: executing program 2 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev}}}]}]}, 0x58}}, 0x0) 10.062250923s ago: executing program 3 (id=1730): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x10d, 0xb, &(0x7f00000003c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0xe8) iopl(0x7) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) io_uring_setup(0x675f, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) 7.426701717s ago: executing program 5 (id=1732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfc7f000000000000) 7.4263912s ago: executing program 3 (id=1733): mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x315a00a, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) socket$inet6(0xa, 0x3, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x2a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000013c0)='tasks\x00', 0x2, 0x0) r4 = open(0x0, 0x10f0c2, 0x0) ftruncate(r4, 0x200004) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r2, r4, 0x0, 0x80001d00c0d1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xffffffa1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x1, 0x4, {0xa, 0x4e23, 0x7, @mcast1, 0xffffed0f}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="9fc82c5d4f91984600c0024c11e0bb15435a409e0621367bd2bc2a65229559e07178eb51cff9077d5f0649bbc4f8e55791b581461df219f1209035b23932dc21b4c35ec4b62db377a013f2f575a1dde23d222da25eedd698c1bc3692669a194fd051", 0x62}, {0x0}, {&(0x7f0000000300)="4f41e2f06ca63ce26d027f15e3ba898e39e0ec7280b3ff3a109007e8b2fa2cf84f4528cd8537eaf776b03074f168181de65dc225302ccfaf21f50e309d77216a2eab317fec2de60a691a291ba1729de6a77cf44437629df63375a49fa021cdd5768163987293bc4d8164524bde4a5f8d291bf22d995cda5d8a78f769ea3d7f528d3520de0a5bdac8fc90bb0551833672f29f60b521c480c093df99572f7eda174982799da0b7b4fde0b967446f7813fe1387c41d7ef0bd4d92074c9605f48f66dfa0453e91391db253fa550530cfe2c9824488c4cf15b98db622187f79a4893b33dd2e6c48c3", 0xe6}, {&(0x7f00000001c0)="671d4e903c913a154e6f49c7d7d7abbba68fc0b86821a6acb83891e19996255083147b871289d100d89930377d428c94d925303b770a003c8a37d7da4a9e902311e42013bc2d83a8515ffe1487d220d5037940937b973b923017ed8aaf8732632192167013b0d3b8698d70d623301924a496b76abafc0d8d6e27ecfbfb55997c3427c7bea9b859f220da617bedbbe2c7425d974cb28533db62146099be7a25b7d646fb82837f138f", 0xa8}], 0x4, &(0x7f0000000500)=[{0xf0, 0xff, 0x8, "092f1c04824a7aa5f2387e30695137fc3a1d933e3d96850f46b362ff84368969348e483afd4f5a117211f1cc03c3b86b2f7ad195bae06f1c5ad5819cb3f30667a486b8d6ee5ee86589dfe8581f2267d1c661782788d3fae9666d350d754eb16f7eeddd1624378c948e4a658a930def3b225c043267f0dc0fa264ab4a39f16d981bd0073352fa1f0752e4c6d9674ab2d15384e7959786289d69bf136f45ee98d384cae7027000993297ae4b4ecd52c423e98b1af445b17fc00c1c89619f457f5862f1b5a8d634adb890329939875041f9f3ddf9ffefdaeb360ce5a164e621f3"}, {0x48, 0x10b, 0x68, "4c58d034c56ea58524613ce5e871d967dd1ed18a1f0c72bb812bb0d153d391ab05aedece9617934f8176d3592ab79beb085bb640420af865"}, {0x58, 0x29, 0x2, "ed3629795943e66ef7b3dfa8f8697940889efd7f1a49da16c74088f7ca1fd4797cee61af8306b1fb9415f5d9279696fc90879d551ac2a143c4a10e8e639cb9b07a08d336"}, {0x10, 0x6, 0x7}, {0xf0, 0x113, 0x401, "cc706688d85a561952ae753532a9764768b97259d1e0769ae292c09a379cad8718ac4d50cfaa2c1f58b00657963dcc40af4aee2768ea186299c048f3cdcfec585b2333bd6963e4396da3817077bcd435472aebcd3d8ca7cd1c69b9dc9b4f7c583b27d8440d910e1f9c7f6f45aa17ebb03d8ed8cc65bb43dde9e8fdc1dc41cfc8ab446237ec7a91a7d89049bf72d931971c49f81503d30bfd74091c941ccfe0c6feb7ff668e48d99f3c751ecc63eb21a4c0e258ed31cddf873ddf41eb2bd2c02058be6edffdd404a4300c7d3d35be76136b072cfd1209833965335134e29f7532"}], 0x290}, 0x800) 7.425820937s ago: executing program 4 (id=1734): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0xd, 0x4, 0x4, 0x2, 0xf, 0x3e91, 0x8, [0x2af, 0x9]}}) poll(&(0x7f0000000080)=[{r0, 0x8000}, {r0, 0xe0f92be05e76898b}], 0x2, 0x3) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'net_prio'}, {0x2b, 'freezer'}, {0x2d, 'io'}, {0x2d, 'pids'}, {0x2b, 'cpuset'}, {0x2d, 'blkio'}, {0x2b, 'rlimit'}, {0x2d, 'memory'}, {0x2b, 'net_cls'}, {0x2b, 'rdma'}]}, 0x4b) r2 = getpgid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x100, 0x7, {r2}, {0xee01}, 0x3ff, 0x9}) syz_clone(0x1155200, &(0x7f00000001c0)="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", 0x1000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="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") r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000002280)={0x0, 0x40, 0x5780, 0x9}, &(0x7f00000022c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000002300)={r4, 0x1}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000002340)={0x0, 'sit0\x00', {0x4}, 0x3a}) userfaultfd(0x801) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002380)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000003940)=[{{&(0x7f00000023c0)=@abs, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002440)=""/187, 0xbb}, {&(0x7f0000002500)=""/66, 0x42}, {&(0x7f0000002580)=""/234, 0xea}, {&(0x7f0000002680)=""/148, 0x94}, {&(0x7f0000002740)=""/33, 0x21}], 0x5}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002880)=""/144, 0x90}, {&(0x7f0000002940)=""/92, 0x5c}, {&(0x7f00000029c0)=""/155, 0x9b}, {&(0x7f0000002a80)=""/15, 0xf}, {&(0x7f0000002ac0)=""/182, 0xb6}, {&(0x7f0000002b80)=""/123, 0x7b}, {&(0x7f0000002c00)=""/209, 0xd1}, {&(0x7f0000002d00)=""/44, 0x2c}, {&(0x7f0000002d40)=""/177, 0xb1}], 0x9}}, {{&(0x7f0000002ec0), 0x6e, &(0x7f0000003480)=[{&(0x7f0000002f40)=""/31, 0x1f}, {&(0x7f0000002f80)=""/176, 0xb0}, {&(0x7f0000003040)=""/241, 0xf1}, {&(0x7f0000003140)=""/218, 0xda}, {&(0x7f0000003240)=""/130, 0x82}, {&(0x7f0000003300)=""/83, 0x53}, {&(0x7f0000003380)=""/69, 0x45}, {&(0x7f0000003400)=""/122, 0x7a}], 0x8, &(0x7f0000003500)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f00000035c0)=""/220, 0xdc}, {&(0x7f00000036c0)=""/137, 0x89}], 0x2, &(0x7f00000037c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003800)=@abs, 0x6e, &(0x7f0000003900)=[{&(0x7f0000003880)=""/111, 0x6f}], 0x1}}], 0x5, 0x40000040, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000003a80)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r6) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x30, r8, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x366}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000003d00)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c40)={0x58, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x23}]}, 0x58}}, 0x4040004) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000003d40)={0x1, 0x1}, &(0x7f0000003d80)) close(r7) pause() syz_genetlink_get_family_id$smc(&(0x7f0000003dc0), r6) socket$unix(0x1, 0x4, 0x0) getsockopt$nfc_llcp(r3, 0x118, 0x4, &(0x7f0000003e00)=""/80, 0x50) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000003e80)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000003ec0)={{0x1, 0x1, 0x18, r3, {0x101}}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 6.127088057s ago: executing program 5 (id=1736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x2d) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) listxattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x36314247, 0x0, 0x0, [{}, {}, {0x80020000}]}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000f00)=""/194, 0xc2}], 0x2, &(0x7f0000000dc0)=""/209, 0xd1}, 0xc4}], 0x1, 0x0, 0x0) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000380)={0xd52b249819329c3c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b, 0x0, 0x0, 0x10, 0x0, @value}, 0xa1) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r8, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20) 4.955235354s ago: executing program 5 (id=1739): syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, 0x0, 0x680822d7e3b5f37d}, 0x14}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @multicast1, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2e1e}}}}}, 0x0) syz_emit_ethernet(0x1c, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000080)={0x18, r6}) 4.91446963s ago: executing program 6 (id=1740): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xffe) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000077e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c2b805000000b9030000000f01c166ba430066b8003866efc4c105f141d0f3260f35c4e17c50e80f23090f825d00000067650f01ca2e0f08", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="6f1b52f0"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) 2.679960099s ago: executing program 6 (id=1741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000200), 0x7f8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x1002, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000002ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="c5de", 0x2) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@assoc={0x18}], 0x18, 0x4008000}], 0x1, 0x20044805) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) r7 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 2.21827731s ago: executing program 5 (id=1742): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0xffff0000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x4c}}, 0x20004880) 2.120616109s ago: executing program 3 (id=1743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x2c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000380)="0f01c2c4c2bd9e24c10f01d166ba4000b000ee640f06b9580b00000f3266b81c008ec0b80a0000000f23c80f21f835080090000f23f8b8010000000f01d9c4c1265c8e75aa3855", 0x47}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.024057162s ago: executing program 4 (id=1744): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x1f00000000000000) 1.637770965s ago: executing program 6 (id=1745): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x3d) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008001) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7b1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x3000000}}}, 0xb8}}, 0x0) 1.541070936s ago: executing program 5 (id=1746): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r1 = dup(r0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x40000033, r1, 0x0) write$nbd(r1, &(0x7f0000000680)=ANY=[], 0x10) socket$inet6(0xa, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) pread64(r1, &(0x7f0000000400)=""/179, 0xb3, 0x0) 684.026092ms ago: executing program 6 (id=1747): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000c400000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 592.588481ms ago: executing program 4 (id=1748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4004}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x600}, 0x0) 567.924381ms ago: executing program 5 (id=1749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x110, 0x2}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x3, 0x4, 0x9, 0x4}, 0x8) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x20048844) ppoll(&(0x7f0000000180)=[{r4, 0x110}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xc8}}, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) 491.989153ms ago: executing program 3 (id=1750): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000ff000000000095000000000000040f8d2e0ff86f6ac620cf5221bba2e9459c942a3cf425759bb5db952c7c7a7c35785fe504b38b702b6530b37a4095e7270eb878eb2ce91d39963fbf468cbf4fb12d65c124406c35099bfed4c4313f3170ca7b8eb1832caccbe59999a5604945d25f91f5b013ea5d4c09597b31297021fc082a1483742ff9fc7ab418d740cb19c5df5ae9c6819653d396f29bf2f75d0cc0e2b11edc613aa34c965b7fc2bf93c4be446ec752cfb4855e89"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x3, 0x0, 0x23, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 491.761124ms ago: executing program 6 (id=1751): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:s'], 0x2a, 0xfffffffffffffffc) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_gettime(r1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 332.144368ms ago: executing program 3 (id=1752): syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, 0x0, 0x680822d7e3b5f37d}, 0x14}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @multicast1, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2e1e}}}}}, 0x0) syz_emit_ethernet(0x1c, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000080)={0x18, r6}) 264.777691ms ago: executing program 4 (id=1753): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f00009b2000/0x1000)=nil, 0x1000, 0xa) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8015) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-avx2\x00'}}) r4 = dup(r2) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') read$FUSE(r4, &(0x7f00000041c0)={0x2020}, 0x2020) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029200030102b0000904000000010100000a2401080000020102132406000006000005000000000004000000000924030000000000000924050000f8431cfd09240300030300040704240404"], 0x0) socket$inet6(0xa, 0x80001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) epoll_create1(0x0) r5 = io_uring_setup(0x3, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3, 0x3c9}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_io_uring_setup(0xb4e, &(0x7f0000000240)={0x0, 0xf92c, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x36e10853185f3b19, 0x0, {0x0, 0x0, r5}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1754): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x7, 0x19000000, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm(blowfish)\x00'}, 0x0, 0x180}}]}, 0x184}}, 0x20000000) kernel console output (not intermixed with test programs): _ident_mapping_init+0x10/0x10 [ 475.611007][T11160] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 475.611033][T11160] machine_kexec_prepare+0x434/0x10f0 [ 475.611055][T11160] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 475.611076][T11160] ? kimage_alloc_control_pages+0xb10/0xbf0 [ 475.611104][T11160] ? __pfx_alloc_pgt_page+0x10/0x10 [ 475.611135][T11160] do_kexec_load+0x552/0x810 [ 475.611160][T11160] ? __pfx_do_kexec_load+0x10/0x10 [ 475.611180][T11160] ? __might_fault+0xc6/0x120 [ 475.611205][T11160] ? _copy_from_user+0x95/0xb0 [ 475.611226][T11160] __se_sys_kexec_load+0x12b/0x160 [ 475.611250][T11160] do_syscall_64+0xf3/0x230 [ 475.611272][T11160] ? clear_bhb_loop+0x35/0x90 [ 475.611296][T11160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.611316][T11160] RIP: 0033:0x7f88b558cde9 [ 475.611332][T11160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.611346][T11160] RSP: 002b:00007f88b33d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 475.611365][T11160] RAX: ffffffffffffffda RBX: 00007f88b57a6080 RCX: 00007f88b558cde9 [ 475.611377][T11160] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 475.611387][T11160] RBP: 00007f88b33d5090 R08: 0000000000000000 R09: 0000000000000000 [ 475.611397][T11160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.611407][T11160] R13: 0000000000000000 R14: 00007f88b57a6080 R15: 00007ffd26482eb8 [ 475.611433][T11160] [ 476.167360][ T974] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 476.361788][ T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.372889][ T974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.384374][ T974] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.393702][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.425664][ T974] usb 4-1: Product: syz [ 476.430765][ T974] usb 4-1: Manufacturer: syz [ 476.435424][ T974] usb 4-1: SerialNumber: syz [ 476.648572][ T974] usb 4-1: 0:2 : does not exist [ 476.687787][ T974] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 476.696442][ T5831] Bluetooth: hci4: command tx timeout [ 476.905838][ T974] usb 4-1: USB disconnect, device number 18 [ 477.095525][ T7385] hsr_slave_0: left promiscuous mode [ 477.105640][ T7385] hsr_slave_1: left promiscuous mode [ 477.136893][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.144573][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.156151][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 477.188443][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.206156][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.213858][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.443216][ T5877] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 477.448618][ T7385] veth1_macvtap: left promiscuous mode [ 477.451466][ T5877] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 477.470154][ T5877] usb 2-1: cp210x converter now attached to ttyUSB0 [ 477.484971][ T5877] usb 2-1: USB disconnect, device number 28 [ 477.499821][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 477.508991][ T5877] cp210x 2-1:0.0: device disconnected [ 477.519056][ T9] usb 5-1: device descriptor read/64, error -71 [ 477.570383][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 477.756350][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 477.916567][ T9] usb 5-1: device descriptor read/64, error -71 [ 478.057723][ T9] usb usb5-port1: attempt power cycle [ 478.304421][ T7385] veth0_macvtap: left promiscuous mode [ 478.315208][ T7385] veth1_vlan: left promiscuous mode [ 478.321011][ T7385] veth0_vlan: left promiscuous mode [ 478.519429][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 478.589426][ T9] usb 5-1: device descriptor read/8, error -71 [ 478.786672][ T5831] Bluetooth: hci4: command tx timeout [ 479.036303][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 479.077584][ T9] usb 5-1: device descriptor read/8, error -71 [ 479.187452][ T9] usb usb5-port1: unable to enumerate USB device [ 479.383057][T11205] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 480.861427][ T5831] Bluetooth: hci4: command tx timeout [ 480.953339][ T7385] team0 (unregistering): Port device team_slave_1 removed [ 480.969727][T11232] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 481.010750][ T7385] team0 (unregistering): Port device team_slave_0 removed [ 481.018609][ T5907] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 481.035004][T11233] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 481.188783][ T5907] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 481.198876][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.224582][ T5907] usb 5-1: config 0 descriptor?? [ 481.241495][ T5907] cp210x 5-1:0.0: cp210x converter detected [ 481.331929][T11237] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1160057152 (74243657728 ns) > initial count (51111738112 ns). Using initial count to start timer. [ 481.672244][T11138] chnl_net:caif_netlink_parms(): no params data found [ 481.996628][T11138] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.010013][T11138] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.017602][T11138] bridge_slave_0: entered allmulticast mode [ 482.026653][T11138] bridge_slave_0: entered promiscuous mode [ 482.043592][T11138] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.063149][T11138] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.075274][T11245] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 482.098374][T11138] bridge_slave_1: entered allmulticast mode [ 482.112485][T11138] bridge_slave_1: entered promiscuous mode [ 482.240538][T11138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.464641][T11138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.482880][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1369'. [ 482.621563][T11138] team0: Port device team_slave_0 added [ 482.662415][T11138] team0: Port device team_slave_1 added [ 482.887047][T11138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.922247][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.955942][ T5831] Bluetooth: hci4: command tx timeout [ 482.972706][T11138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.992005][T11138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.005834][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.047351][T11138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.297647][T11266] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 483.305326][T11266] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 483.353588][T11138] hsr_slave_0: entered promiscuous mode [ 483.391897][T11138] hsr_slave_1: entered promiscuous mode [ 483.428344][T11138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.489525][T11138] Cannot create hsr debugfs directory [ 483.710464][ T5907] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 483.730545][ T5907] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 483.768327][ T5907] usb 5-1: cp210x converter now attached to ttyUSB0 [ 483.837969][ T5907] usb 5-1: USB disconnect, device number 31 [ 483.872758][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 484.085254][ T5907] cp210x 5-1:0.0: device disconnected [ 485.357819][T11292] fuse: Unknown parameter '' [ 485.398794][T11295] xt_TCPMSS: Only works on TCP SYN packets [ 485.915134][T11138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.935659][T11138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.968462][T11138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.032405][T11138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.258206][T11138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.300095][T11138] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.340904][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.348084][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.407844][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 486.410929][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.424227][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.729651][T11138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.793475][T11138] veth0_vlan: entered promiscuous mode [ 486.813448][T11138] veth1_vlan: entered promiscuous mode [ 486.830676][ T5877] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 486.860794][T11138] veth0_macvtap: entered promiscuous mode [ 486.893785][T11138] veth1_macvtap: entered promiscuous mode [ 486.925260][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.936546][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 486.944291][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.967639][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.984770][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.999247][ T5877] usb 4-1: config 0 has an invalid interface number: 213 but max is 2 [ 487.012963][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.024448][ T5877] usb 4-1: config 0 has an invalid interface number: 91 but max is 2 [ 487.041281][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.051475][ T5877] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 487.068329][ T5877] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 487.078829][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.099277][ T5877] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 487.108729][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.128344][ T5877] usb 4-1: config 0 has no interface number 0 [ 487.134886][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.147582][ T5877] usb 4-1: config 0 has no interface number 1 [ 487.153892][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.163562][ T5877] usb 4-1: config 0 interface 213 altsetting 10 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 487.175019][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.194129][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.204518][ T9] usb 5-1: config 0 descriptor?? [ 487.211423][T11138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.219723][ T5877] usb 4-1: config 0 interface 213 altsetting 10 endpoint 0xA has an invalid bInterval 249, changing to 7 [ 487.234978][ T9] cp210x 5-1:0.0: cp210x converter detected [ 487.244739][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.257484][ T5877] usb 4-1: config 0 interface 213 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 487.276045][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.286283][ T5877] usb 4-1: config 0 interface 213 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 487.297796][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.308601][ T5877] usb 4-1: config 0 interface 213 altsetting 10 endpoint 0x3 has an invalid bInterval 25, changing to 8 [ 487.320131][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.331669][ T5877] usb 4-1: config 0 interface 213 altsetting 10 endpoint 0x3 has invalid maxpacket 2023, setting to 1024 [ 487.348704][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.359801][ T5877] usb 4-1: config 0 interface 213 altsetting 10 bulk endpoint 0x6 has invalid maxpacket 64 [ 487.370252][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.380333][ T5877] usb 4-1: config 0 interface 213 altsetting 10 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 487.392948][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.403775][ T5877] usb 4-1: config 0 interface 213 altsetting 10 endpoint 0x82 has invalid maxpacket 9672, setting to 1024 [ 487.426343][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.447834][ T5877] usb 4-1: config 0 interface 213 altsetting 10 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 487.466682][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.487700][ T5877] usb 4-1: config 0 interface 91 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 487.506066][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.525429][T11138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.534884][ T5877] usb 4-1: config 0 interface 213 has no altsetting 0 [ 487.555471][ T5877] usb 4-1: New USB device found, idVendor=0421, idProduct=0446, bcdDevice= 1.00 [ 487.581069][T11138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.597953][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.614937][T11138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.623997][ T5877] usb 4-1: Product: syz [ 487.634159][ T5877] usb 4-1: Manufacturer: syz [ 487.644866][T11138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.654032][ T5877] usb 4-1: SerialNumber: syz [ 487.668971][ T5877] usb 4-1: config 0 descriptor?? [ 487.676374][T11138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.697168][T11316] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.709070][T11316] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.842622][ T7392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.855998][ T7392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.908495][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.930766][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.020312][ T5877] usb-storage 4-1:0.213: USB Mass Storage device detected [ 488.052655][ T5877] usb-storage 4-1:0.213: Quirks match for vid 0421 pid 0446: 30 [ 488.155268][ T5877] usb-storage 4-1:0.91: USB Mass Storage device detected [ 488.180809][ T5877] usb-storage 4-1:0.91: Quirks match for vid 0421 pid 0446: 30 [ 489.623455][ T5877] usb 4-1: USB disconnect, device number 19 [ 489.790806][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 489.804440][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 489.839046][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 489.971882][ T9] usb 5-1: USB disconnect, device number 32 [ 489.987282][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 489.995495][ T9] cp210x 5-1:0.0: device disconnected [ 490.215409][T11390] netlink: 'syz.0.1389': attribute type 39 has an invalid length. [ 490.239444][ T7379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.406042][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 490.561318][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.571862][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 490.581181][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.591747][ T9] usb 5-1: config 0 descriptor?? [ 490.600943][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 490.936298][ T40] block nbd1: Possible stuck request ffff8880258d0000: control (read@0,4096B). Runtime 270 seconds [ 491.005900][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 491.026067][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 491.033237][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 491.040672][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 491.048209][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 491.055883][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 491.063543][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 491.214247][T11395] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 491.230454][ T7379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.245219][T11395] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 491.337424][T11395] overlayfs: conflicting lowerdir path [ 491.367702][ T7379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.473635][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 491.489659][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 491.522088][ T7379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.532650][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 491.542318][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 491.552848][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 491.562490][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 491.631694][T11402] lo speed is unknown, defaulting to 1000 [ 491.920130][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 492.657071][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 492.766533][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 492.773482][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 492.780912][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 492.788435][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 492.802166][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 492.809083][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 492.833212][ T9] pwc: Registered as video103. [ 492.912434][ T7379] bridge_slave_1: left allmulticast mode [ 492.918749][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 492.923047][ T9] usb 5-1: USB disconnect, device number 33 [ 492.965230][ T7379] bridge_slave_1: left promiscuous mode [ 492.979987][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.995531][ T7379] bridge_slave_0: left allmulticast mode [ 493.015014][ T7379] bridge_slave_0: left promiscuous mode [ 493.038502][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.605920][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 493.657455][ T5831] Bluetooth: hci4: command tx timeout [ 493.732949][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.745158][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.761741][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.770981][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.785904][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 493.791747][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 493.801201][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.811122][ T9] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 493.820430][ T9] usb 5-1: config 0 has no interface number 0 [ 493.827021][ T9] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 493.839985][ T9] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 493.849595][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.858054][ T9] usb 5-1: Product: syz [ 493.862337][ T9] usb 5-1: Manufacturer: syz [ 493.867961][ T9] usb 5-1: SerialNumber: syz [ 493.875216][ T9] usb 5-1: config 0 descriptor?? [ 493.882479][T11414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 494.108026][T11414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 494.563627][ T7379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.604095][ T7379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.644889][ T7379] bond0 (unregistering): Released all slaves [ 494.819452][T11458] syz.4.1403: attempt to access beyond end of device [ 494.819452][T11458] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 494.823752][ T9] net1080 5-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, e6:08:f2:1b:41:0b [ 494.883361][ T9] usb 5-1: USB disconnect, device number 34 [ 494.904169][ T9] net1080 5-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 494.961286][T11458] syz.4.1403: attempt to access beyond end of device [ 494.961286][T11458] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 494.986862][T11458] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 495.003506][T11468] could not allocate digest TFM handle sha1-ni [ 495.059931][T11458] syz.4.1403: attempt to access beyond end of device [ 495.059931][T11458] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 495.146471][T11458] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 495.183095][T11475] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.190320][T11475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.196287][T11458] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 495.209928][T11441] lo speed is unknown, defaulting to 1000 [ 495.231211][T11458] UDF-fs: Scanning with blocksize 512 failed [ 495.322355][T11458] syz.4.1403: attempt to access beyond end of device [ 495.322355][T11458] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 495.397964][T11458] syz.4.1403: attempt to access beyond end of device [ 495.397964][T11458] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 495.411542][T11458] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 495.511631][T11458] syz.4.1403: attempt to access beyond end of device [ 495.511631][T11458] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 495.687972][T11458] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 495.727184][T11458] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 495.746215][ T5835] Bluetooth: hci4: command tx timeout [ 495.748210][T11458] UDF-fs: Scanning with blocksize 1024 failed [ 495.887759][T11458] syz.4.1403: attempt to access beyond end of device [ 495.887759][T11458] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 495.913890][ T5835] Bluetooth: hci5: command tx timeout [ 495.987536][T11458] syz.4.1403: attempt to access beyond end of device [ 495.987536][T11458] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 495.989447][T11402] chnl_net:caif_netlink_parms(): no params data found [ 496.018399][T11458] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 496.086038][T11458] syz.4.1403: attempt to access beyond end of device [ 496.086038][T11458] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 496.136306][T11452] uprobe: syz.4.1403:11452 failed to unregister, leaking uprobe [ 496.167342][T11458] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 496.213746][T11458] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 496.240570][T11458] UDF-fs: Scanning with blocksize 2048 failed [ 496.298908][T11458] syz.4.1403: attempt to access beyond end of device [ 496.298908][T11458] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 496.352637][T11458] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 496.363961][T11458] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 496.373975][T11458] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 496.393134][T11458] UDF-fs: Scanning with blocksize 4096 failed [ 496.405512][T11458] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 496.463144][ T7379] hsr_slave_0: left promiscuous mode [ 496.685899][ T7379] hsr_slave_1: left promiscuous mode [ 496.693586][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.781742][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.891116][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 496.966615][T11520] netlink: 'syz.4.1414': attribute type 10 has an invalid length. [ 497.043114][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.127090][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.424192][ T7379] veth1_macvtap: left promiscuous mode [ 497.511965][ T7379] veth0_macvtap: left promiscuous mode [ 497.530415][ T7379] veth1_vlan: left promiscuous mode [ 497.552497][ T7379] veth0_vlan: left promiscuous mode [ 497.654991][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 497.677916][ T9] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 497.702078][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 497.710865][ T9] usb 4-1: can't read configurations, error -61 [ 497.822602][ T5835] Bluetooth: hci4: command tx timeout [ 497.850375][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 497.981977][ T5835] Bluetooth: hci5: command tx timeout [ 498.015941][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 498.034036][ T9] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 498.055136][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 498.073769][ T9] usb 4-1: can't read configurations, error -61 [ 498.081488][ T9] usb usb4-port1: attempt power cycle [ 498.268650][ T7379] team0 (unregistering): Port device team_slave_1 removed [ 498.325239][ T7379] team0 (unregistering): Port device team_slave_0 removed [ 498.437975][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 498.478145][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 498.485456][ T9] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 498.495285][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 498.511340][ T9] usb 4-1: can't read configurations, error -61 [ 498.645993][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 498.681557][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 498.690770][ T9] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 498.704674][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 498.722123][ T9] usb 4-1: can't read configurations, error -61 [ 498.728976][ T9] usb usb4-port1: unable to enumerate USB device [ 499.004399][T11520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.016020][T11520] batadv0: entered promiscuous mode [ 499.022437][T11520] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 499.202168][T11402] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.210945][T11402] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.226223][T11402] bridge_slave_0: entered allmulticast mode [ 499.241723][T11402] bridge_slave_0: entered promiscuous mode [ 499.266861][T11402] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.301129][T11402] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.337873][T11402] bridge_slave_1: entered allmulticast mode [ 499.345186][T11402] bridge_slave_1: entered promiscuous mode [ 499.896030][ T5835] Bluetooth: hci4: command tx timeout [ 499.984090][T11402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.055964][ T5835] Bluetooth: hci5: command tx timeout [ 500.235082][T11550] netlink: 'syz.4.1422': attribute type 2 has an invalid length. [ 500.243978][T11550] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1422'. [ 500.388636][ T29] audit: type=1326 audit(1738851402.168:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 500.389549][T11402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.587262][ T29] audit: type=1326 audit(1738851402.328:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 500.713233][ T29] audit: type=1326 audit(1738851402.488:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 500.736409][ T29] audit: type=1326 audit(1738851402.488:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 500.792337][T11441] chnl_net:caif_netlink_parms(): no params data found [ 500.890477][T11402] team0: Port device team_slave_0 added [ 500.939775][T11402] team0: Port device team_slave_1 added [ 501.123422][T11402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.152084][T11402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.253680][T11402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.383585][T11402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.391431][T11402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.418804][T11402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.453341][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.476136][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.483414][T11441] bridge_slave_0: entered allmulticast mode [ 501.506762][T11441] bridge_slave_0: entered promiscuous mode [ 501.520511][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.528103][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.535357][T11441] bridge_slave_1: entered allmulticast mode [ 501.543504][T11441] bridge_slave_1: entered promiscuous mode [ 501.556420][ T5907] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 501.721851][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.738738][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.776588][T11402] hsr_slave_0: entered promiscuous mode [ 502.203233][ T5835] Bluetooth: hci5: command tx timeout [ 502.516294][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.522825][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.617986][T11402] hsr_slave_1: entered promiscuous mode [ 502.624212][T11402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.636399][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 502.657119][T11402] Cannot create hsr debugfs directory [ 502.663835][ T5907] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 502.697848][ T5907] usb 5-1: language id specifier not provided by device, defaulting to English [ 502.719817][ T5907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 502.743455][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.753311][ T5907] usb 5-1: Product: syz [ 502.765836][ T5907] usb 5-1: SerialNumber: syz [ 502.785447][T11441] team0: Port device team_slave_0 added [ 503.899860][T11441] team0: Port device team_slave_1 added [ 504.867828][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.891193][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.923580][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.945267][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.962983][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.043329][ T5907] usb 5-1: USB disconnect, device number 35 [ 505.101885][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.494245][T11441] hsr_slave_0: entered promiscuous mode [ 505.508676][T11441] hsr_slave_1: entered promiscuous mode [ 505.514738][T11441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.522492][T11441] Cannot create hsr debugfs directory [ 505.635846][ T5907] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 507.445518][T11666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.393728][T11707] input: syz1 as /devices/virtual/input/input31 [ 509.709081][T11402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.750711][T11402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.865363][T11402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 510.110608][T11718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.026376][T11402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 511.376686][T11441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.717926][T11441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 511.766194][T11441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 512.931185][T11441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 513.614120][T11402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.712399][T11402] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.785058][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.824272][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.831494][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.855612][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.862814][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.010325][T11441] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.605300][T11770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.416612][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.424414][ T7379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.600888][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.608727][ T7379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.358499][T11402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.520061][T11402] veth0_vlan: entered promiscuous mode [ 516.568132][T11402] veth1_vlan: entered promiscuous mode [ 516.677263][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.793968][T11402] veth0_macvtap: entered promiscuous mode [ 516.831016][T11402] veth1_macvtap: entered promiscuous mode [ 516.918358][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.971756][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.006483][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.076411][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.116210][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.133423][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.164896][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.186786][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.215840][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.257618][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.309295][T11402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.353956][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.413394][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.494087][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.556339][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.625607][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.647992][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.666896][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.738078][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.752256][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 517.766248][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 517.920689][T11820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.021162][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.646710][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.666250][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.685981][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.704055][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.714871][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.727662][T11402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.766743][T11402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.788487][T11402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.819067][T11402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.852535][T11402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.030117][T11829] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1474'. [ 519.131893][T11812] lo speed is unknown, defaulting to 1000 [ 519.174997][ T7377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.207745][ T7377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.331918][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.376861][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.421861][T11836] fuse: Invalid rootmode [ 519.697806][T11441] veth0_vlan: entered promiscuous mode [ 519.750679][T11441] veth1_vlan: entered promiscuous mode [ 519.902327][ T5835] Bluetooth: hci1: command tx timeout [ 520.959610][T11441] veth0_macvtap: entered promiscuous mode [ 521.016194][ T40] block nbd1: Possible stuck request ffff8880258d0000: control (read@0,4096B). Runtime 300 seconds [ 521.043635][T11441] veth1_macvtap: entered promiscuous mode [ 521.226512][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 521.317773][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.365905][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.405848][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.420140][ T9] usb 4-1: device descriptor read/64, error -71 [ 521.440419][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.465545][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.490156][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.524826][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.547092][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.571387][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.601883][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.619592][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.633411][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.646695][T11441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.676504][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 521.700041][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.732604][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.761965][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.794933][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.831896][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.846136][ T9] usb 4-1: device descriptor read/64, error -71 [ 521.864432][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.889499][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.900506][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.910851][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.921385][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.939250][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.949978][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.956636][ T9] usb usb4-port1: attempt power cycle [ 521.962259][T11441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.980271][T11812] chnl_net:caif_netlink_parms(): no params data found [ 521.987469][ T5835] Bluetooth: hci1: command tx timeout [ 522.104986][ T7379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.139357][T11441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.169887][T11441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.205220][T11441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.225920][T11441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.336088][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 522.384722][ T7379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.396614][ T9] usb 4-1: device descriptor read/8, error -71 [ 522.521677][ T7379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.638642][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 522.688835][ T7379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.695231][ T9] usb 4-1: device descriptor read/8, error -71 [ 522.755143][T11812] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.784445][T11812] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.798130][T11812] bridge_slave_0: entered allmulticast mode [ 522.813848][T11812] bridge_slave_0: entered promiscuous mode [ 522.837384][ T9] usb usb4-port1: unable to enumerate USB device [ 522.849900][T11812] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.880910][T11812] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.889510][T11812] bridge_slave_1: entered allmulticast mode [ 522.896902][T11812] bridge_slave_1: entered promiscuous mode [ 522.990075][T11812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.003898][T11812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.018485][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.034347][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.167914][T11812] team0: Port device team_slave_0 added [ 523.185440][T11812] team0: Port device team_slave_1 added [ 523.226449][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.234316][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.335304][T11812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.363666][T11812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.397495][T11812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.476985][T11902] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1481'. [ 523.487203][T11902] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1481'. [ 523.513572][ T7379] bridge_slave_1: left allmulticast mode [ 523.522600][ T7379] bridge_slave_1: left promiscuous mode [ 523.529689][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.550657][ T7379] bridge_slave_0: left allmulticast mode [ 523.557289][ T7379] bridge_slave_0: left promiscuous mode [ 523.563764][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.825439][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.838174][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.846623][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.866492][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.876653][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 523.893237][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.055824][ T5831] Bluetooth: hci1: command tx timeout [ 524.773270][ T7379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.786987][ T7379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.808783][ T7379] bond0 (unregistering): Released all slaves [ 524.832520][T11812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.842498][T11812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.871938][T11812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.253364][T11812] hsr_slave_0: entered promiscuous mode [ 525.277305][T11812] hsr_slave_1: entered promiscuous mode [ 525.306543][T11812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.315180][T11812] Cannot create hsr debugfs directory [ 525.369649][T11908] lo speed is unknown, defaulting to 1000 [ 525.477093][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 525.639077][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 525.671263][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.715379][ T9] usb 6-1: config 0 descriptor?? [ 525.745515][ T9] cp210x 6-1:0.0: cp210x converter detected [ 525.983531][ T5831] Bluetooth: hci4: command tx timeout [ 526.108722][ T7379] hsr_slave_0: left promiscuous mode [ 526.127001][ T7379] hsr_slave_1: left promiscuous mode [ 526.136877][ T5831] Bluetooth: hci1: command tx timeout [ 526.138100][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.152485][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.168807][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.180788][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.295549][ T7379] veth1_macvtap: left promiscuous mode [ 526.316469][ T7379] veth0_macvtap: left promiscuous mode [ 526.332631][ T7379] veth1_vlan: left promiscuous mode [ 526.361450][ T7379] veth0_vlan: left promiscuous mode [ 526.794441][T11953] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 526.957619][ T29] audit: type=1326 audit(1738851428.738:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11951 comm="syz.3.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 527.172398][ T29] audit: type=1326 audit(1738851428.738:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11951 comm="syz.3.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 527.243742][ T29] audit: type=1326 audit(1738851428.808:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11951 comm="syz.3.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 527.278255][ T29] audit: type=1326 audit(1738851428.938:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11951 comm="syz.3.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 527.362386][ T29] audit: type=1326 audit(1738851428.938:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11951 comm="syz.3.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89418cde9 code=0x7ffc0000 [ 528.081065][ T5831] Bluetooth: hci4: command tx timeout [ 528.614564][ T9] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 528.633037][ T9] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 528.677740][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 528.694789][ T9] usb 6-1: USB disconnect, device number 2 [ 528.720478][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 528.736844][ T9] cp210x 6-1:0.0: device disconnected [ 528.748754][ T7379] team0 (unregistering): Port device team_slave_1 removed [ 528.873273][ T7379] team0 (unregistering): Port device team_slave_0 removed [ 529.406107][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 529.609008][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.623921][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.636525][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.651055][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.667459][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.690586][ T9] usb 5-1: config 0 descriptor?? [ 530.121274][ T9] plantronics 0003:047F:FFFF.0008: unbalanced collection at end of report description [ 530.136444][ T5831] Bluetooth: hci4: command tx timeout [ 530.167369][ T9] plantronics 0003:047F:FFFF.0008: parse failed [ 530.174253][ T9] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 530.204489][T11908] chnl_net:caif_netlink_parms(): no params data found [ 530.423210][T11812] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 530.471620][T11812] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.697028][T11982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.791322][T11812] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.856771][T11982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.167573][T11812] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 531.203139][T11908] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.229551][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.308249][T11908] bridge_slave_0: entered allmulticast mode [ 531.330384][T11908] bridge_slave_0: entered promiscuous mode [ 531.376977][T11908] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.417589][T11908] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.424889][T11908] bridge_slave_1: entered allmulticast mode [ 531.459377][T11908] bridge_slave_1: entered promiscuous mode [ 531.476499][T11359] usb 5-1: USB disconnect, device number 36 [ 531.649559][T11908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.714179][T11908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.820984][T11908] team0: Port device team_slave_0 added [ 531.928486][T11908] team0: Port device team_slave_1 added [ 532.215993][ T5831] Bluetooth: hci4: command tx timeout [ 532.778528][T11908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.785517][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.811463][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.977386][T11908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.093576][T11908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.105802][ T5906] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 533.136255][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.178241][T11908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.277372][ T5906] usb 4-1: device descriptor read/64, error -71 [ 533.431362][T11908] hsr_slave_0: entered promiscuous mode [ 533.450431][T11908] hsr_slave_1: entered promiscuous mode [ 533.456801][T11908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.467183][T11908] Cannot create hsr debugfs directory [ 533.514248][T11812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.526594][ T5906] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 533.676453][ T5906] usb 4-1: device descriptor read/64, error -71 [ 533.685774][ T5907] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 533.785975][ T5906] usb usb4-port1: attempt power cycle [ 533.854136][ T5907] usb 6-1: unable to get BOS descriptor or descriptor too short [ 533.873070][ T5907] usb 6-1: not running at top speed; connect to a high speed hub [ 533.902637][ T5907] usb 6-1: config 9 has an invalid interface number: 5 but max is 0 [ 533.921397][ T5907] usb 6-1: config 9 has no interface number 0 [ 533.931541][ T5907] usb 6-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 533.959377][ T5907] usb 6-1: config 9 interface 5 altsetting 9 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 533.980891][ T5907] usb 6-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 534.000851][ T5907] usb 6-1: config 9 interface 5 has no altsetting 0 [ 534.024322][ T5907] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 534.043943][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.064394][ T5907] usb 6-1: Product: syz [ 534.074137][ T5907] usb 6-1: Manufacturer: syz [ 534.084931][ T5907] usb 6-1: SerialNumber: syz [ 534.129992][T11812] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.147126][ T5906] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 534.805234][ T5907] usb 6-1: USB disconnect, device number 3 [ 534.811981][ T5906] usb 4-1: device descriptor read/8, error -71 [ 535.019050][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.026895][ T7389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.101465][ T5906] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 535.141598][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.149414][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.215380][ T5906] usb 4-1: device descriptor read/8, error -71 [ 535.481703][ T5906] usb usb4-port1: unable to enumerate USB device [ 535.746383][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1514'. [ 535.783383][T12070] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1514'. [ 537.797121][T12102] Bluetooth: Invalid esc byte 0x02 [ 538.696946][T11812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.707416][T12109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.868579][T11908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 539.939771][T11908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 540.025410][T11908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 540.185004][T11908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 541.135014][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1523'. [ 541.764055][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.325178][T11908] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.653187][T11812] veth0_vlan: entered promiscuous mode [ 542.690496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.698220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.828179][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.836053][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.914091][T11812] veth1_vlan: entered promiscuous mode [ 543.102832][T12156] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1529'. [ 543.270666][T12159] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 544.113226][T11812] veth0_macvtap: entered promiscuous mode [ 544.190338][T11812] veth1_macvtap: entered promiscuous mode [ 544.445890][T12169] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 544.524468][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.565429][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.607298][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.657000][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.709629][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.740044][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.755741][T12180] overlayfs: failed to resolve './file0': -2 [ 544.783362][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.813914][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.850292][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.900976][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.940930][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.982086][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.035975][T11812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.110746][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.110774][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.110792][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.110804][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.110815][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.110827][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.110840][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.110852][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.110860][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.110872][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.110893][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.110907][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.111970][T11812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.121161][T11908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.160341][T11812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.160376][T11812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.160400][T11812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.160422][T11812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.189431][T12191] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 545.329486][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 545.657239][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.657285][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.663499][T11908] veth0_vlan: entered promiscuous mode [ 545.703706][T11908] veth1_vlan: entered promiscuous mode [ 545.740361][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.740387][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.845455][T11908] veth0_macvtap: entered promiscuous mode [ 545.872345][T11908] veth1_macvtap: entered promiscuous mode [ 545.901327][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.901354][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.901365][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.901378][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.901389][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.901402][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.901413][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.901426][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.901436][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.901449][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.901464][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.901477][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.901489][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.901501][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.902537][T11908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.904694][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.904715][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.904726][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.904740][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.904751][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.904764][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.904774][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.904787][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.904807][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.904821][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.904836][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.904849][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.904860][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.904874][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.928067][T11908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.941986][T11908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.942023][T11908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.942047][T11908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.942069][T11908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.222742][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.222767][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.696381][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.696476][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.141817][T12219] kexec: Could not allocate control_code_buffer [ 547.532071][T12233] netlink: 'syz.6.1543': attribute type 16 has an invalid length. [ 547.862901][ T7385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.114259][ T7385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.358025][ T7385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.665982][T12229] tty tty1: ldisc open failed (-12), clearing slot 0 [ 548.838662][ T7385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.216885][ T7385] bridge_slave_1: left allmulticast mode [ 549.245759][ T7385] bridge_slave_1: left promiscuous mode [ 549.251546][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.264927][T12248] overlayfs: failed to resolve './file0': -2 [ 549.375251][ T7385] bridge_slave_0: left allmulticast mode [ 549.415279][ T7385] bridge_slave_0: left promiscuous mode [ 549.421901][ T976] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 549.441073][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.585883][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 549.609740][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.641366][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.667714][ T976] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 549.689653][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.717553][ T976] usb 4-1: config 0 descriptor?? [ 551.101455][ T40] block nbd1: Possible stuck request ffff8880258d0000: control (read@0,4096B). Runtime 330 seconds [ 551.112513][ T976] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0009/input/input32 [ 551.225890][ T976] appleir 0003:05AC:8241.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 551.863702][ T9] usb 4-1: USB disconnect, device number 33 [ 552.819825][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 552.896547][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 552.906300][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 552.915477][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 552.926336][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 552.933838][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 553.568092][T12298] ceph: No mds server is up or the cluster is laggy [ 553.675135][T12292] kexec: Could not allocate control_code_buffer [ 554.053850][T12309] FAULT_INJECTION: forcing a failure. [ 554.053850][T12309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.089186][T12309] CPU: 1 UID: 0 PID: 12309 Comm: syz.3.1558 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 554.089213][T12309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 554.089224][T12309] Call Trace: [ 554.089229][T12309] [ 554.089237][T12309] dump_stack_lvl+0x241/0x360 [ 554.089270][T12309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.089293][T12309] ? __pfx__printk+0x10/0x10 [ 554.089318][T12309] ? __pfx_lock_release+0x10/0x10 [ 554.089347][T12309] should_fail_ex+0x40a/0x550 [ 554.089370][T12309] _copy_from_iter+0x1e9/0x1c20 [ 554.089393][T12309] ? __virt_addr_valid+0x183/0x530 [ 554.089424][T12309] ? __alloc_skb+0x28f/0x440 [ 554.089444][T12309] ? __pfx__copy_from_iter+0x10/0x10 [ 554.089469][T12309] ? __virt_addr_valid+0x183/0x530 [ 554.089488][T12309] ? __virt_addr_valid+0x183/0x530 [ 554.089507][T12309] ? __virt_addr_valid+0x45f/0x530 [ 554.089528][T12309] ? __phys_addr_symbol+0x2f/0x70 [ 554.089548][T12309] ? __check_object_size+0x47a/0x730 [ 554.089570][T12309] netlink_sendmsg+0x73d/0xcb0 [ 554.089598][T12309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.089626][T12309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.089639][T12309] __sock_sendmsg+0x221/0x270 [ 554.089663][T12309] ____sys_sendmsg+0x52a/0x7e0 [ 554.089687][T12309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.089701][T12309] ? __fget_files+0x2a/0x410 [ 554.089734][T12309] ? __fget_files+0x2a/0x410 [ 554.089761][T12309] __sys_sendmsg+0x269/0x350 [ 554.089782][T12309] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.089811][T12309] ? do_sys_openat2+0x17a/0x1d0 [ 554.089854][T12309] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 554.089876][T12309] ? do_syscall_64+0x100/0x230 [ 554.089900][T12309] ? do_syscall_64+0xb6/0x230 [ 554.089922][T12309] do_syscall_64+0xf3/0x230 [ 554.089943][T12309] ? clear_bhb_loop+0x35/0x90 [ 554.089966][T12309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.089986][T12309] RIP: 0033:0x7ff89418cde9 [ 554.090002][T12309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.090015][T12309] RSP: 002b:00007ff895077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.090035][T12309] RAX: ffffffffffffffda RBX: 00007ff8943a5fa0 RCX: 00007ff89418cde9 [ 554.090047][T12309] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 554.090057][T12309] RBP: 00007ff895077090 R08: 0000000000000000 R09: 0000000000000000 [ 554.090067][T12309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.090077][T12309] R13: 0000000000000000 R14: 00007ff8943a5fa0 R15: 00007fff9f3a3838 [ 554.090103][T12309] [ 554.502425][ T7385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.515739][T12316] overlayfs: failed to resolve './file0': -2 [ 554.612857][ T7385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.647267][ T7385] bond0 (unregistering): Released all slaves [ 554.804929][T12320] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 554.813407][T12320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1562'. [ 554.933474][T12297] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 555.016369][ T5835] Bluetooth: hci4: command tx timeout [ 555.061873][T12320] bridge0: port 4(macvlan1) entered blocking state [ 555.069173][T12320] bridge0: port 4(macvlan1) entered disabled state [ 555.075938][T12320] macvlan1: entered allmulticast mode [ 555.081329][T12320] veth1_vlan: entered allmulticast mode [ 555.088126][T12320] macvlan1: entered promiscuous mode [ 555.282577][T12291] lo speed is unknown, defaulting to 1000 [ 555.559129][T12334] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 555.567708][T12334] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1565'. [ 555.620865][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 555.927644][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.117413][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.138732][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.162758][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.183895][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.224857][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.256732][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.265585][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.496441][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.540125][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.653572][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.662735][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.672792][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.875563][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.895080][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.904108][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.951315][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.973705][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 556.995956][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.018673][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.044709][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.065282][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.091039][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.099313][ T5835] Bluetooth: hci4: command tx timeout [ 557.132591][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.158256][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.181993][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.191419][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.201174][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.211039][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.220469][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.230247][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 557.306964][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 557.323724][T12342] kexec: Could not allocate control_code_buffer [ 557.653805][T12361] overlayfs: failed to resolve './file0': -2 [ 557.749610][ T7385] hsr_slave_0: left promiscuous mode [ 557.802441][ T7385] hsr_slave_1: left promiscuous mode [ 557.833881][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.866075][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.023595][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.064692][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.319791][T12376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.953008][T12380] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1575'. [ 558.962813][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 559.175807][ T5835] Bluetooth: hci4: command tx timeout [ 559.478825][ T7385] veth1_macvtap: left promiscuous mode [ 559.496153][ T7385] veth0_macvtap: left promiscuous mode [ 559.517534][ T7385] veth1_vlan: left promiscuous mode [ 559.530206][ T7385] veth0_vlan: left promiscuous mode [ 560.809091][T12394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1578'. [ 561.355924][ T5835] Bluetooth: hci4: command tx timeout [ 562.565184][T12405] FAULT_INJECTION: forcing a failure. [ 562.565184][T12405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.579959][T12405] CPU: 0 UID: 0 PID: 12405 Comm: syz.6.1581 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 562.579982][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 562.579992][T12405] Call Trace: [ 562.579998][T12405] [ 562.580005][T12405] dump_stack_lvl+0x241/0x360 [ 562.580038][T12405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.580062][T12405] ? __pfx__printk+0x10/0x10 [ 562.580097][T12405] should_fail_ex+0x40a/0x550 [ 562.580120][T12405] _copy_to_user+0x31/0xb0 [ 562.580139][T12405] simple_read_from_buffer+0xca/0x150 [ 562.580170][T12405] proc_fail_nth_read+0x1e9/0x250 [ 562.580192][T12405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.580214][T12405] ? rw_verify_area+0x243/0x630 [ 562.580237][T12405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.580258][T12405] vfs_read+0x1f8/0xb40 [ 562.580282][T12405] ? fdget_pos+0x254/0x320 [ 562.580304][T12405] ? __pfx___mutex_lock+0x10/0x10 [ 562.580326][T12405] ? __pfx_vfs_read+0x10/0x10 [ 562.580352][T12405] ? __rcu_read_unlock+0xa1/0x110 [ 562.580370][T12405] ? __fget_files+0x2a/0x410 [ 562.580391][T12405] ? __fget_files+0x395/0x410 [ 562.580410][T12405] ? __fget_files+0x2a/0x410 [ 562.580439][T12405] ksys_read+0x18f/0x2b0 [ 562.580457][T12405] ? __pfx_ksys_read+0x10/0x10 [ 562.580473][T12405] ? do_syscall_64+0x100/0x230 [ 562.580497][T12405] ? do_syscall_64+0xb6/0x230 [ 562.580520][T12405] do_syscall_64+0xf3/0x230 [ 562.580540][T12405] ? clear_bhb_loop+0x35/0x90 [ 562.580568][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.580588][T12405] RIP: 0033:0x7f3f7cb8b7fc [ 562.580604][T12405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 562.580618][T12405] RSP: 002b:00007f3f7d9aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.580637][T12405] RAX: ffffffffffffffda RBX: 00007f3f7cda6160 RCX: 00007f3f7cb8b7fc [ 562.580649][T12405] RDX: 000000000000000f RSI: 00007f3f7d9aa0a0 RDI: 0000000000000007 [ 562.580660][T12405] RBP: 00007f3f7d9aa090 R08: 0000000000000000 R09: 0000000000000000 [ 562.580670][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.580680][T12405] R13: 0000000000000000 R14: 00007f3f7cda6160 R15: 00007ffefa47b9e8 [ 562.580707][T12405] [ 562.807486][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.829500][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.868893][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.229183][ T7385] team0 (unregistering): Port device team_slave_1 removed [ 563.285569][ T7385] team0 (unregistering): Port device team_slave_0 removed [ 563.326252][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 563.509504][ T8] usb 7-1: config 0 has an invalid interface number: 197 but max is 0 [ 563.530244][ T8] usb 7-1: config 0 has an invalid descriptor of length 232, skipping remainder of the config [ 563.542851][ T8] usb 7-1: config 0 has no interface number 0 [ 563.560125][ T8] usb 7-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 563.570845][ T8] usb 7-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 563.582642][ T8] usb 7-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.599860][ T8] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 563.611589][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.621818][ T8] usb 7-1: Product: syz [ 563.627299][ T8] usb 7-1: Manufacturer: syz [ 563.632348][ T8] usb 7-1: SerialNumber: syz [ 563.662333][ T8] usb 7-1: config 0 descriptor?? [ 563.706686][T12407] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 563.902775][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.910345][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.298623][T12390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 564.348993][T12407] (unnamed net_device) (uninitialized): option arp_validate: invalid value (24) [ 565.002632][T12291] chnl_net:caif_netlink_parms(): no params data found [ 565.781147][T12418] overlayfs: failed to resolve './file0': -2 [ 566.862877][ T8] usb 7-1: USB disconnect, device number 2 [ 566.934112][T12414] kexec: Could not allocate control_code_buffer [ 567.028228][T12427] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 567.088526][T12427] batman_adv: batadv0: Adding interface: gretap1 [ 567.219841][T12427] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.969828][T12427] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 568.451239][T12291] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.466295][T12291] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.476875][T12291] bridge_slave_0: entered allmulticast mode [ 568.484118][T12291] bridge_slave_0: entered promiscuous mode [ 568.556774][T12291] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.606563][T12291] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.623653][T12291] bridge_slave_1: entered allmulticast mode [ 568.647956][T12291] bridge_slave_1: entered promiscuous mode [ 570.488814][T12291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.213693][T12470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.568016][T12291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.987784][T12291] team0: Port device team_slave_0 added [ 572.029764][T12291] team0: Port device team_slave_1 added [ 572.231347][T12291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.302787][T12291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.491600][T12480] overlayfs: failed to resolve './file0': -2 [ 573.139549][T12291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.238539][ T5198] udevd[5198]: worker [5842] /devices/virtual/block/nbd1 timeout; kill it [ 576.252602][T12291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.281592][ T5198] udevd[5198]: seq 12207 '/devices/virtual/block/nbd1' killed [ 576.645657][T12483] kexec: Could not allocate control_code_buffer [ 576.686486][T12291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.829970][T12291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.117505][T11359] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 577.217920][T12291] hsr_slave_0: entered promiscuous mode [ 577.247439][T12291] hsr_slave_1: entered promiscuous mode [ 577.254775][T12291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.283709][T12291] Cannot create hsr debugfs directory [ 577.666744][T11359] usb 7-1: unable to get BOS descriptor or descriptor too short [ 577.697171][T11359] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 577.723842][T11359] usb 7-1: can't read configurations, error -71 [ 578.754838][T12522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.097192][ T6188] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 579.122519][T12533] netlink: 'syz.5.1608': attribute type 1 has an invalid length. [ 579.291366][ T6188] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 579.367538][ T6188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.427938][ T6188] usb 4-1: config 0 descriptor?? [ 580.112734][ T6188] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 580.217357][ T6188] asix 4-1:0.0: probe with driver asix failed with error -32 [ 580.356577][ T6188] usb 4-1: USB disconnect, device number 34 [ 580.738410][T12541] kexec: Could not allocate control_code_buffer [ 581.137067][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1615'. [ 581.819515][ T40] block nbd1: Possible stuck request ffff8880258d0000: control (read@0,4096B). Runtime 360 seconds [ 582.642833][T12576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1620'. [ 583.638798][T12590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.835734][T11359] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 584.311644][T12291] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 584.407919][T11359] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 584.442781][T12291] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 584.469774][T11359] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.490430][T11359] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.501971][T11359] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 584.520162][T12291] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 584.546389][T11359] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 584.571075][T11359] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.786702][T12291] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 585.089259][T12600] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1626'. [ 585.090339][T11359] usb 7-1: config 0 descriptor?? [ 585.134889][T12600] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1626'. [ 585.465092][T12291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.540613][T12291] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.554105][T12599] kexec: Could not allocate control_code_buffer [ 585.588618][T11359] hid-picolcd 0003:04D8:C002.000B: item fetching failed at offset 5/7 [ 585.610476][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.617681][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.647122][T11359] hid-picolcd 0003:04D8:C002.000B: device report parse failed [ 585.663114][T11359] hid-picolcd 0003:04D8:C002.000B: probe with driver hid-picolcd failed with error -22 [ 585.683053][T12609] fuse: Bad value for 'fd' [ 585.685983][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.694660][ T7385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.115669][T11359] usb 7-1: USB disconnect, device number 5 [ 586.278965][T12291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 586.319061][T12291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 586.595888][ T5906] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 586.918881][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 586.930565][ T5906] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 586.945355][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 587.124748][T12291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.215468][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 587.615991][ T5906] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 587.671163][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.715853][ T5906] usb 4-1: Product: syz [ 587.735971][ T5906] usb 4-1: Manufacturer: syz [ 587.753993][T12291] veth0_vlan: entered promiscuous mode [ 587.766012][ T5906] usb 4-1: SerialNumber: syz [ 587.807796][ T5906] usb 4-1: config 0 descriptor?? [ 587.832634][T12291] veth1_vlan: entered promiscuous mode [ 587.990784][T12291] veth0_macvtap: entered promiscuous mode [ 588.022260][T12614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.051040][T12291] veth1_macvtap: entered promiscuous mode [ 588.085153][T12614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.133045][ T5874] usb 4-1: USB disconnect, device number 35 [ 588.137475][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.195780][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.250509][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.308451][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.340568][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.395147][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.436043][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.459980][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.479383][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.276934][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.287555][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.298878][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.309137][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.351311][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.400105][T12291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.416570][ T5906] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 589.431087][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.444813][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.459280][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.471499][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.526314][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.556730][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.595876][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.634405][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.665817][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 589.675172][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.686810][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 589.687276][ T5906] usb 5-1: language id specifier not provided by device, defaulting to English [ 589.750765][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 589.760826][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.772694][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.781426][ T5906] usb 5-1: Product: syz [ 589.816394][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.855728][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.985270][ T5906] usb 5-1: SerialNumber: syz [ 589.990075][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.990118][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.024403][T12291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.555132][T12679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1646'. [ 590.890200][T12679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1646'. [ 590.944588][T12291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.968782][T12291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.995711][T12291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.015117][T12291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.174195][ T8] usb 5-1: USB disconnect, device number 37 [ 593.577772][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.695477][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.806558][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.685725][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.874411][T12722] netlink: 'syz.5.1656': attribute type 6 has an invalid length. [ 596.945418][T12722] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1656'. [ 596.985826][T12722] netlink: 'syz.5.1656': attribute type 5 has an invalid length. [ 597.441975][T12734] netlink: 'syz.4.1658': attribute type 2 has an invalid length. [ 597.451245][T12734] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1658'. [ 598.570006][ T7372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.860963][ T7372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.948611][ T7372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.048191][ T7372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.228215][ T7372] bridge_slave_1: left allmulticast mode [ 599.249234][ T7372] bridge_slave_1: left promiscuous mode [ 599.255942][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.268172][ T7372] bridge_slave_0: left allmulticast mode [ 599.287452][ T7372] bridge_slave_0: left promiscuous mode [ 599.293855][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.174284][T11359] IPVS: starting estimator thread 0... [ 600.189887][T12785] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 600.306715][T12786] IPVS: using max 21 ests per chain, 50400 per kthread [ 600.430531][T12793] netlink: 'syz.5.1665': attribute type 1 has an invalid length. [ 600.439263][T12793] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1665'. [ 600.674140][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 600.950280][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.232296][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.298041][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.355785][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.385317][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.404660][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.449864][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.626550][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.634675][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.676751][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.684868][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.728199][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.769605][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.796169][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.804411][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.863153][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.881144][ T7372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.909103][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 601.920044][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 601.923366][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 601.938692][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 601.948226][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 601.958288][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 601.965685][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.986607][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.002022][ T7372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.036706][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.041985][ T7372] bond0 (unregistering): Released all slaves [ 602.044748][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.225748][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.244037][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.280101][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.316017][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.353804][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.391149][T12802] lo speed is unknown, defaulting to 1000 [ 602.407728][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.451675][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.505680][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.546992][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.595978][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.640447][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 602.684232][ T8] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 603.014547][T12813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 604.062714][ T5831] Bluetooth: hci4: command tx timeout [ 604.276140][ T5906] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 604.414673][T12841] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1675'. [ 604.493458][T12840] xt_ipcomp: unknown flags 12 [ 604.565876][ T5906] usb 5-1: device descriptor read/64, error -71 [ 605.086091][ T5906] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 605.275729][ T5906] usb 5-1: device descriptor read/64, error -71 [ 605.386318][ T5906] usb usb5-port1: attempt power cycle [ 605.391202][ T7372] hsr_slave_0: left promiscuous mode [ 605.426447][ T7372] hsr_slave_1: left promiscuous mode [ 605.442982][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.465932][ T7372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.675386][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.771060][T12860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1679'. [ 605.936460][ T5906] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 606.136806][ T5831] Bluetooth: hci4: command tx timeout [ 606.364739][ T9] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 606.380808][ T7372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.440130][ T5906] usb 5-1: device descriptor read/8, error -71 [ 606.443653][ T7372] veth1_macvtap: left promiscuous mode [ 606.459715][ T7372] veth0_macvtap: left promiscuous mode [ 606.486050][ T7372] veth1_vlan: left promiscuous mode [ 606.496026][ T7372] veth0_vlan: left promiscuous mode [ 606.538595][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 606.556088][ T9] usb 4-1: config 0 has no interface number 0 [ 606.571104][ T9] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 606.604383][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.642931][ T9] usb 4-1: Product: syz [ 606.665671][ T9] usb 4-1: Manufacturer: syz [ 606.681020][ T9] usb 4-1: SerialNumber: syz [ 606.701292][ T5906] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 606.732911][ T9] usb 4-1: config 0 descriptor?? [ 606.757721][ T5906] usb 5-1: device descriptor read/8, error -71 [ 606.771343][ T9] snd-usb-us122l 4-1:0.1: usb_set_interface error [ 606.800773][ T9] snd-usb-us122l 4-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 606.885170][ T5906] usb usb5-port1: unable to enumerate USB device [ 606.958367][ T9] usb 4-1: USB disconnect, device number 36 [ 607.586613][T12873] input: syz1 as /devices/virtual/input/input33 [ 608.236121][ T5831] Bluetooth: hci4: command tx timeout [ 608.566798][ T7372] team0 (unregistering): Port device team_slave_1 removed [ 608.848239][ T7372] team0 (unregistering): Port device team_slave_0 removed [ 609.599425][T12860] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.606945][T12860] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.637534][T12875] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 609.658499][T12878] vlan0: entered promiscuous mode [ 609.904663][T12802] chnl_net:caif_netlink_parms(): no params data found [ 609.975838][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 610.013291][T12888] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 610.296288][ T5831] Bluetooth: hci4: command tx timeout [ 610.623834][T12802] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.686785][T12802] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.732545][T12802] bridge_slave_0: entered allmulticast mode [ 610.783276][T12802] bridge_slave_0: entered promiscuous mode [ 610.879554][T12802] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.907005][T12802] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.944946][T12802] bridge_slave_1: entered allmulticast mode [ 610.978752][T12802] bridge_slave_1: entered promiscuous mode [ 611.729220][T12802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.794643][T12802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.919881][ T40] block nbd1: Possible stuck request ffff8880258d0000: control (read@0,4096B). Runtime 390 seconds [ 612.010883][T12910] kvm: kvm [12909]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 612.101353][T12802] team0: Port device team_slave_0 added [ 612.143142][T12802] team0: Port device team_slave_1 added [ 612.162713][T12910] kvm: kvm [12909]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 612.190701][ T29] audit: type=1326 audit(1738851513.968:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.212320][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.324795][ T29] audit: type=1326 audit(1738851513.968:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.346400][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.447987][T12802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.449630][ T29] audit: type=1326 audit(1738851513.998:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.465856][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.477087][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.534427][T12802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.565666][ T29] audit: type=1326 audit(1738851513.998:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.573597][T12802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.612291][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.635644][ T29] audit: type=1326 audit(1738851513.998:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.659786][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.675897][T12802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.699140][T12934] input: syz0 as /devices/virtual/input/input34 [ 612.715865][T12934] input: failed to attach handler leds to device input34, error: -6 [ 612.733115][ T29] audit: type=1326 audit(1738851513.998:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.791458][T12937] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1696'. [ 612.800658][ T29] audit: type=1326 audit(1738851513.998:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.833348][T12802] hsr_slave_0: entered promiscuous mode [ 612.844351][T12802] hsr_slave_1: entered promiscuous mode [ 612.867420][ T29] audit: type=1326 audit(1738851513.998:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.868990][T12802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.914974][T12802] Cannot create hsr debugfs directory [ 612.920689][ T29] audit: type=1326 audit(1738851513.998:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 612.920729][ T29] audit: type=1326 audit(1738851513.998:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12927 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b558cde9 code=0x7ffc0000 [ 613.242172][ T5905] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 613.416720][ T5905] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 613.543486][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.742285][ T5905] usb 6-1: config 0 descriptor?? [ 613.833401][ T5905] cp210x 6-1:0.0: cp210x converter detected [ 615.521275][T12802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 615.624518][T12802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 615.699943][T12802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 615.774923][T12802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 615.856490][ T5906] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 616.377079][ T5905] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 616.538583][ T5905] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 616.962900][ T5905] usb 6-1: cp210x converter now attached to ttyUSB0 [ 616.980171][ T5905] usb 6-1: USB disconnect, device number 4 [ 617.012758][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 617.091357][ T5905] cp210x 6-1:0.0: device disconnected [ 617.278636][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1706'. [ 617.576884][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 617.705224][T12802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.893567][T12802] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.924081][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.931243][ T7377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.389858][T12980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.547655][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.554846][ T7377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.715977][T12802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 618.841712][T12802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.943391][T12988] bond_slave_0: entered promiscuous mode [ 618.949153][T12988] bond_slave_1: entered promiscuous mode [ 619.032971][T12990] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 619.060369][T12988] bond_slave_0: left promiscuous mode [ 619.066473][T12988] bond_slave_1: left promiscuous mode [ 620.679970][T13004] xt_nat: multiple ranges no longer supported [ 620.708146][T12802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.781831][T12802] veth0_vlan: entered promiscuous mode [ 620.793042][T12802] veth1_vlan: entered promiscuous mode [ 621.001655][T12802] veth0_macvtap: entered promiscuous mode [ 621.016187][T12802] veth1_macvtap: entered promiscuous mode [ 621.485275][T13006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.554148][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.574374][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.587577][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.599694][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.611465][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.623712][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.634988][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.784895][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.828990][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.888177][T13010] netlink: 'syz.5.1716': attribute type 2 has an invalid length. [ 621.915130][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.921219][T13010] netlink: 4696 bytes leftover after parsing attributes in process `syz.5.1716'. [ 621.961134][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.008584][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.026457][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.056053][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.079133][T12802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.125330][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.139699][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.151414][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.164912][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.211280][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.237251][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.257541][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.278039][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.302099][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.332996][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.353506][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.386602][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.399920][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.450601][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.477471][T12802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.503203][T12802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.538385][T12802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.566591][T12802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.575341][T12802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.723253][T13021] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 624.536694][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.591446][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.626121][ T976] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 624.665963][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.685247][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.902629][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 625.225141][ T976] usb 4-1: unable to get BOS descriptor or descriptor too short [ 625.226079][ T976] usb 4-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 625.226121][ T976] usb 4-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 625.226146][ T976] usb 4-1: config 1 interface 0 has no altsetting 0 [ 625.240497][ T976] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 625.240528][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.240547][ T976] usb 4-1: Product: syz [ 625.240562][ T976] usb 4-1: Manufacturer: К [ 625.240577][ T976] usb 4-1: SerialNumber: syz [ 625.341673][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.341782][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.461570][ T976] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input35 [ 625.738288][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738288][T13047] [ 625.738389][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738389][T13047] [ 625.738421][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738421][T13047] [ 625.738472][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738472][T13047] [ 625.738521][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738521][T13047] [ 625.738551][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738551][T13047] [ 625.738600][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738600][T13047] [ 625.738630][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738630][T13047] [ 625.738675][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738675][T13047] [ 625.738724][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738724][T13047] [ 625.738785][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738785][T13047] [ 625.738815][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738815][T13047] [ 625.738864][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738864][T13047] [ 625.738913][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738913][T13047] [ 625.738941][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738941][T13047] [ 625.738990][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.738990][T13047] [ 625.739017][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739017][T13047] [ 625.739066][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739066][T13047] [ 625.739115][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739115][T13047] [ 625.739143][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739143][T13047] [ 625.739190][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739190][T13047] [ 625.739220][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739220][T13047] [ 625.739271][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739271][T13047] [ 625.739321][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739321][T13047] [ 625.739369][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739369][T13047] [ 625.739400][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739400][T13047] [ 625.739448][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739448][T13047] [ 625.739475][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739475][T13047] [ 625.739524][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739524][T13047] [ 625.739572][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739572][T13047] [ 625.739599][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739599][T13047] [ 625.739647][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739647][T13047] [ 625.739700][T13047] dlm: Unknown command passed to DLM device : 0 [ 625.739700][T13047] [ 625.898550][ T5183] bcm5974 4-1:1.0: could not read from device [ 625.988613][T13051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.114043][ T976] usb 4-1: USB disconnect, device number 37 [ 626.768959][T13059] netlink: 'syz.3.1728': attribute type 29 has an invalid length. [ 626.770028][T13059] netlink: 'syz.3.1728': attribute type 29 has an invalid length. [ 626.770647][T13059] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1728'. [ 626.770777][T13059] unsupported nla_type 58 [ 627.056119][T13062] fuse: Bad value for 'fd' [ 627.558793][ T3521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.751455][T13066] tmpfs: Bad value for 'mpol' [ 628.167541][ T3521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.254732][T13055] tty tty33: ldisc open failed (-12), clearing slot 32 [ 628.273402][T13056] pty pty32: ldisc open failed (-12), clearing slot 32 [ 628.352519][ T3521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.443007][ T3521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.582875][ T3521] bridge_slave_1: left allmulticast mode [ 628.589536][ T3521] bridge_slave_1: left promiscuous mode [ 628.597012][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.607712][ T3521] bridge_slave_0: left allmulticast mode [ 628.613396][ T3521] bridge_slave_0: left promiscuous mode [ 628.628513][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.104156][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.116657][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.127730][ T3521] bond0 (unregistering): Released all slaves [ 629.502482][ T3521] hsr_slave_0: left promiscuous mode [ 629.558056][ T3521] hsr_slave_1: left promiscuous mode [ 629.564058][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.602360][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.821870][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.937822][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.467411][ T3521] veth1_macvtap: left promiscuous mode [ 630.546391][ T3521] veth0_macvtap: left promiscuous mode [ 630.555812][ T3521] veth1_vlan: left promiscuous mode [ 630.561890][ T3521] veth0_vlan: left promiscuous mode [ 631.158510][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 631.170680][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.180404][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.192096][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 631.206217][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 631.213933][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.563092][T13104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.084839][T13103] random: crng reseeded on system resumption [ 633.347297][ T5835] Bluetooth: hci4: command tx timeout [ 633.534368][T13099] Restarting kernel threads ... done. [ 633.566608][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 633.642299][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 634.387392][T13074] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 634.635429][T13089] lo speed is unknown, defaulting to 1000 [ 634.771216][T13108] ntfs3(nullb0): Primary boot signature is not NTFS. [ 634.806755][T13108] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 634.836754][T13108] bridge0: port 3(erspan0) entered blocking state [ 634.843550][T13108] bridge0: port 3(erspan0) entered disabled state [ 634.886910][T13108] erspan0: entered allmulticast mode [ 634.930354][T13108] erspan0: entered promiscuous mode [ 634.938915][T13112] netlink: 'syz.5.1742': attribute type 1 has an invalid length. [ 634.950454][T13108] bridge0: port 3(erspan0) entered blocking state [ 634.957021][T13108] bridge0: port 3(erspan0) entered forwarding state [ 635.037917][T13112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.112926][T13121] netlink: 'syz.4.1744': attribute type 39 has an invalid length. [ 635.122317][T13119] bond1: (slave ip6gretap1): making interface the new active one [ 635.133723][T13119] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 635.416296][ T5835] Bluetooth: hci4: command tx timeout [ 635.662790][T13125] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1745'. [ 636.657980][T13140] trusted_key: encrypted_key: keylen parameter is missing [ 636.689510][T13089] chnl_net:caif_netlink_parms(): no params data found [ 637.262940][T13153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.495825][ T30] INFO: task syz.1.1354:11186 blocked for more than 143 seconds. [ 637.508166][ T5835] Bluetooth: hci4: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 637.695100][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 637.735004][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.835642][ T30] task:syz.1.1354 state:D stack:25632 pid:11186 tgid:11185 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 637.946165][ T30] Call Trace: [ 637.949508][ T30] [ 637.955626][ T976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 637.985686][ T80] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 638.016754][ T30] __schedule+0x18bc/0x4c40 [ 638.021513][ T30] ? __pfx___schedule+0x10/0x10 [ 638.080403][ T30] ? __pfx_lock_release+0x10/0x10 [ 638.085516][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 638.112218][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 638.150835][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 638.175792][ T30] ? schedule+0x90/0x320 [ 638.180101][ T30] schedule+0x14b/0x320 [ 638.184954][ T30] schedule_preempt_disabled+0x13/0x30 [ 638.216505][ T30] __mutex_lock+0x817/0x1010 [ 638.221170][ T30] ? __mutex_lock+0x602/0x1010 [ 638.226078][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 638.231326][ T80] usb 5-1: Using ep0 maxpacket: 16 [ 638.238373][ T30] ? sync_bdevs+0x1ae/0x340 [ 638.242971][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 638.248908][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 638.254045][ T30] ? __pfx_lock_release+0x10/0x10 [ 638.259281][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 638.269687][ T30] ? iput+0x3be/0xa50 [ 638.273790][ T30] sync_bdevs+0x1ae/0x340 [ 638.278792][ T30] ksys_sync+0xe2/0x1c0 [ 638.283122][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 638.289432][ T30] ? do_syscall_64+0xb6/0x230 [ 638.294221][ T30] __do_sys_sync+0xe/0x20 [ 638.316181][ T30] do_syscall_64+0xf3/0x230 [ 638.320963][ T30] ? clear_bhb_loop+0x35/0x90 [ 638.335675][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.341662][ T30] RIP: 0033:0x7fa77db8cde9 [ 638.360095][ T30] RSP: 002b:00007fa77eaca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 638.370748][ T30] RAX: ffffffffffffffda RBX: 00007fa77dda5fa0 RCX: 00007fa77db8cde9 [ 638.379735][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 638.388894][ T30] RBP: 00007fa77dda5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 638.397068][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.405096][ T30] R13: 0000000000000001 R14: 00007fa77dda5fa0 R15: 00007ffe3d8f9ea8 [ 638.417390][ T30] [ 638.424870][ T30] INFO: task syz.1.1354:11187 blocked for more than 144 seconds. [ 638.485801][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 638.515601][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.524375][ T30] task:syz.1.1354 state:D stack:26192 pid:11187 tgid:11185 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 638.604989][ T30] Call Trace: [ 638.636313][ T30] [ 638.639329][ T30] __schedule+0x18bc/0x4c40 [ 638.643918][ T30] ? __pfx___schedule+0x10/0x10 [ 638.686182][ T30] ? __pfx_lock_release+0x10/0x10 [ 638.691363][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 638.759686][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 638.797226][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 638.803700][ T30] ? schedule+0x90/0x320 [ 638.846350][ T30] schedule+0x14b/0x320 [ 638.850601][ T30] schedule_preempt_disabled+0x13/0x30 [ 638.876514][ T30] __mutex_lock+0x817/0x1010 [ 638.881218][ T30] ? __mutex_lock+0x602/0x1010 [ 638.916057][ T30] ? sync_bdevs+0x1ae/0x340 [ 638.936194][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 638.941315][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 638.981408][ T30] ? __pfx_lock_release+0x10/0x10 [ 639.005919][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 639.011316][ T30] ? iput+0x3be/0xa50 [ 639.015363][ T30] sync_bdevs+0x1ae/0x340 [ 639.075808][ T30] ksys_sync+0xe2/0x1c0 [ 639.096442][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 639.101308][ T30] ? do_syscall_64+0xb6/0x230 [ 639.136035][ T30] __do_sys_sync+0xe/0x20 [ 639.140883][ T30] do_syscall_64+0xf3/0x230 [ 639.145965][ T30] ? clear_bhb_loop+0x35/0x90 [ 639.151121][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.160177][ T30] RIP: 0033:0x7fa77db8cde9 [ 639.166269][ T30] RSP: 002b:00007fa77eaa9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 639.175435][ T30] RAX: ffffffffffffffda RBX: 00007fa77dda6080 RCX: 00007fa77db8cde9 [ 639.185260][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 639.194134][ T30] RBP: 00007fa77dda6080 R08: 0000000000000000 R09: 0000000000000000 [ 639.202964][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.212817][ T30] R13: 0000000000000001 R14: 00007fa77dda6080 R15: 00007ffe3d8f9ea8 [ 639.221955][ T30] [ 639.225233][ T30] INFO: task syz.1.1354:11188 blocked for more than 145 seconds. [ 639.236576][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 639.244983][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 639.255053][ T30] task:syz.1.1354 state:D stack:26192 pid:11188 tgid:11185 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 639.268289][ T30] Call Trace: [ 639.271894][ T30] [ 639.275109][ T30] __schedule+0x18bc/0x4c40 [ 639.280510][ T30] ? __pfx___schedule+0x10/0x10 [ 639.286966][ T30] ? __pfx_lock_release+0x10/0x10 [ 639.292422][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 639.299318][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 639.306180][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 639.313596][ T30] ? schedule+0x90/0x320 [ 639.318363][ T30] schedule+0x14b/0x320 [ 639.322911][ T30] schedule_preempt_disabled+0x13/0x30 [ 639.329324][ T30] __mutex_lock+0x817/0x1010 [ 639.334277][ T30] ? __mutex_lock+0x602/0x1010 [ 639.339929][ T30] ? sync_bdevs+0x1ae/0x340 [ 639.344784][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 639.350425][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 639.355943][ T30] ? __pfx_lock_release+0x10/0x10 [ 639.361484][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 639.367775][ T30] ? iput+0x3be/0xa50 [ 639.372096][ T30] sync_bdevs+0x1ae/0x340 [ 639.376941][ T30] ksys_sync+0xe2/0x1c0 [ 639.381412][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 639.387567][ T30] ? do_syscall_64+0xb6/0x230 [ 639.392732][ T30] __do_sys_sync+0xe/0x20 [ 639.397743][ T30] do_syscall_64+0xf3/0x230 [ 639.402586][ T30] ? clear_bhb_loop+0x35/0x90 [ 639.407842][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.414642][ T30] RIP: 0033:0x7fa77db8cde9 [ 639.420742][ T30] RSP: 002b:00007fa77ea88038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 639.430515][ T30] RAX: ffffffffffffffda RBX: 00007fa77dda6160 RCX: 00007fa77db8cde9 [ 639.439734][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 639.448580][ T30] RBP: 00007fa77dda6160 R08: 0000000000000000 R09: 0000000000000000 [ 639.457683][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.466470][ T30] R13: 0000000000000001 R14: 00007fa77dda6160 R15: 00007ffe3d8f9ea8 [ 639.475120][ T30] [ 639.478756][ T30] INFO: task syz.1.1354:11189 blocked for more than 145 seconds. [ 639.501489][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 639.516740][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 639.526377][ T30] task:syz.1.1354 state:D stack:27296 pid:11189 tgid:11185 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 639.539341][ T30] Call Trace: [ 639.542881][ T30] [ 639.546644][ T30] __schedule+0x18bc/0x4c40 [ 639.551569][ T30] ? __pfx___schedule+0x10/0x10 [ 639.557061][ T30] ? __pfx_lock_release+0x10/0x10 [ 639.562570][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 639.569050][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 639.575393][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 639.582697][ T30] ? schedule+0x90/0x320 [ 639.586398][ T5835] Bluetooth: hci4: command tx timeout [ 639.587459][ T30] schedule+0x14b/0x320 [ 639.598275][ T30] schedule_preempt_disabled+0x13/0x30 [ 639.604283][ T30] __mutex_lock+0x817/0x1010 [ 639.609545][ T30] ? __mutex_lock+0x602/0x1010 [ 639.614722][ T30] ? sync_bdevs+0x1ae/0x340 [ 639.620281][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 639.625803][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 639.631326][ T30] ? __pfx_lock_release+0x10/0x10 [ 639.637195][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 639.642914][ T30] ? iput+0x3be/0xa50 [ 639.647696][ T30] sync_bdevs+0x1ae/0x340 [ 639.652407][ T30] ksys_sync+0xe2/0x1c0 [ 639.657254][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 639.662492][ T30] ? do_syscall_64+0xb6/0x230 [ 639.667944][ T30] __do_sys_sync+0xe/0x20 [ 639.672646][ T30] do_syscall_64+0xf3/0x230 [ 639.677647][ T30] ? clear_bhb_loop+0x35/0x90 [ 639.682672][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.689171][ T30] RIP: 0033:0x7fa77db8cde9 [ 639.694893][ T30] RSP: 002b:00007fa77ea67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 639.704199][ T30] RAX: ffffffffffffffda RBX: 00007fa77dda6240 RCX: 00007fa77db8cde9 [ 639.712787][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 639.722093][ T30] RBP: 00007fa77dda6240 R08: 0000000000000000 R09: 0000000000000000 [ 639.731162][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.739919][ T30] R13: 0000000000000001 R14: 00007fa77dda6240 R15: 00007ffe3d8f9ea8 [ 639.748741][ T30] [ 639.752174][ T30] INFO: task syz.1.1354:11190 blocked for more than 145 seconds. [ 639.763884][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 639.772550][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 639.782236][ T30] task:syz.1.1354 state:D stack:27296 pid:11190 tgid:11185 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 639.795487][ T30] Call Trace: [ 639.800067][ T30] [ 639.803324][ T30] __schedule+0x18bc/0x4c40 [ 639.808578][ T30] ? __pfx___schedule+0x10/0x10 [ 639.813898][ T30] ? __pfx_lock_release+0x10/0x10 [ 639.820891][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 639.827577][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 639.834006][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 639.841024][ T30] ? schedule+0x90/0x320 [ 639.846213][ T30] schedule+0x14b/0x320 [ 639.850785][ T30] schedule_preempt_disabled+0x13/0x30 [ 639.856760][ T30] __mutex_lock+0x817/0x1010 [ 639.861783][ T30] ? __mutex_lock+0x602/0x1010 [ 639.870572][ T30] ? sync_bdevs+0x1ae/0x340 [ 639.875513][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 639.891301][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 639.914501][ T30] ? __pfx_lock_release+0x10/0x10 [ 639.925867][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 639.931661][ T30] ? iput+0x3be/0xa50 [ 639.945736][ T30] sync_bdevs+0x1ae/0x340 [ 639.950477][ T30] ksys_sync+0xe2/0x1c0 [ 639.955049][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 639.974196][ T30] ? do_syscall_64+0xb6/0x230 [ 639.984396][ T30] __do_sys_sync+0xe/0x20 [ 639.995636][ T30] do_syscall_64+0xf3/0x230 [ 640.000233][ T30] ? clear_bhb_loop+0x35/0x90 [ 640.011097][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.019144][ T30] RIP: 0033:0x7fa77db8cde9 [ 640.024000][ T30] RSP: 002b:00007fa77ea46038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 640.033914][ T30] RAX: ffffffffffffffda RBX: 00007fa77dda6320 RCX: 00007fa77db8cde9 [ 640.042621][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.051461][ T30] RBP: 00007fa77dda6320 R08: 0000000000000000 R09: 0000000000000000 [ 640.060812][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.069484][ T30] R13: 0000000000000001 R14: 00007fa77dda6320 R15: 00007ffe3d8f9ea8 [ 640.082244][ T30] [ 640.086536][ T30] INFO: task syz.1.1354:11193 blocked for more than 145 seconds. [ 640.105590][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 640.113314][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.122713][ T30] task:syz.1.1354 state:D stack:26432 pid:11193 tgid:11185 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 640.137446][ T30] Call Trace: [ 640.140800][ T30] [ 640.143784][ T30] __schedule+0x18bc/0x4c40 [ 640.148822][ T30] ? __pfx___schedule+0x10/0x10 [ 640.153758][ T30] ? __pfx_lock_release+0x10/0x10 [ 640.159484][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 640.165447][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 640.171626][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 640.179174][ T30] ? schedule+0x90/0x320 [ 640.183844][ T30] schedule+0x14b/0x320 [ 640.188610][ T30] schedule_preempt_disabled+0x13/0x30 [ 640.194462][ T30] __mutex_lock+0x817/0x1010 [ 640.199578][ T30] ? __mutex_lock+0x602/0x1010 [ 640.204734][ T30] ? sync_bdevs+0x1ae/0x340 [ 640.211374][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 640.217006][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 640.222453][ T30] ? __pfx_lock_release+0x10/0x10 [ 640.228080][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 640.234438][ T30] ? iput+0x3be/0xa50 [ 640.239346][ T30] sync_bdevs+0x1ae/0x340 [ 640.244119][ T30] ksys_sync+0xe2/0x1c0 [ 640.248989][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 640.254213][ T30] ? do_syscall_64+0xb6/0x230 [ 640.259352][ T30] __do_sys_sync+0xe/0x20 [ 640.264044][ T30] do_syscall_64+0xf3/0x230 [ 640.269504][ T30] ? clear_bhb_loop+0x35/0x90 [ 640.274663][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.281220][ T30] RIP: 0033:0x7fa77db8cde9 [ 640.286336][ T30] RSP: 002b:00007fa77ea25038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 640.296016][ T30] RAX: ffffffffffffffda RBX: 00007fa77dda6400 RCX: 00007fa77db8cde9 [ 640.304661][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.314314][ T30] RBP: 00007fa77dda6400 R08: 0000000000000000 R09: 0000000000000000 [ 640.323361][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.333164][ T30] R13: 0000000000000001 R14: 00007fa77dda6400 R15: 00007ffe3d8f9ea8 [ 640.342116][ T30] [ 640.345284][ T30] INFO: task syz.1.1354:11196 blocked for more than 146 seconds. [ 640.353208][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 640.364332][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.373626][ T30] task:syz.1.1354 state:D stack:26064 pid:11196 tgid:11185 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 640.387279][ T30] Call Trace: [ 640.390653][ T30] [ 640.393633][ T30] __schedule+0x18bc/0x4c40 [ 640.399116][ T30] ? __pfx___schedule+0x10/0x10 [ 640.404525][ T30] ? __pfx_lock_release+0x10/0x10 [ 640.409854][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 640.417526][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 640.423946][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 640.430868][ T30] ? schedule+0x90/0x320 [ 640.436194][ T30] schedule+0x14b/0x320 [ 640.440453][ T30] schedule_preempt_disabled+0x13/0x30 [ 640.446407][ T30] __mutex_lock+0x817/0x1010 [ 640.451097][ T30] ? __mutex_lock+0x602/0x1010 [ 640.457121][ T30] ? sync_bdevs+0x1ae/0x340 [ 640.461703][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 640.468509][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 640.473603][ T30] ? __pfx_lock_release+0x10/0x10 [ 640.479058][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 640.484404][ T30] ? iput+0x3be/0xa50 [ 640.488816][ T30] sync_bdevs+0x1ae/0x340 [ 640.493255][ T30] ksys_sync+0xe2/0x1c0 [ 640.497580][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 640.502408][ T30] ? do_syscall_64+0xb6/0x230 [ 640.507586][ T30] __do_sys_sync+0xe/0x20 [ 640.512016][ T30] do_syscall_64+0xf3/0x230 [ 640.517609][ T30] ? clear_bhb_loop+0x35/0x90 [ 640.522363][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.528471][ T30] RIP: 0033:0x7fa77db8cde9 [ 640.532979][ T30] RSP: 002b:00007fa77ea04038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 640.544462][ T30] RAX: ffffffffffffffda RBX: 00007fa77dda64e0 RCX: 00007fa77db8cde9 [ 640.553470][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.562460][ T30] RBP: 00007fa77dda64e0 R08: 0000000000000000 R09: 0000000000000000 [ 640.571479][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.580462][ T30] R13: 0000000000000001 R14: 00007fa77dda64e0 R15: 00007ffe3d8f9ea8 [ 640.588583][ T30] [ 640.591775][ T30] INFO: task syz.1.1354:11199 blocked for more than 146 seconds. [ 640.599608][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 640.608051][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.618607][ T30] task:syz.1.1354 state:D stack:26096 pid:11199 tgid:11185 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 640.630903][ T30] Call Trace: [ 640.634260][ T30] [ 640.637792][ T30] __schedule+0x18bc/0x4c40 [ 640.643135][ T30] ? __pfx___schedule+0x10/0x10 [ 640.648356][ T30] ? __pfx_lock_release+0x10/0x10 [ 640.653451][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 640.659553][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 640.666571][ T30] ? schedule+0x90/0x320 [ 640.670876][ T30] schedule+0x14b/0x320 [ 640.675093][ T30] schedule_preempt_disabled+0x13/0x30 [ 640.680639][ T30] __mutex_lock+0x817/0x1010 [ 640.685304][ T30] ? __mutex_lock+0x602/0x1010 [ 640.690270][ T30] ? sync_bdevs+0x1ae/0x340 [ 640.694865][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 640.702189][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 640.707343][ T30] ? __pfx_lock_release+0x10/0x10 [ 640.712427][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 640.718524][ T30] ? iput+0x3be/0xa50 [ 640.722618][ T30] sync_bdevs+0x1ae/0x340 [ 640.727664][ T30] ksys_sync+0xe2/0x1c0 [ 640.731928][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 640.736872][ T30] __do_sys_sync+0xe/0x20 [ 640.741968][ T30] do_syscall_64+0xf3/0x230 [ 640.746600][ T30] ? clear_bhb_loop+0x35/0x90 [ 640.751353][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.757982][ T30] RIP: 0033:0x7fa77db8cde9 [ 640.762458][ T30] RSP: 002b:00007fa77e9e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 640.771052][ T30] RAX: ffffffffffffffda RBX: 00007fa77dda65c0 RCX: 00007fa77db8cde9 [ 640.779305][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.787957][ T30] RBP: 00007fa77dda65c0 R08: 0000000000000000 R09: 0000000000000000 [ 640.796075][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.804207][ T30] R13: 0000000000000001 R14: 00007fa77dda65c0 R15: 00007ffe3d8f9ea8 [ 640.812402][ T30] [ 640.815672][ T30] [ 640.815672][ T30] Showing all locks held in the system: [ 640.824503][ T30] 1 lock held by pool_workqueue_/3: [ 640.841481][ T30] 1 lock held by khungtaskd/30: [ 640.849107][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 640.860146][ T30] 2 locks held by kworker/u8:3/52: [ 640.865939][ T30] #0: ffff8880b873e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 640.877078][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 640.889129][ T30] 5 locks held by kworker/1:1/80: [ 640.894226][ T30] #0: ffff888021ebbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 640.906336][ T30] #1: ffffc900021afc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 640.918393][ T30] #2: ffff88802865a190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 640.928681][ T30] #3: ffff88802865d510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 640.939362][ T30] #4: ffff8880285db568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 640.949925][ T30] 5 locks held by kworker/1:2/976: [ 640.955097][ T30] #0: ffff888021ebbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 640.967353][ T30] #1: ffffc900038b7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 640.979487][ T30] #2: ffff8880286ea190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 640.988650][ T30] #3: ffff8880286ed510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 640.999269][ T30] #4: ffff888140573e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 641.009294][ T30] 2 locks held by getty/5579: [ 641.014020][ T30] #0: ffff8880313a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 641.024020][ T30] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 641.036321][ T30] 2 locks held by syz-executor/5821: [ 641.042092][ T30] #0: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 641.052084][ T30] #1: ffffffff8e93dcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 641.063831][ T30] 1 lock held by udevd/5842: [ 641.068524][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 641.077933][ T30] 3 locks held by kworker/u8:12/5944: [ 641.083435][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 641.096456][ T30] #1: ffffc9000476fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 641.107602][ T30] #2: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 641.117279][ T30] 2 locks held by kworker/u8:13/7372: [ 641.122698][ T30] #0: ffff8880b863e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 641.134246][ T30] #1: ffffc90004987c60 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 641.147894][ T30] 1 lock held by syz.1.1354/11186: [ 641.153950][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 641.163766][ T30] 1 lock held by syz.1.1354/11187: [ 641.169105][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 641.179062][ T30] 1 lock held by syz.1.1354/11188: [ 641.184241][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 641.194081][ T30] 1 lock held by syz.1.1354/11189: [ 641.199259][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 641.209258][ T30] 1 lock held by syz.1.1354/11190: [ 641.214466][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 641.224413][ T30] 1 lock held by syz.1.1354/11193: [ 641.230267][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 641.240081][ T30] 1 lock held by syz.1.1354/11196: [ 641.245257][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 641.256201][ T30] 1 lock held by syz.1.1354/11199: [ 641.261460][ T30] #0: ffff8880258084c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 641.271299][ T30] 1 lock held by syz-executor/11812: [ 641.276947][ T30] #0: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 641.286061][ T30] 1 lock held by syz-executor/13089: [ 641.291393][ T30] #0: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 641.300856][ T30] 1 lock held by syz.5.1749/13131: [ 641.306306][ T30] #0: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 641.315589][ T30] 1 lock held by syz.4.1753/13145: [ 641.320739][ T30] #0: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 641.330526][ T30] [ 641.340575][ T80] usb 5-1: device descriptor read/all, error -71 [ 641.345843][ T30] ============================================= [ 641.345843][ T30] [ 641.375917][ T30] NMI backtrace for cpu 0 [ 641.375935][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 641.375954][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 641.375967][ T30] Call Trace: [ 641.375973][ T30] [ 641.375980][ T30] dump_stack_lvl+0x241/0x360 [ 641.376009][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.376030][ T30] ? __pfx__printk+0x10/0x10 [ 641.376060][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 641.376078][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 641.376101][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 641.376117][ T30] ? irqentry_exit+0x63/0x90 [ 641.376140][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 641.376168][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 641.376186][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 641.376206][ T30] watchdog+0x1058/0x10a0 [ 641.376225][ T30] ? watchdog+0x1ea/0x10a0 [ 641.376248][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.376264][ T30] kthread+0x7a9/0x920 [ 641.376282][ T30] ? __pfx_kthread+0x10/0x10 [ 641.376303][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.376321][ T30] ? __pfx_kthread+0x10/0x10 [ 641.376338][ T30] ? __pfx_kthread+0x10/0x10 [ 641.376360][ T30] ? __pfx_kthread+0x10/0x10 [ 641.376376][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.376392][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 641.376415][ T30] ? __pfx_kthread+0x10/0x10 [ 641.376435][ T30] ret_from_fork+0x4b/0x80 [ 641.376452][ T30] ? __pfx_kthread+0x10/0x10 [ 641.376470][ T30] ret_from_fork_asm+0x1a/0x30 [ 641.376499][ T30] [ 641.376573][ T30] Sending NMI from CPU 0 to CPUs 1: [ 641.558165][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 641.559378][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 641.574397][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 641.584897][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 641.594946][ T30] Call Trace: [ 641.598222][ T30] [ 641.601152][ T30] dump_stack_lvl+0x241/0x360 [ 641.605836][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.611037][ T30] ? __pfx__printk+0x10/0x10 [ 641.615627][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 641.621636][ T30] ? vscnprintf+0x5d/0x90 [ 641.625974][ T30] panic+0x349/0x880 [ 641.629881][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 641.636043][ T30] ? __pfx_panic+0x10/0x10 [ 641.640455][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 641.645838][ T30] ? __irq_work_queue_local+0x137/0x410 [ 641.651402][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 641.656779][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 641.662934][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 641.669098][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 641.675258][ T30] watchdog+0x1097/0x10a0 [ 641.679692][ T30] ? watchdog+0x1ea/0x10a0 [ 641.684137][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.688823][ T30] kthread+0x7a9/0x920 [ 641.692903][ T30] ? __pfx_kthread+0x10/0x10 [ 641.697527][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.702204][ T30] ? __pfx_kthread+0x10/0x10 [ 641.706792][ T30] ? __pfx_kthread+0x10/0x10 [ 641.711387][ T30] ? __pfx_kthread+0x10/0x10 [ 641.715983][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.721274][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 641.726474][ T30] ? __pfx_kthread+0x10/0x10 [ 641.731062][ T30] ret_from_fork+0x4b/0x80 [ 641.735480][ T30] ? __pfx_kthread+0x10/0x10 [ 641.740096][ T30] ret_from_fork_asm+0x1a/0x30 [ 641.744869][ T30] [ 641.748240][ T30] Kernel Offset: disabled [ 641.752557][ T30] Rebooting in 86400 seconds..