last executing test programs: 1m53.241569946s ago: executing program 3 (id=898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x800b}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x64}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)='%pK \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b71000000800000085000000a5000000ffffffff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="261703076003008cb89e08f086dd", 0x0, 0x27, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) landlock_create_ruleset(&(0x7f0000000040)={0x4408, 0x2}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='unmap\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) 1m53.079324691s ago: executing program 3 (id=900): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ea000000bf090000000000025709010000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket(0x25, 0x6, 0x9) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r5 = eventfd2(0x0, 0x0) r6 = dup2(r5, r4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080)=0x4, 0x4) write$eventfd(r5, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/44, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f00000004c0)=""/73, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0xffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d637075d1e226b8b2536d4b73657420"], 0x8) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000180)={0x2, r5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1m52.961956175s ago: executing program 3 (id=902): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) 1m52.82710275s ago: executing program 3 (id=904): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) (fail_nth: 8) 1m52.376400448s ago: executing program 3 (id=906): r0 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000500)='gadgetfs\x00', 0x14800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r1, 0x3, 0x0) r2 = open(&(0x7f0000000200)='.\x00', 0x0, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd27, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x28}}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00@\x00', @ANYRES16=r5, @ANYBLOB="000229bd7000ffdbdf25010000000800010000000000080001000000000008000100030000000800010001000000"], 0x34}}, 0x20000804) getdents(r2, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) accept4(r7, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4107, 0x100b) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x21, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0x19, 0x8, "b4c0e02b3a0294cbb96151923b512351f674007ab80906baa80b2359880f88a5a16d7f34768da26e07ee60b59b45cfb62fc45d1bb3812448efad25fe4c5468fe", "ebda512431d27a466e35cb531b54d8686085580097066e33444837be9b68218d", [0x3b5, 0xc000000]}) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000034"], 0x18}, 0x0) 1m52.125114476s ago: executing program 3 (id=907): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dc8, &(0x7f0000000340)={0x0, 0x4ab7, 0x800}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, &(0x7f00000000c0)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0xfffffffffffffff1) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000001080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c", @ANYRESOCT=r2, @ANYRES64=0x0, @ANYRESDEC=0x0], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) statfs(&(0x7f0000001a80)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r5}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x1044) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000e0000001000000000079efdadd000000000000000000ffff000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000020000000000000000000000000000000000000040002eba646a0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x805}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0x3) ioctl$SIOCGIFHWADDR(r11, 0x8927, &(0x7f0000000040)={'gretap0\x00'}) 1m49.324994135s ago: executing program 4 (id=273): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) epoll_create1(0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "cf3ea0", 0x0, 0x3c, 0x0, @private2, @mcast2}}}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x20000000000000, 0x1, 0x0, 0xff, 0x0, 0x4, 0x4000000000000000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)={0x2, {{0xa, 0x4e22, 0x3, @private1, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e20, 0xf7c, @remote, 0x848c}}, {{0xa, 0x4e22, 0x638, @rand_addr=' \x01\x00', 0x10001}}, {{0xa, 0x4e21, 0x0, @loopback, 0x7a}}, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x4}}]}, 0x290) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x100000000, 0x2}, {0x1, 0x0, 0x0, 0x1}, 0x0, 0x6e6bbd, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0xa, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000}}, 0x105) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 64) 1m36.893315105s ago: executing program 32 (id=907): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dc8, &(0x7f0000000340)={0x0, 0x4ab7, 0x800}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, &(0x7f00000000c0)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0xfffffffffffffff1) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000001080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c", @ANYRESOCT=r2, @ANYRES64=0x0, @ANYRESDEC=0x0], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) statfs(&(0x7f0000001a80)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r5}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x1044) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000e0000001000000000079efdadd000000000000000000ffff000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000020000000000000000000000000000000000000040002eba646a0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x805}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0x3) ioctl$SIOCGIFHWADDR(r11, 0x8927, &(0x7f0000000040)={'gretap0\x00'}) 1m29.268976502s ago: executing program 4 (id=273): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) epoll_create1(0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "cf3ea0", 0x0, 0x3c, 0x0, @private2, @mcast2}}}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x20000000000000, 0x1, 0x0, 0xff, 0x0, 0x4, 0x4000000000000000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)={0x2, {{0xa, 0x4e22, 0x3, @private1, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e20, 0xf7c, @remote, 0x848c}}, {{0xa, 0x4e22, 0x638, @rand_addr=' \x01\x00', 0x10001}}, {{0xa, 0x4e21, 0x0, @loopback, 0x7a}}, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x4}}]}, 0x290) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x100000000, 0x2}, {0x1, 0x0, 0x0, 0x1}, 0x0, 0x6e6bbd, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0xa, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000}}, 0x105) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 64) 1m3.305856893s ago: executing program 4 (id=273): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) epoll_create1(0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "cf3ea0", 0x0, 0x3c, 0x0, @private2, @mcast2}}}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x20000000000000, 0x1, 0x0, 0xff, 0x0, 0x4, 0x4000000000000000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)={0x2, {{0xa, 0x4e22, 0x3, @private1, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e20, 0xf7c, @remote, 0x848c}}, {{0xa, 0x4e22, 0x638, @rand_addr=' \x01\x00', 0x10001}}, {{0xa, 0x4e21, 0x0, @loopback, 0x7a}}, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x4}}]}, 0x290) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x100000000, 0x2}, {0x1, 0x0, 0x0, 0x1}, 0x0, 0x6e6bbd, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0xa, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000}}, 0x105) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 64) 40.492247415s ago: executing program 4 (id=273): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) epoll_create1(0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "cf3ea0", 0x0, 0x3c, 0x0, @private2, @mcast2}}}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x20000000000000, 0x1, 0x0, 0xff, 0x0, 0x4, 0x4000000000000000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)={0x2, {{0xa, 0x4e22, 0x3, @private1, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e20, 0xf7c, @remote, 0x848c}}, {{0xa, 0x4e22, 0x638, @rand_addr=' \x01\x00', 0x10001}}, {{0xa, 0x4e21, 0x0, @loopback, 0x7a}}, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x4}}]}, 0x290) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x100000000, 0x2}, {0x1, 0x0, 0x0, 0x1}, 0x0, 0x6e6bbd, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0xa, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000}}, 0x105) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 64) 19.865831935s ago: executing program 4 (id=273): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) epoll_create1(0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "cf3ea0", 0x0, 0x3c, 0x0, @private2, @mcast2}}}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x20000000000000, 0x1, 0x0, 0xff, 0x0, 0x4, 0x4000000000000000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)={0x2, {{0xa, 0x4e22, 0x3, @private1, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e20, 0xf7c, @remote, 0x848c}}, {{0xa, 0x4e22, 0x638, @rand_addr=' \x01\x00', 0x10001}}, {{0xa, 0x4e21, 0x0, @loopback, 0x7a}}, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x4}}]}, 0x290) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x100000000, 0x2}, {0x1, 0x0, 0x0, 0x1}, 0x0, 0x6e6bbd, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0xa, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000}}, 0x105) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 64) 10.555598403s ago: executing program 1 (id=1156): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x2f, 0x0, @loopback, @local, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x20, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x8, 0x200000b}}], 0x20, 0x6044}, 0x6) 10.554485782s ago: executing program 2 (id=1157): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008}, [@call={0x85, 0x0, 0x0, 0x7a}]}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) semget$private(0x0, 0x1, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 9.57392182s ago: executing program 2 (id=1158): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x401, @mcast2, 0xfff5}, 0x1c, 0x0}}], 0x1, 0x0) 9.456283882s ago: executing program 1 (id=1161): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x3, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x6, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x21, 0x0, @local, @multicast1}}}}, 0x3e) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 9.408586591s ago: executing program 2 (id=1162): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2001340000a49eb1f8f3706700712bab"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@newqdisc={0x3b, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x8], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffe], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x3, 0x26, 0x1e, 0xc, 0x0, 0x5, 0x3}}, {0x0, 0x2, [0x101, 0x4, 0xfe00, 0xfffb, 0x8, 0x80]}}, {{0x0, 0x1, {0x6, 0x8, 0x5, 0x6, 0x2, 0x7, 0x401}}, {0x0, 0x2, [0x3ff, 0x8, 0x2, 0x2, 0x58, 0x1, 0x62, 0xfffb, 0x5, 0x8]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$alg(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.076232277s ago: executing program 4 (id=273): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) epoll_create1(0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "cf3ea0", 0x0, 0x3c, 0x0, @private2, @mcast2}}}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x20000000000000, 0x1, 0x0, 0xff, 0x0, 0x4, 0x4000000000000000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)={0x2, {{0xa, 0x4e22, 0x3, @private1, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e20, 0xf7c, @remote, 0x848c}}, {{0xa, 0x4e22, 0x638, @rand_addr=' \x01\x00', 0x10001}}, {{0xa, 0x4e21, 0x0, @loopback, 0x7a}}, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x4}}]}, 0x290) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x100000000, 0x2}, {0x1, 0x0, 0x0, 0x1}, 0x0, 0x6e6bbd, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0xa, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000}}, 0x105) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 64) 7.210917346s ago: executing program 1 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x10, r4, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 7.208994157s ago: executing program 5 (id=1165): prlimit64(0x0, 0xd, &(0x7f0000000380)={0x100000001, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$binder(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1) fsmount(r1, 0x0, 0xf8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x40) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff04800000080039503230"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}], [], 0x6b}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2100) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 3.809729476s ago: executing program 2 (id=1170): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"/3618], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x44c43, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r3, 0x5760, &(0x7f0000000000)) r5 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/160, 0x92}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000000e80)=""/4133, 0x1025}, {&(0x7f0000000800)=""/259, 0xf5}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000940)=""/241, 0xf1}], 0x8}, 0x2020) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1d100000120091ef"], 0xfe33) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000007c0)={'virt_wifi0\x00', @multicast}) 3.795273241s ago: executing program 1 (id=1171): r0 = syz_io_uring_setup(0x344e, &(0x7f0000000480)={0x0, 0x8448, 0x10000}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x36, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x1, {0x2}}) io_uring_enter(r0, 0xe85, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000000c0)={0xc, r5}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b70, &(0x7f00000001c0)={0x28, 0x0, 0x0}) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r6, &(0x7f00000003c0)="1a9e334a282b7586eb7f66b56926d48a7a62add97996c501859917280b55ba7eeef696ecbff465f71ab482b8b7e8368c82a0a874ec7f8476abba10e6dcaedf5dd76cf7d2ede3dc70f28e1c002cf09a5d916ef3f546ed6468aafbc9d20abd9ca2d0c9ec849a3aa2b1", 0x68, 0x8040, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_gettime(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}, {0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000017010000040000000400000000000000180000000000000017010000030000000100000000000000180000000000000017010000030000000000000000000000180000000000000017010000030000000100000000000000f8000000000000001701000002000000de0000004569764dfd3489f547a3b4ff4746be5926b5bd75b9acd99a4a1d10ef47e6545a5de9e578f88844d72327f86f8d1dc7f756fd28210361dd63980a5b7018dc4e9aacd8f999a4e30e1164304a54efc36c660130b27934e58b96b0fe052c434cec8eef9081e854754b0fa05a928c508b11d53a2b2aa555e5b02a5c9cd069c695c94dbd32bb406c95a36fd1a53e00727e1f755027200b7ec884491582d7fcb2463cd68797403f7fa8e1cc0abaf33c9f79e25cbe9bbc04"], 0x158}], 0x2, 0x4) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.667930113s ago: executing program 5 (id=1172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000680)={0x252000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x2d}, &(0x7f0000000540)=""/169, 0xa9, &(0x7f0000000600)=""/23, &(0x7f0000000640)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000340)=""/235, 0xeb}], 0x1000000000000326, 0x582, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x104, 0x14, 0x400, 0x70bd2a, 0x25dfdbff, {0x5}, [@generic="63b6d6716f4f4d94efc754d16097f8a99038b5bffeaf962ed41017a0c4de791a8cac7250d984a6f69eed57974487457fc7388e6c0f8b9bab37d82ae0dde4e6227ff482a7044ca6154b941125d3fe9fed112965a9a5f8b6958bdaa8a8775309befe4bcbb286fd48f330804201041153a85205f3b10d32c6914f32279ba58a1b4ef5bc14b0de5f0eb6aa6cd5dc504ba7eef02237e95764d3bc16630d8a99737646efad64d7741871ffcf8d7a386a6072794eb146e17b640867fe3f97d9ebc67452e6244d9243472f96f0a03551c86bc91f7b5b42238659f4f7b07482f6e261fcb27ff30e29fb1324952b6236ef4e"]}, 0x104}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x922ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 3.539173426s ago: executing program 0 (id=1173): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x2c88, 0x0, 0x3, 0x3e0}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x1, 0x22e}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x101}, 0x14}}, 0x0) 2.275442659s ago: executing program 5 (id=1174): getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x8, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x8, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x21000000, [{0x0, 0x2, 0x1000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xb}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) 1.672414742s ago: executing program 0 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000031000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x0) 1.575905329s ago: executing program 5 (id=1176): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000008380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002080)="d49f24912478f0e19281ca04499cf4c16de3", 0x12}, {&(0x7f0000002040)='\v\a]`', 0x4}], 0x2, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="1c"], 0xd0, 0x800}}], 0x2, 0x0) 1.509778998s ago: executing program 0 (id=1177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000040)="65f20f7dc6ba200066b86100000066ef660f38f6682766b9970000400f329a0190520066b8010000000f01d920737eea0a004a000f0965dc930090", 0x3b}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 32) io_setup(0x222, &(0x7f0000000180)=0x0) (async, rerun: 32) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000101002, 0x0) io_submit(r3, 0x2, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x2}]) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x8}, {0x6, 0x10, 0x5, 0x2}}}}, 0x15) (async, rerun: 32) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) (async) r5 = socket$phonet(0x23, 0x2, 0x1) (async) unshare(0x8000000) r6 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_procfs(0x0, 0x0) (async, rerun: 32) close_range(r6, 0xffffffffffffffff, 0x0) (rerun: 32) sendto$phonet(r5, &(0x7f0000000080)="e2d28140b4bf5f499a84998a30ad98be6304722a12c031071dc0a1ce21f2479f24895f941a4ecc4087b7df8f754fd7ddec19dd6d357f98926689667f9ef7ba05952bce0657144de1d9e560c86bd2a78a68c2b1b43a1541d0a0ac55cc70cf92ea717ce7a2efa8", 0x66, 0x880, &(0x7f0000000100)={0x23, 0x9, 0xf, 0x4}, 0x10) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 1.371198066s ago: executing program 2 (id=1178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x10, 0x0}, 0x2000c000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r3, @ANYBLOB="0300000000000000"], 0x20}}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.368556743s ago: executing program 5 (id=1179): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008}, [@call={0x85, 0x0, 0x0, 0x7a}]}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8b1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffaf4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431410fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6daa790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c7070800000000000000433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf8714d7bb2366fde41f94290c2a5fdecb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1f5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41ffc12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5eae593fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9db25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27832b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bb0800c51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a540f0c10ec3a11667290b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad95971030000007d00000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c6055bb164ab413d5467ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d7ab3753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf06db539f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe6e7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a1914b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c69a795927e3861654736804bed4214040b7724c056d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8adc67ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c027060697a7f10132b1c259d3f28b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000000000000000000000915c2cde78db002a20e370600f56b3803786ffff268fa1782c240a1d3b62bb5c9c5712bc58a0f276f5224b6efaceab36d1468b0800000000000000cbefec08ac7cb62a9f6abcc97daf83edafe4409ecba3050a321a180af12bc59b1b2f1a9cfdf4bf2d260000000000a62f09e2ede938ea300cbefada05c356f12cdc84f66c65e669f0ffcb4ad94f6a8ba978f89ab3d2e62bd2c3eae921e9871acbf36c259d3a86dd5d022bac5ee38f6eccd3e462e47a96dc9e653fb7d7a64405a7c97fb3946f6766f937119652e07464910290873e989f3798f5324de8584a1a8772d2bddfc6eea633f7be50d362159914a877d2fe0fc67783b4fb000000000000000000328b4ed8ac2f2d0440488e4b1d32280373df7ce8847683fae1c73ee4cb32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) semget$private(0x0, 0x1, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 900.412652ms ago: executing program 0 (id=1180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 837.641312ms ago: executing program 0 (id=1181): set_tid_address(0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xa, @loopback}], 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) syz_open_dev$loop(0x0, 0x2, 0xa6040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x80) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@int=0x2, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02040002020000002abd7000ff25"], 0x10}, 0x1, 0x40030000000000}, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0x12) 806.911968ms ago: executing program 1 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, r2, 0x4}, 0x38) 774.655758ms ago: executing program 2 (id=1183): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x110}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getnexthop={0x20, 0x6a, 0xdadaa134146f5b73, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NHA_MASTER={0x8, 0xa, 0xffffffff}]}, 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 616.220466ms ago: executing program 1 (id=1184): socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/bus/input/handlers\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$smackfs_cipso(0xffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000780)={0x1, @vbi={0xffffffff, 0x100}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7f67, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, {0x800, 0xe7, 0x5, 0x8002}}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) preadv(r7, &(0x7f000001fb80)=[{&(0x7f0000000280)=""/52, 0x34}, {0x0}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 227.269037ms ago: executing program 5 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@local, 0x1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r1, 0x2000) (fail_nth: 10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) 0s ago: executing program 0 (id=1186): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0x50ab}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d56", 0x14) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000025c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000002580)={0x0, 0x0, 0x5}) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f00000024c0)=ANY=[@ANYBLOB="180000002d0000000000000000000000007100000000000000950000000000002732091366f55999a0bc976fcaf057a53257e758453da206757bb02acd636f5fa5f8bc0400790a8d536e1d9e8441da1db9b34ed4567f26a7ba8cc6f5b0db75b16ebe9df96777fc085c313b7e56e31a4e274baa0e9468b77232960beef4186ca4114279807b7343958ab7ef9b8dc0720456354da1d9bba0bc4564"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[], 0x170}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES16=r5, @ANYRES64=r0, @ANYBLOB="00000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ab601d000006000000000000000800000b000000000000000000000b094d3cdc3da688cff447f211e895ea3a14aa258dc8b573dc74776df3b0cf6bfdd9a1a01bb43ca0ca31aa4a4a44a0446e2db767d4b748d934c2da54bbf00fe80af42c1901abfa248b9dea"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b703000000000000850000005100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 361.220260][ T9225] alloc_io_context+0x25/0x280 [ 361.220279][ T9225] set_task_ioprio+0x451/0x5b0 [ 361.220300][ T9225] ? __se_sys_ioprio_set+0xd0/0xa60 [ 361.220323][ T9225] __se_sys_ioprio_set+0x834/0xa60 [ 361.220343][ T9225] ? __se_sys_ioprio_set+0xd0/0xa60 [ 361.220373][ T9225] do_syscall_64+0xf3/0x230 [ 361.220395][ T9225] ? clear_bhb_loop+0x35/0x90 [ 361.220420][ T9225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.220440][ T9225] RIP: 0033:0x7ff0cdb8cda9 [ 361.220456][ T9225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.220469][ T9225] RSP: 002b:00007ff0cea3b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 361.220487][ T9225] RAX: ffffffffffffffda RBX: 00007ff0cdda6160 RCX: 00007ff0cdb8cda9 [ 361.220499][ T9225] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000003 [ 361.220509][ T9225] RBP: 00007ff0cea3b090 R08: 0000000000000000 R09: 0000000000000000 [ 361.220520][ T9225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.220530][ T9225] R13: 0000000000000000 R14: 00007ff0cdda6160 R15: 00007fffbedc4af8 [ 361.220557][ T9225] [ 361.579459][ T96] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 361.588757][ T96] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.596840][ T96] usb 4-1: Product: syz [ 361.601028][ T96] usb 4-1: Manufacturer: syz [ 361.605683][ T96] usb 4-1: SerialNumber: syz [ 361.612160][ T96] usb 4-1: config 0 descriptor?? [ 361.657873][ T96] gspca_main: se401-2.14.0 probing 047d:5003 [ 361.684492][ T5907] usb 1-1: USB disconnect, device number 30 [ 361.703472][ T3489] hsr_slave_0: left promiscuous mode [ 361.709618][ T3489] hsr_slave_1: left promiscuous mode [ 361.726199][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.823296][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.864842][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.895029][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.909202][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.948182][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.955044][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.975532][ T9230] /dev/nullb0: Can't open blockdev [ 361.999489][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.111421][ T3489] veth1_macvtap: left promiscuous mode [ 362.156190][ T96] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 362.189542][ T3489] veth0_macvtap: left promiscuous mode [ 362.197789][ T3489] veth1_vlan: left promiscuous mode [ 362.203275][ T3489] veth0_vlan: left promiscuous mode [ 362.323507][ T5907] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 362.405237][ T5837] Bluetooth: hci4: command tx timeout [ 362.585134][ T5907] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 362.593843][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.627639][ T5907] usb 2-1: config 0 has no interface number 0 [ 362.659448][ T5907] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid wMaxPacketSize 0 [ 362.687105][ T5907] usb 2-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.728033][ T5907] usb 2-1: config 0 interface 11 has no altsetting 0 [ 362.752712][ T5907] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 362.770460][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.799369][ T5907] usb 2-1: config 0 descriptor?? [ 362.806746][ T5907] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 362.817562][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 362.827948][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 362.839058][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 362.862097][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 362.869948][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 362.904809][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 362.942612][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 362.980088][ T96] gspca_se401: read req failed req 0x06 error -19 [ 363.010646][ T96] usb 4-1: USB disconnect, device number 28 [ 363.028937][ T5907] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 363.084618][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 364.003741][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 364.021909][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 364.029833][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 364.048211][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 364.084111][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 364.108531][ T5907] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 364.120696][ T5907] usb 2-1: USB disconnect, device number 20 [ 364.157225][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 364.188397][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 364.216098][ T5907] keyspan 2-1:0.11: device disconnected [ 364.483504][ T5837] Bluetooth: hci4: command tx timeout [ 364.601870][ T3489] team0 (unregistering): Port device team_slave_1 removed [ 364.649461][ T3489] team0 (unregistering): Port device team_slave_0 removed [ 364.666350][ T9255] random: crng reseeded on system resumption [ 364.768429][ T5907] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 364.940362][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 364.947326][ T5907] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 364.957513][ T5907] usb 2-1: config 0 has no interface number 0 [ 364.971479][ T5907] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.990927][ T5907] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 365.002686][ T5907] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 365.016800][ T5907] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 365.026311][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 365.034592][ T5907] usb 2-1: Product: syz [ 365.038972][ T5907] usb 2-1: SerialNumber: syz [ 365.056784][ T5907] usb 2-1: config 0 descriptor?? [ 365.062618][ T9252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.072529][ T5907] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 365.080651][ T5907] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input12 [ 365.323654][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 365.323672][ T29] audit: type=1326 audit(1738392741.459:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9251 comm="syz.1.881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3a9f8cda9 code=0x0 [ 365.372568][ T9261] FAULT_INJECTION: forcing a failure. [ 365.372568][ T9261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.399257][ T9261] CPU: 1 UID: 0 PID: 9261 Comm: syz.3.883 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 365.399284][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 365.399294][ T9261] Call Trace: [ 365.399300][ T9261] [ 365.399307][ T9261] dump_stack_lvl+0x241/0x360 [ 365.399339][ T9261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.399364][ T9261] ? __pfx__printk+0x10/0x10 [ 365.399389][ T9261] ? __pfx_lock_release+0x10/0x10 [ 365.399418][ T9261] should_fail_ex+0x40a/0x550 [ 365.399441][ T9261] _copy_from_iter+0x1e9/0x1c20 [ 365.399463][ T9261] ? __virt_addr_valid+0x183/0x530 [ 365.399495][ T9261] ? __alloc_skb+0x28f/0x440 [ 365.399516][ T9261] ? __pfx__copy_from_iter+0x10/0x10 [ 365.399539][ T9261] ? __virt_addr_valid+0x183/0x530 [ 365.399560][ T9261] ? __virt_addr_valid+0x183/0x530 [ 365.399580][ T9261] ? __virt_addr_valid+0x45f/0x530 [ 365.399601][ T9261] ? __phys_addr_symbol+0x2f/0x70 [ 365.399621][ T9261] ? __check_object_size+0x47a/0x730 [ 365.399646][ T9261] netlink_sendmsg+0x73d/0xcb0 [ 365.399682][ T9261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.399717][ T9261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.399738][ T9261] __sock_sendmsg+0x221/0x270 [ 365.399760][ T9261] ____sys_sendmsg+0x52a/0x7e0 [ 365.399792][ T9261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.399814][ T9261] ? __fget_files+0x2a/0x410 [ 365.399837][ T9261] ? __fget_files+0x2a/0x410 [ 365.399865][ T9261] __sys_sendmsg+0x269/0x350 [ 365.399893][ T9261] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.399927][ T9261] ? do_sys_openat2+0x17a/0x1d0 [ 365.399973][ T9261] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.399995][ T9261] ? do_syscall_64+0x100/0x230 [ 365.400019][ T9261] ? do_syscall_64+0xb6/0x230 [ 365.400040][ T9261] do_syscall_64+0xf3/0x230 [ 365.400061][ T9261] ? clear_bhb_loop+0x35/0x90 [ 365.400085][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.400106][ T9261] RIP: 0033:0x7f592ed8cda9 [ 365.400121][ T9261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.400135][ T9261] RSP: 002b:00007f592fcb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.400154][ T9261] RAX: ffffffffffffffda RBX: 00007f592efa5fa0 RCX: 00007f592ed8cda9 [ 365.400166][ T9261] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 365.400180][ T9261] RBP: 00007f592fcb2090 R08: 0000000000000000 R09: 0000000000000000 [ 365.400190][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.400206][ T9261] R13: 0000000000000000 R14: 00007f592efa5fa0 R15: 00007fff2772bcd8 [ 365.400233][ T9261] [ 365.667358][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 365.676894][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 365.684091][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 365.684760][ T25] usb 2-1: USB disconnect, device number 21 [ 365.691036][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 365.727302][ T25] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 365.963176][ T9210] chnl_net:caif_netlink_parms(): no params data found [ 366.084463][ T5907] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 366.176287][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.193580][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.200913][ T9210] bridge_slave_0: entered allmulticast mode [ 366.208866][ T9210] bridge_slave_0: entered promiscuous mode [ 366.216903][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.233376][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.240581][ T9210] bridge_slave_1: entered allmulticast mode [ 366.248515][ T9210] bridge_slave_1: entered promiscuous mode [ 366.263422][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 366.288291][ T5907] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 366.298720][ T5907] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.328767][ T5907] usb 4-1: config 0 interface 0 has no altsetting 0 [ 366.349561][ T9210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.374395][ T5907] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 366.385055][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.405623][ T9210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.414774][ T5907] usb 4-1: Product: syz [ 366.418954][ T5907] usb 4-1: Manufacturer: syz [ 366.441378][ T5907] usb 4-1: SerialNumber: syz [ 366.454069][ T5907] usb 4-1: config 0 descriptor?? [ 366.482975][ T9210] team0: Port device team_slave_0 added [ 366.506583][ T9210] team0: Port device team_slave_1 added [ 366.548095][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.892'. [ 366.563593][ T5837] Bluetooth: hci4: command tx timeout [ 366.570522][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.589690][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.622863][ T9210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.660360][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.673484][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.703359][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 366.730338][ T9210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.788074][ T9210] hsr_slave_0: entered promiscuous mode [ 366.794772][ T9210] hsr_slave_1: entered promiscuous mode [ 366.800950][ T9210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.809658][ T9210] Cannot create hsr debugfs directory [ 366.885004][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 366.995496][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 367.074865][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.219435][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.265734][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.369429][ T25] usb 1-1: Product: syz [ 367.392203][ T25] usb 1-1: Manufacturer: syz [ 367.397963][ T25] usb 1-1: SerialNumber: syz [ 367.419422][ T25] usb 1-1: config 0 descriptor?? [ 367.429845][ T25] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 367.463352][ T25] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 367.838259][ T9299] /dev/nullb0: Can't open blockdev [ 368.034820][ T25] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 368.082814][ T25] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 368.568893][ T9210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 368.588850][ T9210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 368.619698][ T9210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 368.631285][ T9210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.644202][ T5837] Bluetooth: hci4: command tx timeout [ 368.769431][ T9210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.786333][ T9305] random: crng reseeded on system resumption [ 368.799472][ T9210] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.835799][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.842994][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.861445][ T25] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 368.879375][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.886522][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.278643][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 369.285689][ T9210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.292973][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 369.317790][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 369.325099][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 369.346043][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 369.373483][ T25] usb 1-1: USB disconnect, device number 31 [ 369.478282][ T5879] usb 4-1: USB disconnect, device number 29 [ 369.588862][ T9210] veth0_vlan: entered promiscuous mode [ 369.618046][ T9210] veth1_vlan: entered promiscuous mode [ 369.643902][ T51] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 369.694952][ T9210] veth0_macvtap: entered promiscuous mode [ 369.704781][ T9210] veth1_macvtap: entered promiscuous mode [ 369.735748][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.747582][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.757577][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.783308][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.803597][ T51] usb 2-1: device descriptor read/64, error -71 [ 369.810085][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.826747][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.836960][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.848459][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.874718][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.888282][ T9328] netlink: 56 bytes leftover after parsing attributes in process `syz.2.901'. [ 369.999157][ T9334] FAULT_INJECTION: forcing a failure. [ 369.999157][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 370.122892][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.133777][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.144005][ T9334] CPU: 1 UID: 0 PID: 9334 Comm: syz.3.904 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 370.144027][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 370.144038][ T9334] Call Trace: [ 370.144043][ T9334] [ 370.144051][ T9334] dump_stack_lvl+0x241/0x360 [ 370.144084][ T9334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.144108][ T9334] ? __pfx__printk+0x10/0x10 [ 370.144134][ T9334] ? fs_reclaim_acquire+0x93/0x130 [ 370.144159][ T9334] ? __pfx___might_resched+0x10/0x10 [ 370.144182][ T9334] should_fail_ex+0x40a/0x550 [ 370.144206][ T9334] should_failslab+0xac/0x100 [ 370.144227][ T9334] __kmalloc_noprof+0xdd/0x4c0 [ 370.144247][ T9334] ? tomoyo_encode+0x26f/0x540 [ 370.144269][ T9334] ? copy_from_kernel_nofault_allowed+0xa9/0x130 [ 370.144291][ T9334] tomoyo_encode+0x26f/0x540 [ 370.144315][ T9334] ? __pfx_simple_dname+0x10/0x10 [ 370.144341][ T9334] tomoyo_realpath_from_path+0x59e/0x5e0 [ 370.144376][ T9334] tomoyo_check_open_permission+0x258/0x4f0 [ 370.144401][ T9334] ? tomoyo_check_open_permission+0x207/0x4f0 [ 370.144423][ T9334] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 370.144501][ T9334] ? do_raw_spin_unlock+0x13c/0x8b0 [ 370.144518][ T9334] ? tomoyo_file_open+0x165/0x220 [ 370.144540][ T9334] security_file_open+0xac/0x250 [ 370.144563][ T9334] do_dentry_open+0x320/0x1960 [ 370.144592][ T9334] ? vfs_open+0x31/0x370 [ 370.144616][ T9334] vfs_open+0x3b/0x370 [ 370.144637][ T9334] dentry_open+0x61/0xa0 [ 370.144657][ T9334] big_key_read+0x195/0x2f0 [ 370.144680][ T9334] ? __pfx_big_key_read+0x10/0x10 [ 370.144697][ T9334] ? trace_kmalloc+0x1f/0xd0 [ 370.144715][ T9334] ? __kvmalloc_node_noprof+0x72/0x190 [ 370.144748][ T9334] keyctl_read_key+0x282/0x450 [ 370.144776][ T9334] __se_sys_keyctl+0x326/0x910 [ 370.144801][ T9334] ? __pfx___se_sys_keyctl+0x10/0x10 [ 370.144822][ T9334] ? do_sys_openat2+0x17a/0x1d0 [ 370.144845][ T9334] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 370.144865][ T9334] ? __fget_files+0x2a/0x410 [ 370.144894][ T9334] ? __fget_files+0x2a/0x410 [ 370.144924][ T9334] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.144948][ T9334] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.144970][ T9334] ? do_syscall_64+0x100/0x230 [ 370.144994][ T9334] ? __x64_sys_keyctl+0x20/0xc0 [ 370.145019][ T9334] do_syscall_64+0xf3/0x230 [ 370.145038][ T9334] ? clear_bhb_loop+0x35/0x90 [ 370.145064][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.145084][ T9334] RIP: 0033:0x7f592ed8cda9 [ 370.145099][ T9334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.145113][ T9334] RSP: 002b:00007f592fcb2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 370.145131][ T9334] RAX: ffffffffffffffda RBX: 00007f592efa5fa0 RCX: 00007f592ed8cda9 [ 370.145144][ T9334] RDX: 0000000020001300 RSI: 0000000017404aa7 RDI: 000000000000000b [ 370.145155][ T9334] RBP: 00007f592fcb2090 R08: 0000000000000000 R09: 0000000000000000 [ 370.145165][ T9334] R10: ffffffffffffffd2 R11: 0000000000000246 R12: 0000000000000001 [ 370.145176][ T9334] R13: 0000000000000000 R14: 00007f592efa5fa0 R15: 00007fff2772bcd8 [ 370.145204][ T9334] [ 370.145250][ T9334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.221086][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.293407][ T51] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 370.294507][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.359834][ T9341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.903'. [ 370.362488][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.485091][ T51] usb 2-1: device descriptor read/64, error -71 [ 370.500515][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.533117][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.547363][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.558263][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.585896][ T9210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.602831][ T9210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.613407][ T9210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.622186][ T9210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.623670][ T51] usb usb2-port1: attempt power cycle [ 370.740394][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.755852][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.789790][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.819655][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.025938][ T51] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 371.054013][ T51] usb 2-1: device descriptor read/8, error -71 [ 371.087339][ T9357] random: crng reseeded on system resumption [ 371.173470][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 371.229651][ T9360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.303734][ T51] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 371.313897][ T9360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.911'. [ 371.323005][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.911'. [ 371.332677][ T51] usb 2-1: device descriptor read/8, error -71 [ 371.343523][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 371.369110][ T9] usb 4-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 371.379631][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.390765][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 166, changing to 11 [ 371.402077][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 18310, setting to 1024 [ 371.418028][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.432041][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 371.441265][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 371.444355][ T51] usb usb2-port1: unable to enumerate USB device [ 371.449737][ T9] usb 4-1: Manufacturer: syz [ 371.462528][ T9] usb 4-1: config 0 descriptor?? [ 373.539748][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.901423][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.973668][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.021965][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.102132][ T11] bridge_slave_1: left allmulticast mode [ 374.107972][ T11] bridge_slave_1: left promiscuous mode [ 374.114549][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.123890][ T11] bridge_slave_0: left allmulticast mode [ 374.129556][ T11] bridge_slave_0: left promiscuous mode [ 374.135355][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.488199][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.501823][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.513751][ T11] bond0 (unregistering): Released all slaves [ 374.771553][ T11] hsr_slave_0: left promiscuous mode [ 374.777831][ T11] hsr_slave_1: left promiscuous mode [ 374.783689][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.791099][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.801027][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.809352][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.832480][ T11] veth1_macvtap: left promiscuous mode [ 374.838311][ T11] veth0_macvtap: left promiscuous mode [ 374.844180][ T11] veth1_vlan: left promiscuous mode [ 374.849491][ T11] veth0_vlan: left promiscuous mode [ 375.463910][ T9390] overlayfs: failed to resolve './file0': -2 [ 375.471368][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.919'. [ 375.480348][ T9390] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 375.631188][ T9393] random: crng reseeded on system resumption [ 375.793284][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 375.953435][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 375.960857][ T25] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 376.043057][ T11] team0 (unregistering): Port device team_slave_1 removed [ 376.066945][ T25] usb 3-1: config 0 has no interface number 0 [ 376.073751][ T25] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 376.087798][ T25] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 376.098230][ T25] usb 3-1: config 0 interface 41 has no altsetting 0 [ 376.108200][ T25] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 376.129924][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.148419][ T25] usb 3-1: Product: syz [ 376.152620][ T25] usb 3-1: Manufacturer: syz [ 376.163273][ T25] usb 3-1: SerialNumber: syz [ 376.303468][ T11] team0 (unregistering): Port device team_slave_0 removed [ 376.350935][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.360519][ T25] usb 3-1: config 0 descriptor?? [ 376.363154][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.373376][ T9383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 376.380785][ T9383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 376.427587][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.444537][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.459387][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 376.474369][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.281227][ T9] rc_core: IR keymap rc-hauppauge not found [ 377.297496][ T9] Registered IR keymap rc-empty [ 377.306330][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.315609][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.327597][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.358228][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.402557][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 377.416254][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 377.435836][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.455730][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.485650][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.503496][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.539401][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.572889][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.600478][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.639905][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.674724][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.698203][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 377.738641][ T9] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 377.747054][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 377.813877][ T9402] bond0: (slave bond_slave_0): Releasing backup interface [ 377.830360][ T9402] bond0: (slave bond_slave_1): Releasing backup interface [ 377.857431][ T9402] team0: Port device team_slave_0 removed [ 377.869884][ T9402] team0: Port device team_slave_1 removed [ 377.877332][ T9402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.884893][ T9402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.894363][ T9402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.901818][ T9402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.937690][ T9402] team0: Port device wlan1 removed [ 378.031144][ T25] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 378.056862][ T25] usb 3-1: USB disconnect, device number 31 [ 378.403718][ T9413] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 378.817382][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858415][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.247849][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 379.284471][ T5837] Bluetooth: hci4: command tx timeout [ 379.662471][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.301521][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.309365][ T9396] bridge_slave_0: entered allmulticast mode [ 380.316488][ T9396] bridge_slave_0: entered promiscuous mode [ 380.376950][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.393395][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.409078][ T9396] bridge_slave_1: entered allmulticast mode [ 380.419754][ T9396] bridge_slave_1: entered promiscuous mode [ 380.655762][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.679195][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.728077][ T9396] team0: Port device team_slave_0 added [ 380.737519][ T9396] team0: Port device team_slave_1 added [ 380.793425][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 380.816622][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.823835][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.972189][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.983486][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 380.991155][ T25] usb 2-1: config 1 interface 0 has no altsetting 0 [ 381.003290][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 381.019854][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.024123][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.032241][ T25] usb 2-1: Product: syz [ 381.039222][ T25] usb 2-1: Manufacturer: syz [ 381.049712][ T25] usb 2-1: SerialNumber: syz [ 381.270318][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.297407][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.362364][ T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 381.372042][ T5837] Bluetooth: hci4: command tx timeout [ 381.392180][ T5185] bcm5974 2-1:1.0: could not read from device [ 381.427045][ T9447] overlayfs: failed to resolve './file0': -2 [ 381.484624][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'. [ 381.494019][ T9448] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 381.508778][ T5185] bcm5974 2-1:1.0: could not read from device [ 381.522965][ T25] usb 2-1: USB disconnect, device number 26 [ 381.535835][ T5185] bcm5974 2-1:1.0: could not read from device [ 381.775198][ T9396] hsr_slave_0: entered promiscuous mode [ 381.781747][ T9396] hsr_slave_1: entered promiscuous mode [ 381.788013][ T9396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.795952][ T9396] Cannot create hsr debugfs directory [ 382.222275][ T9453] /dev/nullb0: Can't open blockdev [ 382.815507][ T9459] random: crng reseeded on system resumption [ 383.448274][ T5837] Bluetooth: hci4: command tx timeout [ 383.847406][ T9462] bridge_slave_0: left allmulticast mode [ 383.853112][ T9462] bridge_slave_0: left promiscuous mode [ 383.858975][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.869750][ T9462] bridge_slave_1: left allmulticast mode [ 383.875684][ T9462] bridge_slave_1: left promiscuous mode [ 383.881384][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.891964][ T9462] bond0: (slave bond_slave_0): Releasing backup interface [ 383.904368][ T9462] bond0: (slave bond_slave_1): Releasing backup interface [ 383.927473][ T9462] team0: Port device team_slave_0 removed [ 384.001617][ T9462] team0: Port device team_slave_1 removed [ 384.008144][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.015593][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.036174][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.046962][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.062866][ T9462] bond0: (slave wlan1): Releasing backup interface [ 384.536548][ T9396] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.612510][ T9396] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.403354][ T9396] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.503388][ T9396] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.523353][ T5837] Bluetooth: hci4: command tx timeout [ 385.821198][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.889663][ T9475] netlink: 'syz.1.939': attribute type 10 has an invalid length. [ 385.914710][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.541623][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.548777][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.589390][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.596517][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.640935][ T9475] bond0: (slave wlan1): Opening slave failed [ 386.684066][ T9396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.702465][ T9396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.133949][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.153733][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.163522][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.171414][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.179506][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 387.187347][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.223524][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.731737][ T9499] overlayfs: failed to resolve './file0': -2 [ 387.739954][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.944'. [ 387.748918][ T9499] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 388.397815][ T9515] kvm: user requested TSC rate below hardware speed [ 388.435432][ T9513] 9pnet_fd: Insufficient options for proto=fd [ 388.460650][ T9486] chnl_net:caif_netlink_parms(): no params data found [ 388.518353][ T9516] bridge0: entered allmulticast mode [ 389.328211][ T5837] Bluetooth: hci5: command tx timeout [ 389.363005][ T9396] veth0_vlan: entered promiscuous mode [ 389.379429][ T9396] veth1_vlan: entered promiscuous mode [ 389.518837][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.533897][ T9486] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.541233][ T9486] bridge_slave_0: entered allmulticast mode [ 389.549827][ T9486] bridge_slave_0: entered promiscuous mode [ 389.573735][ T9486] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.581544][ T9486] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.593493][ T9486] bridge_slave_1: entered allmulticast mode [ 389.629094][ T9486] bridge_slave_1: entered promiscuous mode [ 389.690153][ T9530] random: crng reseeded on system resumption [ 389.709660][ T9486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.737679][ T9486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.847350][ T9486] team0: Port device team_slave_0 added [ 389.868857][ T9486] team0: Port device team_slave_1 added [ 389.885416][ T9396] veth0_macvtap: entered promiscuous mode [ 389.960762][ T9396] veth1_macvtap: entered promiscuous mode [ 390.015389][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.022409][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.171976][ T9536] netlink: 'syz.2.951': attribute type 10 has an invalid length. [ 390.193910][ T9486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.239828][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.270964][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.303238][ T29] audit: type=1800 audit(1738392766.429:114): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.949" name="/" dev="9p" ino=2 res=0 errno=0 [ 390.326850][ T9486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.345728][ T9536] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 390.357040][ T9536] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 390.375443][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.387013][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.413262][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.427165][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.440035][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.481145][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.501136][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.511747][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.524476][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.535805][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.566983][ T9486] hsr_slave_0: entered promiscuous mode [ 390.575801][ T9486] hsr_slave_1: entered promiscuous mode [ 390.581990][ T9486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.589833][ T9486] Cannot create hsr debugfs directory [ 390.676353][ T9396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.685711][ T9396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.700695][ T9396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.712581][ T9396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.943565][ T51] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 391.144024][ T9547] overlayfs: missing 'lowerdir' [ 391.363341][ T5837] Bluetooth: hci5: command tx timeout [ 391.374230][ T51] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 391.389221][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.399180][ T51] usb 1-1: config 0 descriptor?? [ 391.443986][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.456006][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.554337][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.593583][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.775619][ T9486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.867212][ T51] elan 0003:04F3:0755.0009: collection stack underflow [ 391.908121][ T9486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.917207][ T51] elan 0003:04F3:0755.0009: item 0 1 0 12 parsing failed [ 391.930667][ T51] elan 0003:04F3:0755.0009: Hid Parse failed [ 391.941366][ T9486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 391.950538][ T51] elan 0003:04F3:0755.0009: probe with driver elan failed with error -22 [ 391.965590][ T9486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.977569][ T9554] overlayfs: failed to resolve './file0': -2 [ 391.996983][ T9554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.956'. [ 392.006508][ T9554] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 393.287228][ T9486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.335787][ T9486] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.381745][ T9486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 393.392408][ T9486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.443388][ T5837] Bluetooth: hci5: command tx timeout [ 393.864277][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.035761][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.042919][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.078286][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.085500][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.888419][ T96] usb 1-1: USB disconnect, device number 32 [ 395.002168][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.071538][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.100593][ T9486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.161186][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.304154][ T12] bridge_slave_1: left allmulticast mode [ 395.309902][ T12] bridge_slave_1: left promiscuous mode [ 395.316032][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.325417][ T12] bridge_slave_0: left allmulticast mode [ 395.331182][ T12] bridge_slave_0: left promiscuous mode [ 395.337689][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.527320][ T5837] Bluetooth: hci5: command tx timeout [ 395.781349][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.792509][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.807423][ T12] bond0 (unregistering): Released all slaves [ 395.847799][ T9486] veth0_vlan: entered promiscuous mode [ 395.859364][ T9486] veth1_vlan: entered promiscuous mode [ 395.950927][ T9486] veth0_macvtap: entered promiscuous mode [ 395.962739][ T9486] veth1_macvtap: entered promiscuous mode [ 395.994048][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.005578][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.015615][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.026251][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.036651][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.047242][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.058277][ T9486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.100141][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.116616][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.129032][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.140123][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.150173][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.160636][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.171943][ T9486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.200298][ T9486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.209375][ T9486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.218178][ T9486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.228597][ T9486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.245426][ T12] hsr_slave_0: left promiscuous mode [ 396.251284][ T12] hsr_slave_1: left promiscuous mode [ 396.257416][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.264908][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.272791][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.280376][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.377334][ T29] audit: type=1326 audit(1738392772.539:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9581 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 396.426298][ T12] veth1_macvtap: left promiscuous mode [ 396.431902][ T12] veth0_macvtap: left promiscuous mode [ 396.456134][ T12] veth1_vlan: left promiscuous mode [ 396.461490][ T12] veth0_vlan: left promiscuous mode [ 396.466827][ T29] audit: type=1326 audit(1738392772.569:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9581 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 396.483685][ T9589] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 396.513275][ T29] audit: type=1326 audit(1738392772.569:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9581 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 396.555100][ T29] audit: type=1326 audit(1738392772.569:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9581 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 396.582488][ T29] audit: type=1326 audit(1738392772.569:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9581 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 396.608589][ T9593] random: crng reseeded on system resumption [ 396.663128][ T29] audit: type=1326 audit(1738392772.569:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9581 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 396.731836][ T29] audit: type=1326 audit(1738392772.569:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9581 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 396.877730][ T29] audit: type=1326 audit(1738392772.569:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9581 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 397.180413][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.191719][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.204751][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.226491][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.235751][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 397.255613][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.660054][ T9611] overlayfs: failed to resolve './file0': -2 [ 397.673912][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.967'. [ 397.682847][ T9611] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 397.762214][ T12] team0 (unregistering): Port device team_slave_1 removed [ 397.817177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 399.653316][ T5840] Bluetooth: hci4: command tx timeout [ 400.084424][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.092332][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.070772][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.111150][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.684586][ T5840] Bluetooth: hci4: command tx timeout [ 401.860660][ T9603] chnl_net:caif_netlink_parms(): no params data found [ 403.193827][ T9660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.978'. [ 403.236298][ T9664] overlayfs: failed to resolve './file0': -2 [ 403.249451][ T9664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'. [ 403.258436][ T9664] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 403.293694][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.304897][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.312192][ T9603] bridge_slave_0: entered allmulticast mode [ 403.320334][ T9603] bridge_slave_0: entered promiscuous mode [ 403.353468][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.360574][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.374955][ T9603] bridge_slave_1: entered allmulticast mode [ 403.457913][ T9671] openvswitch: netlink: Message has 1275 unknown bytes. [ 403.470780][ T9671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.589598][ T9603] bridge_slave_1: entered promiscuous mode [ 404.438355][ T5840] Bluetooth: hci4: command tx timeout [ 404.696067][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.819273][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.960748][ T9603] team0: Port device team_slave_0 added [ 405.095144][ T9603] team0: Port device team_slave_1 added [ 405.995090][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.002078][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.056880][ T9603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.088852][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.098459][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.125361][ T9603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.309698][ T5876] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 406.361981][ T9603] hsr_slave_0: entered promiscuous mode [ 406.389225][ T9603] hsr_slave_1: entered promiscuous mode [ 406.402407][ T9603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.410617][ T9603] Cannot create hsr debugfs directory [ 406.452501][ T9706] 9pnet_fd: Insufficient options for proto=fd [ 406.483493][ T5840] Bluetooth: hci4: command tx timeout [ 406.514872][ T5876] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 406.531399][ T5876] usb 2-1: config 0 has no interfaces? [ 406.543277][ T5876] usb 2-1: config 0 has no interfaces? [ 406.555838][ T5876] usb 2-1: config 0 has no interfaces? [ 406.564808][ T5876] usb 2-1: config 0 has no interfaces? [ 406.577464][ T5876] usb 2-1: config 0 has no interfaces? [ 406.586562][ T5876] usb 2-1: config 0 has no interfaces? [ 406.595819][ T5876] usb 2-1: config 0 has no interfaces? [ 406.602376][ T5876] usb 2-1: config 0 has no interfaces? [ 406.614395][ T51] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 406.633328][ T5876] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 406.642418][ T5876] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 406.651280][ T58] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 406.665019][ T5876] usb 2-1: Product: syz [ 406.669746][ T5876] usb 2-1: Manufacturer: syz [ 406.672122][ T9709] sp0: Synchronizing with TNC [ 406.674379][ T5876] usb 2-1: SerialNumber: syz [ 406.687590][ T5876] usb 2-1: config 0 descriptor?? [ 406.713745][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.994'. [ 406.722756][ T9709] netlink: 272 bytes leftover after parsing attributes in process `syz.0.994'. [ 406.793536][ T51] usb 6-1: device descriptor read/64, error -71 [ 406.814316][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 406.828756][ T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.866780][ T58] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 406.906135][ T58] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 406.929176][ T9690] tmpfs: Bad value for 'mpol' [ 406.934059][ T58] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.955522][ T25] usb 2-1: USB disconnect, device number 27 [ 406.985069][ T58] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.995438][ T9714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.996'. [ 407.000389][ T9603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.005265][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.019889][ T58] usb 3-1: Product: syz [ 407.024242][ T58] usb 3-1: Manufacturer: syz [ 407.028217][ T9603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.035907][ T58] usb 3-1: SerialNumber: syz [ 407.043515][ T51] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 407.062261][ T9603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.087034][ T9603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.183864][ T51] usb 6-1: device descriptor read/64, error -71 [ 407.215019][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.246344][ T9603] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.333756][ T9717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.343943][ T9717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.357717][ T51] usb usb6-port1: attempt power cycle [ 407.412044][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.419235][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.637329][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.644513][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.783651][ T51] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 408.083563][ T51] usb 6-1: device descriptor read/8, error -71 [ 408.523500][ T51] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 408.793776][ T58] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 408.814464][ T51] usb 6-1: device descriptor read/8, error -71 [ 409.230846][ T51] usb usb6-port1: unable to enumerate USB device [ 409.445827][ T58] usb 3-1: USB disconnect, device number 32 [ 410.560471][ T9739] bridge_slave_0: left allmulticast mode [ 410.566271][ T9739] bridge_slave_0: left promiscuous mode [ 410.572607][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.588748][ T9739] bridge_slave_1: left allmulticast mode [ 410.594500][ T9739] bridge_slave_1: left promiscuous mode [ 410.600210][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.615109][ T9739] bond0: (slave bond_slave_0): Releasing backup interface [ 410.640664][ T9739] bond0: (slave bond_slave_1): Releasing backup interface [ 410.692161][ T9739] team0: Port device team_slave_0 removed [ 410.784861][ T9748] QAT: failed to copy from user cfg_data. [ 411.045560][ T9739] team0: Port device team_slave_1 removed [ 411.052284][ T9739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.059833][ T9739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.068270][ T9739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.076658][ T9739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.996866][ T9603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.213490][ T58] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 412.229667][ T9760] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 412.383559][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 412.435467][ T58] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 412.541408][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.638309][ T58] usb 6-1: Product: syz [ 412.642796][ T58] usb 6-1: Manufacturer: syz [ 412.710691][ T58] usb 6-1: SerialNumber: syz [ 412.820227][ T58] usb 6-1: config 0 descriptor?? [ 412.852580][ T58] gspca_main: mars-2.14.0 probing 093a:050f [ 413.671984][ T9751] sp0: Synchronizing with TNC [ 413.781940][ T9603] veth0_vlan: entered promiscuous mode [ 413.798353][ T9603] veth1_vlan: entered promiscuous mode [ 413.824014][ T58] usb 6-1: USB disconnect, device number 6 [ 413.882969][ T9603] veth0_macvtap: entered promiscuous mode [ 413.897661][ T9603] veth1_macvtap: entered promiscuous mode [ 413.932621][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.000812][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.022087][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.040626][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.263954][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.296650][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.583688][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.623352][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.657451][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.677417][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.707006][ T9603] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.742919][ T9603] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.763331][ T9603] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.793430][ T9603] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.970185][ T9784] overlayfs: missing 'lowerdir' [ 416.613383][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.626702][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.758794][ T9799] QAT: failed to copy from user cfg_data. [ 417.423122][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1019'. [ 417.432934][ T9805] openvswitch: netlink: Flow key attr not present in new flow. [ 418.119614][ T9804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.459067][ T9804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.564926][ T5871] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 419.566228][ T9804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.713440][ T5871] usb 2-1: device descriptor read/64, error -71 [ 419.726547][ T9804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.802463][ T9804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.863556][ T9804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.943142][ T9804] bridge_slave_1: left allmulticast mode [ 419.949284][ T9804] bridge_slave_1: left promiscuous mode [ 419.953386][ T5871] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 419.955060][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.973833][ T9804] bridge_slave_0: left allmulticast mode [ 419.979522][ T9804] bridge_slave_0: left promiscuous mode [ 419.986796][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.093397][ T5871] usb 2-1: device descriptor read/64, error -71 [ 420.206454][ T5871] usb usb2-port1: attempt power cycle [ 420.393311][ T9804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.408940][ T9804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.420343][ T9804] bond0 (unregistering): Released all slaves [ 420.553959][ T5871] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 420.577446][ T5871] usb 2-1: device descriptor read/8, error -71 [ 420.684354][ T9804] hsr_slave_0: left promiscuous mode [ 420.690288][ T9804] hsr_slave_1: left promiscuous mode [ 420.696760][ T9804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.704698][ T9804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.713358][ T9804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.720844][ T9804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.744228][ T9804] veth1_macvtap: left promiscuous mode [ 420.749792][ T9804] veth0_macvtap: left promiscuous mode [ 420.755609][ T9804] veth1_vlan: left promiscuous mode [ 420.762411][ T9804] veth0_vlan: left promiscuous mode [ 420.823340][ T5871] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 420.844062][ T5871] usb 2-1: device descriptor read/8, error -71 [ 420.957472][ T5871] usb usb2-port1: unable to enumerate USB device [ 421.195367][ T9834] FAULT_INJECTION: forcing a failure. [ 421.195367][ T9834] name failslab, interval 1, probability 0, space 0, times 0 [ 421.248284][ T9834] CPU: 0 UID: 0 PID: 9834 Comm: syz.5.1027 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 421.248309][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 421.248323][ T9834] Call Trace: [ 421.248329][ T9834] [ 421.248336][ T9834] dump_stack_lvl+0x241/0x360 [ 421.248367][ T9834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.248391][ T9834] ? __pfx__printk+0x10/0x10 [ 421.248416][ T9834] ? __kmalloc_noprof+0xb5/0x4c0 [ 421.248437][ T9834] ? __pfx___might_resched+0x10/0x10 [ 421.248457][ T9834] should_fail_ex+0x40a/0x550 [ 421.248480][ T9834] should_failslab+0xac/0x100 [ 421.248501][ T9834] __kmalloc_noprof+0xdd/0x4c0 [ 421.248518][ T9834] ? safesetid_security_capable+0xb2/0x1d0 [ 421.248536][ T9834] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 421.248561][ T9834] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 421.248587][ T9834] genl_rcv_msg+0x802/0xec0 [ 421.248614][ T9834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.248659][ T9834] ? __pfx_lock_acquire+0x10/0x10 [ 421.248679][ T9834] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 421.248696][ T9834] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 421.248712][ T9834] ? __pfx_nl802154_post_doit+0x10/0x10 [ 421.248730][ T9834] ? __pfx___might_resched+0x10/0x10 [ 421.248756][ T9834] netlink_rcv_skb+0x1e3/0x430 [ 421.248779][ T9834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.248798][ T9834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.248847][ T9834] genl_rcv+0x28/0x40 [ 421.248864][ T9834] netlink_unicast+0x7f6/0x990 [ 421.248890][ T9834] ? __pfx_netlink_unicast+0x10/0x10 [ 421.248907][ T9834] ? __virt_addr_valid+0x45f/0x530 [ 421.248924][ T9834] ? __phys_addr_symbol+0x2f/0x70 [ 421.248936][ T9834] ? __check_object_size+0x47a/0x730 [ 421.248957][ T9834] netlink_sendmsg+0x8e4/0xcb0 [ 421.248978][ T9834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.248998][ T9834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.249011][ T9834] __sock_sendmsg+0x221/0x270 [ 421.249025][ T9834] ____sys_sendmsg+0x52a/0x7e0 [ 421.249043][ T9834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.249056][ T9834] ? __fget_files+0x2a/0x410 [ 421.249070][ T9834] ? __fget_files+0x2a/0x410 [ 421.249086][ T9834] __sys_sendmsg+0x269/0x350 [ 421.249103][ T9834] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.249124][ T9834] ? do_sys_openat2+0x17a/0x1d0 [ 421.249151][ T9834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.249163][ T9834] ? do_syscall_64+0x100/0x230 [ 421.249177][ T9834] ? do_syscall_64+0xb6/0x230 [ 421.249190][ T9834] do_syscall_64+0xf3/0x230 [ 421.249202][ T9834] ? clear_bhb_loop+0x35/0x90 [ 421.249216][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.249228][ T9834] RIP: 0033:0x7fc1c198cda9 [ 421.249239][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.249247][ T9834] RSP: 002b:00007fc1c2812038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.249259][ T9834] RAX: ffffffffffffffda RBX: 00007fc1c1ba5fa0 RCX: 00007fc1c198cda9 [ 421.249266][ T9834] RDX: 0000000000000004 RSI: 0000000020004f00 RDI: 0000000000000004 [ 421.249272][ T9834] RBP: 00007fc1c2812090 R08: 0000000000000000 R09: 0000000000000000 [ 421.249278][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.249283][ T9834] R13: 0000000000000000 R14: 00007fc1c1ba5fa0 R15: 00007fff61511938 [ 421.249298][ T9834] [ 421.643494][ T9838] /dev/nullb0: Can't open blockdev [ 424.572928][ T9856] /dev/nullb0: Can't open blockdev [ 424.769167][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.993764][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 425.003035][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.012950][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 425.021990][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 425.029482][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.876740][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1034'. [ 426.285178][ T9804] team0 (unregistering): Port device team_slave_1 removed [ 426.357681][ T9804] team0 (unregistering): Port device team_slave_0 removed [ 427.089609][ T5837] Bluetooth: hci4: command tx timeout [ 428.462146][ T9892] FAULT_INJECTION: forcing a failure. [ 428.462146][ T9892] name failslab, interval 1, probability 0, space 0, times 0 [ 428.475085][ T9892] CPU: 1 UID: 0 PID: 9892 Comm: syz.1.1041 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 428.475106][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 428.475126][ T9892] Call Trace: [ 428.475132][ T9892] [ 428.475138][ T9892] dump_stack_lvl+0x241/0x360 [ 428.475166][ T9892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.475188][ T9892] ? __pfx__printk+0x10/0x10 [ 428.475210][ T9892] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 428.475229][ T9892] ? __pfx___might_resched+0x10/0x10 [ 428.475249][ T9892] should_fail_ex+0x40a/0x550 [ 428.475269][ T9892] should_failslab+0xac/0x100 [ 428.475287][ T9892] __kmalloc_node_noprof+0xe1/0x4d0 [ 428.475303][ T9892] ? __kvmalloc_node_noprof+0x72/0x190 [ 428.475328][ T9892] __kvmalloc_node_noprof+0x72/0x190 [ 428.475349][ T9892] nf_tables_newset+0x17ba/0x3060 [ 428.475390][ T9892] ? __pfx_nf_tables_newset+0x10/0x10 [ 428.475416][ T9892] ? __pfx_lock_release+0x10/0x10 [ 428.475447][ T9892] ? __nla_parse+0x40/0x60 [ 428.475468][ T9892] nfnetlink_rcv+0x14e3/0x2ab0 [ 428.475513][ T9892] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 428.475570][ T9892] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.475589][ T9892] ? skb_clone+0x240/0x390 [ 428.475604][ T9892] ? __pfx_lock_release+0x10/0x10 [ 428.475634][ T9892] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.475656][ T9892] netlink_unicast+0x7f6/0x990 [ 428.475682][ T9892] ? __pfx_netlink_unicast+0x10/0x10 [ 428.475699][ T9892] ? __virt_addr_valid+0x45f/0x530 [ 428.475719][ T9892] ? __phys_addr_symbol+0x2f/0x70 [ 428.475737][ T9892] ? __check_object_size+0x47a/0x730 [ 428.475758][ T9892] netlink_sendmsg+0x8e4/0xcb0 [ 428.475789][ T9892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.475820][ T9892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.475839][ T9892] __sock_sendmsg+0x221/0x270 [ 428.475860][ T9892] ____sys_sendmsg+0x52a/0x7e0 [ 428.475889][ T9892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.475908][ T9892] ? __fget_files+0x2a/0x410 [ 428.475928][ T9892] ? __fget_files+0x2a/0x410 [ 428.475953][ T9892] __sys_sendmsg+0x269/0x350 [ 428.475985][ T9892] ? __pfx___sys_sendmsg+0x10/0x10 [ 428.476016][ T9892] ? do_sys_openat2+0x17a/0x1d0 [ 428.476058][ T9892] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.476078][ T9892] ? do_syscall_64+0x100/0x230 [ 428.476099][ T9892] ? do_syscall_64+0xb6/0x230 [ 428.476118][ T9892] do_syscall_64+0xf3/0x230 [ 428.476136][ T9892] ? clear_bhb_loop+0x35/0x90 [ 428.476158][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.476176][ T9892] RIP: 0033:0x7fb3a9f8cda9 [ 428.476190][ T9892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.476203][ T9892] RSP: 002b:00007fb3aae4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.476220][ T9892] RAX: ffffffffffffffda RBX: 00007fb3aa1a5fa0 RCX: 00007fb3a9f8cda9 [ 428.476230][ T9892] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 428.476239][ T9892] RBP: 00007fb3aae4c090 R08: 0000000000000000 R09: 0000000000000000 [ 428.476248][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.476257][ T9892] R13: 0000000000000000 R14: 00007fb3aa1a5fa0 R15: 00007fff5c284c88 [ 428.476280][ T9892] [ 428.833920][ T9859] chnl_net:caif_netlink_parms(): no params data found [ 429.053368][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.060486][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.067812][ T9859] bridge_slave_0: entered allmulticast mode [ 429.074674][ T9859] bridge_slave_0: entered promiscuous mode [ 429.082132][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.089237][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.096424][ T9859] bridge_slave_1: entered allmulticast mode [ 429.104511][ T9859] bridge_slave_1: entered promiscuous mode [ 429.123593][ T5837] Bluetooth: hci4: command tx timeout [ 429.175991][ T9859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.202797][ T9859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.308295][ T9859] team0: Port device team_slave_0 added [ 429.334333][ T9859] team0: Port device team_slave_1 added [ 429.517200][ T5871] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 429.584222][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.592282][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.622383][ T9906] overlayfs: failed to resolve './file0': -2 [ 429.623591][ T9859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.647719][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.655440][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.681350][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.689624][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1044'. [ 429.698804][ T9910] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 429.719418][ T5871] usb 2-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 429.767174][ T5871] usb 2-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 429.792503][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.801044][ T9859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.883265][ T5871] usb 2-1: Product: syz [ 429.887519][ T5871] usb 2-1: Manufacturer: syz [ 429.892157][ T5871] usb 2-1: SerialNumber: syz [ 431.004883][ T9859] hsr_slave_0: entered promiscuous mode [ 431.012791][ T9859] hsr_slave_1: entered promiscuous mode [ 431.024062][ T9859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.045183][ T9859] Cannot create hsr debugfs directory [ 431.184921][ T96] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 431.193415][ T5871] qmi_wwan 2-1:1.0: skipping garbage [ 431.201743][ T5871] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -22 [ 431.210211][ T5837] Bluetooth: hci4: command tx timeout [ 431.226200][ T5871] usb 2-1: USB disconnect, device number 32 [ 432.243397][ T96] usb 6-1: Using ep0 maxpacket: 16 [ 432.251257][ T96] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 432.292189][ T96] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.320742][ T96] usb 6-1: config 0 interface 0 has no altsetting 0 [ 432.334829][ T96] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 432.345701][ T96] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.557758][ T96] usb 6-1: Product: syz [ 432.562082][ T96] usb 6-1: Manufacturer: syz [ 432.571149][ T96] usb 6-1: SerialNumber: syz [ 432.594363][ T96] usb 6-1: config 0 descriptor?? [ 433.433079][ T5837] Bluetooth: hci4: command tx timeout [ 433.588997][ T9933] netlink: 'syz.1.1051': attribute type 10 has an invalid length. [ 433.611369][ T9933] bond0: (slave wlan1): Opening slave failed [ 433.864949][ T5837] Bluetooth: hci5: SCO packet for unknown connection handle 9 [ 434.118915][ T9859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 435.127232][ T9859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 435.147310][ T9859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.676761][ T25] usb 6-1: USB disconnect, device number 7 [ 435.757689][ T9859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.999811][ T9859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.075778][ T9859] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.864655][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.871795][ T9020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.054872][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.062458][ T9020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.408236][ T9859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.984709][ T5837] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 437.993667][ T5837] Bluetooth: hci5: Injecting HCI hardware error event [ 438.050925][ T5837] Bluetooth: hci5: hardware error 0x00 [ 438.655155][ T9859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.685532][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 438.703535][ T9995] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 439.097467][ T58] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 439.369077][ T58] usb 1-1: device descriptor read/64, error -71 [ 439.832710][ T9859] veth0_vlan: entered promiscuous mode [ 439.850317][ T9859] veth1_vlan: entered promiscuous mode [ 439.912037][ T9859] veth0_macvtap: entered promiscuous mode [ 439.937613][ T9859] veth1_macvtap: entered promiscuous mode [ 439.953495][ T58] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 439.975860][ T9859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.986691][ T9859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.996894][ T9859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.007585][ T9859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.019198][ T9859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.031661][ T9859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.042541][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 440.055584][ T9859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.067883][ T9859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.078606][ T9859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.090081][ T9859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.102777][ T9859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.111775][ T58] usb 1-1: device descriptor read/64, error -71 [ 440.118870][ T9859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.127908][ T9859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.137308][ T9859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.223788][ T58] usb usb1-port1: attempt power cycle [ 440.229456][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 440.237666][ T25] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 440.250549][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.256957][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.268269][ T25] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.291652][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 440.300139][ T3647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.312230][ T3647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.321037][ T25] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 440.344245][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.352559][ T25] usb 6-1: Product: syz [ 440.377341][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.385468][ T25] usb 6-1: Manufacturer: syz [ 440.390090][ T25] usb 6-1: SerialNumber: syz [ 440.397784][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.397855][ T25] usb 6-1: config 0 descriptor?? [ 440.418611][ T5837] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 440.573575][ T58] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 440.607994][ T58] usb 1-1: device descriptor read/8, error -71 [ 441.363256][ T58] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 441.404112][ T58] usb 1-1: device descriptor read/8, error -71 [ 441.513774][ T58] usb usb1-port1: unable to enumerate USB device [ 442.387149][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.433716][ T58] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 442.878015][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 443.248521][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.268697][ T58] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 443.287439][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.290159][ T5907] usb 6-1: USB disconnect, device number 8 [ 443.297436][ T58] usb 3-1: config 0 descriptor?? [ 443.559578][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.629657][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.688016][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.777590][ T56] bridge_slave_1: left allmulticast mode [ 443.783520][ T56] bridge_slave_1: left promiscuous mode [ 443.789234][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.799322][ T56] bridge_slave_0: left allmulticast mode [ 443.805517][ T56] bridge_slave_0: left promiscuous mode [ 443.811239][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.246323][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.261326][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.276840][ T56] bond0 (unregistering): Released all slaves [ 444.497435][ T56] hsr_slave_0: left promiscuous mode [ 444.509000][ T56] hsr_slave_1: left promiscuous mode [ 444.516153][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.524210][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.532129][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.539710][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.562958][ T56] veth1_macvtap: left promiscuous mode [ 444.569246][ T56] veth0_macvtap: left promiscuous mode [ 444.575104][ T56] veth1_vlan: left promiscuous mode [ 444.580629][ T56] veth0_vlan: left promiscuous mode [ 445.229250][ T56] team0 (unregistering): Port device team_slave_1 removed [ 445.533865][T10054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.026185][ T25] usb 3-1: USB disconnect, device number 33 [ 446.183980][ T56] team0 (unregistering): Port device team_slave_0 removed [ 446.550037][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.559937][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.568812][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.577956][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.586815][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 446.594356][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.296494][T10067] netlink: 'syz.2.1083': attribute type 13 has an invalid length. [ 448.644490][ T5840] Bluetooth: hci4: command tx timeout [ 450.725383][ T5840] Bluetooth: hci4: command tx timeout [ 450.999655][T10062] chnl_net:caif_netlink_parms(): no params data found [ 451.521719][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.530421][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.538168][T10062] bridge_slave_0: entered allmulticast mode [ 451.545389][T10062] bridge_slave_0: entered promiscuous mode [ 451.555537][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.564626][ T58] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 451.576093][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.584889][T10062] bridge_slave_1: entered allmulticast mode [ 451.593432][T10062] bridge_slave_1: entered promiscuous mode [ 451.804854][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.608738][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.625356][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 452.639417][ T58] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 452.675864][ T58] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.809351][ T5840] Bluetooth: hci4: command tx timeout [ 452.870353][T10062] team0: Port device team_slave_0 added [ 453.206579][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 453.233003][T10062] team0: Port device team_slave_1 added [ 453.262428][ T58] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 453.335734][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.347965][ T58] usb 2-1: Product: syz [ 453.352254][ T58] usb 2-1: Manufacturer: syz [ 453.357864][ T58] usb 2-1: SerialNumber: syz [ 453.372499][ T58] usb 2-1: config 0 descriptor?? [ 453.405999][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.421935][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.458965][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.481297][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.491480][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.525901][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.429880][ T5840] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 454.437380][ T5840] Bluetooth: hci0: SCO packet for unknown connection handle 9 [ 454.468007][T10062] hsr_slave_0: entered promiscuous mode [ 454.504758][T10062] hsr_slave_1: entered promiscuous mode [ 454.516406][T10062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.531179][T10062] Cannot create hsr debugfs directory [ 454.716098][T10135] random: crng reseeded on system resumption [ 454.883408][ T5840] Bluetooth: hci4: command tx timeout [ 455.331564][T10143] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 456.021350][ T25] usb 2-1: USB disconnect, device number 33 [ 456.190957][T10062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.225839][T10062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.339550][T10062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.417105][T10062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.656192][ T5907] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 456.767217][T10062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.835413][ T5907] usb 6-1: config 0 has an invalid interface number: 104 but max is 0 [ 456.855117][T10062] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.866404][ T5907] usb 6-1: config 0 has no interface number 0 [ 456.883787][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.890981][ T9020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.900688][ T5907] usb 6-1: config 0 interface 104 has no altsetting 0 [ 456.925994][ T5907] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 456.947777][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.963174][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.970408][ T9020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.978243][ T5907] usb 6-1: Product: syz [ 456.982592][ T5907] usb 6-1: Manufacturer: syz [ 456.988324][ T5907] usb 6-1: SerialNumber: syz [ 457.001501][ T5907] usb 6-1: config 0 descriptor?? [ 457.018689][ T5907] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 457.216618][ T5907] gspca_vc032x: reg_r err -71 [ 457.221417][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.229455][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.246854][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.252223][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.283436][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.288808][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.302795][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.311386][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.323413][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.329092][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.344140][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.349570][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.371680][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.378930][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.393367][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.410413][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.425270][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.448592][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.457745][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.496523][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.503844][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.522985][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 457.633965][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 457.710332][ T5907] gspca_vc032x: Unknown sensor... [ 457.716237][T10062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.735865][ T5907] vc032x 6-1:0.104: probe with driver vc032x failed with error -22 [ 457.778112][ T5907] usb 6-1: USB disconnect, device number 9 [ 457.853307][ T25] usb 3-1: device descriptor read/64, error -71 [ 457.895065][T10178] FAULT_INJECTION: forcing a failure. [ 457.895065][T10178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.973257][T10178] CPU: 1 UID: 0 PID: 10178 Comm: syz.5.1110 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 457.973283][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 457.973293][T10178] Call Trace: [ 457.973299][T10178] [ 457.973306][T10178] dump_stack_lvl+0x241/0x360 [ 457.973337][T10178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.973360][T10178] ? __pfx__printk+0x10/0x10 [ 457.973383][T10178] ? __pfx_lock_release+0x10/0x10 [ 457.973412][T10178] should_fail_ex+0x40a/0x550 [ 457.973434][T10178] _copy_from_iter+0x1e9/0x1c20 [ 457.973456][T10178] ? __virt_addr_valid+0x183/0x530 [ 457.973488][T10178] ? __alloc_skb+0x28f/0x440 [ 457.973510][T10178] ? __pfx__copy_from_iter+0x10/0x10 [ 457.973532][T10178] ? __virt_addr_valid+0x183/0x530 [ 457.973553][T10178] ? __virt_addr_valid+0x183/0x530 [ 457.973572][T10178] ? __virt_addr_valid+0x45f/0x530 [ 457.973594][T10178] ? __phys_addr_symbol+0x2f/0x70 [ 457.973613][T10178] ? __check_object_size+0x47a/0x730 [ 457.973637][T10178] netlink_sendmsg+0x73d/0xcb0 [ 457.973671][T10178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.973706][T10178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.973737][T10178] __sock_sendmsg+0x221/0x270 [ 457.973760][T10178] ____sys_sendmsg+0x52a/0x7e0 [ 457.973790][T10178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.973811][T10178] ? __fget_files+0x2a/0x410 [ 457.973835][T10178] ? __fget_files+0x2a/0x410 [ 457.973863][T10178] __sys_sendmsg+0x269/0x350 [ 457.973891][T10178] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.973924][T10178] ? do_sys_openat2+0x17a/0x1d0 [ 457.973968][T10178] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 457.973988][T10178] ? do_syscall_64+0x100/0x230 [ 457.974011][T10178] ? do_syscall_64+0xb6/0x230 [ 457.974034][T10178] do_syscall_64+0xf3/0x230 [ 457.974054][T10178] ? clear_bhb_loop+0x35/0x90 [ 457.974078][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.974099][T10178] RIP: 0033:0x7fc1c198cda9 [ 457.974115][T10178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.974129][T10178] RSP: 002b:00007fc1c2812038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.974148][T10178] RAX: ffffffffffffffda RBX: 00007fc1c1ba5fa0 RCX: 00007fc1c198cda9 [ 457.974161][T10178] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 457.974171][T10178] RBP: 00007fc1c2812090 R08: 0000000000000000 R09: 0000000000000000 [ 457.974181][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.974191][T10178] R13: 0000000000000000 R14: 00007fc1c1ba5fa0 R15: 00007fff61511938 [ 457.974218][T10178] [ 458.503368][ T5840] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 458.513924][ T5840] Bluetooth: hci0: Injecting HCI hardware error event [ 458.524627][ T5837] Bluetooth: hci0: hardware error 0x00 [ 458.844210][ T58] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 459.109296][T10193] overlayfs: missing 'lowerdir' [ 459.118411][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 459.154676][ T58] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 459.172260][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.216915][ T58] usb 1-1: Product: syz [ 459.221176][ T58] usb 1-1: Manufacturer: syz [ 459.267462][ T58] usb 1-1: SerialNumber: syz [ 459.300909][ T58] usb 1-1: config 0 descriptor?? [ 459.317444][T10062] veth0_vlan: entered promiscuous mode [ 459.349370][T10062] veth1_vlan: entered promiscuous mode [ 459.761069][T10197] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 459.764227][ T58] usb 1-1: USB disconnect, device number 37 [ 459.807826][T10062] veth0_macvtap: entered promiscuous mode [ 459.926236][T10062] veth1_macvtap: entered promiscuous mode [ 460.185461][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.203631][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.219965][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.232984][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.254893][T10062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.431322][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.554190][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.707601][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.998684][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.051879][T10062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.124170][T10062] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.157170][T10062] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.193268][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 461.297579][T10062] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.306459][T10062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.503467][ T58] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 461.733395][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 461.794394][ T58] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 462.044336][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.080591][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.120111][ T58] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.134644][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 462.145789][ T58] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 462.155073][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.163093][ T58] usb 6-1: Product: syz [ 462.167466][ T58] usb 6-1: Manufacturer: syz [ 462.172096][ T58] usb 6-1: SerialNumber: syz [ 462.179747][ T58] usb 6-1: config 0 descriptor?? [ 462.196101][ T9804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.224376][ T9804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.471529][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 462.832287][T10224] string: renamed from ip6gretap0 (while UP) [ 463.209016][ T3489] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.325769][ T3489] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.383382][ T5906] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 463.463385][ T3489] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.522180][ T3489] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.533332][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 463.546405][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.557223][ T5906] usb 1-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=db.d0 [ 463.566447][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.576432][ T5906] usb 1-1: config 0 descriptor?? [ 463.639298][ T3489] bridge_slave_1: left allmulticast mode [ 463.645185][ T3489] bridge_slave_1: left promiscuous mode [ 463.650881][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.659712][ T3489] bridge_slave_0: left allmulticast mode [ 463.665752][ T3489] bridge_slave_0: left promiscuous mode [ 463.671462][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.684207][ T5906] rtsx_usb 1-1:0.0: probe with driver rtsx_usb failed with error -22 [ 463.859868][ T25] usb 1-1: USB disconnect, device number 38 [ 464.068434][ T3489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.079603][ T3489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.090200][ T3489] bond0 (unregistering): Released all slaves [ 464.300208][ T58] usb 6-1: USB disconnect, device number 10 [ 464.389479][ T3489] hsr_slave_0: left promiscuous mode [ 464.399447][ T3489] hsr_slave_1: left promiscuous mode [ 464.405756][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.416592][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.428128][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.436399][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.459009][ T3489] veth1_macvtap: left promiscuous mode [ 464.465205][ T3489] veth0_macvtap: left promiscuous mode [ 464.470811][ T3489] veth1_vlan: left promiscuous mode [ 464.476221][ T3489] veth0_vlan: left promiscuous mode [ 465.196651][ T3489] team0 (unregistering): Port device team_slave_1 removed [ 465.563283][ T3489] team0 (unregistering): Port device team_slave_0 removed [ 466.352337][T10267] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 466.361872][T10267] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 466.376426][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.387618][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.395934][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.407223][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.417407][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 466.431326][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.345071][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 467.701033][T10264] chnl_net:caif_netlink_parms(): no params data found [ 467.893071][ T5879] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 467.902403][T10264] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.915470][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.922784][T10264] bridge_slave_0: entered allmulticast mode [ 467.930267][T10264] bridge_slave_0: entered promiscuous mode [ 467.938924][T10264] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.946223][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.953675][T10264] bridge_slave_1: entered allmulticast mode [ 467.960452][T10264] bridge_slave_1: entered promiscuous mode [ 467.996975][T10264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.010519][T10264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.064615][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 468.072568][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 468.089849][T10264] team0: Port device team_slave_0 added [ 468.093049][ T5879] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 468.099685][T10264] team0: Port device team_slave_1 added [ 468.122206][ T5879] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.135493][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 468.147512][ T5879] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 468.161538][T10264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.164197][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.168720][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.183348][ T5879] usb 6-1: Product: syz [ 468.207601][ T5879] usb 6-1: Manufacturer: syz [ 468.212267][T10264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.212323][ T5879] usb 6-1: SerialNumber: syz [ 468.235609][ T5879] usb 6-1: config 0 descriptor?? [ 468.241231][T10264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.248844][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.277291][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 468.287682][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.296983][T10264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.308706][ T25] usb 2-1: config 0 descriptor?? [ 468.316099][ T25] cp210x 2-1:0.0: cp210x converter detected [ 468.369933][T10264] hsr_slave_0: entered promiscuous mode [ 468.376658][T10264] hsr_slave_1: entered promiscuous mode [ 468.382955][T10264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.401402][T10264] Cannot create hsr debugfs directory [ 468.563362][ T5837] Bluetooth: hci4: command tx timeout [ 468.722338][ T25] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 468.742913][ T25] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 468.752512][ T25] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 468.768810][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 469.055422][ T5871] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 469.071288][T10264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.081164][T10264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.093734][T10264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.103379][T10264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.170387][T10264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.187985][T10264] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.203112][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.210322][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.227520][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.234678][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.247173][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 469.256888][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.267539][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.278791][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.306901][ T5871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.310735][T10264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.317820][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.356004][ T5871] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.378805][ T5871] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.396543][ T5871] usb 1-1: Manufacturer: syz [ 469.411908][ T5871] usb 1-1: config 0 descriptor?? [ 469.535403][T10264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.804168][ T5871] rc_core: IR keymap rc-hauppauge not found [ 469.810343][ T5871] Registered IR keymap rc-empty [ 469.816514][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 469.844805][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 469.877246][ T5871] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 469.897760][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input16 [ 469.898040][T10323] overlayfs: failed to resolve './file0': -2 [ 469.976124][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.045500][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.074152][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.118236][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.159121][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.205206][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.264655][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.298106][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.339550][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.397547][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 470.422914][T10264] veth0_vlan: entered promiscuous mode [ 470.424653][ T5871] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 470.448035][T10264] veth1_vlan: entered promiscuous mode [ 470.452154][ T5871] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 470.478051][ T5871] usb 1-1: USB disconnect, device number 39 [ 470.507056][T10264] veth0_macvtap: entered promiscuous mode [ 470.546726][T10264] veth1_macvtap: entered promiscuous mode [ 470.565869][ T25] usb 6-1: USB disconnect, device number 11 [ 470.620573][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.643503][ T5837] Bluetooth: hci4: command tx timeout [ 470.659406][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.687696][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.698760][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.709989][T10264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.720674][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.731806][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.742216][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.806859][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.854274][T10264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.881052][T10264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.897261][ T5871] usb 2-1: USB disconnect, device number 34 [ 470.898337][T10264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.922929][ T5871] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 470.946111][T10264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.953565][ T5871] cp210x 2-1:0.0: device disconnected [ 470.963863][T10264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.207911][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.241747][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.296766][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 471.324496][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.355667][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.633672][ T58] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 471.794975][ T58] usb 1-1: config 0 interface 0 has no altsetting 0 [ 471.809483][ T58] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 471.821676][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.901299][ T58] usb 1-1: config 0 descriptor?? [ 471.921977][ T58] usb 1-1: selecting invalid altsetting 0 [ 471.959001][ T58] usb 1-1: can't set first interface for hiFace device. [ 471.977701][ T58] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 472.034344][T10353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.519285][ T25] usb 1-1: USB disconnect, device number 40 [ 473.272065][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1159'. [ 473.275760][T10368] FAULT_INJECTION: forcing a failure. [ 473.275760][T10368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.325073][T10368] CPU: 1 UID: 0 PID: 10368 Comm: syz.0.1160 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 473.325102][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 473.325113][T10368] Call Trace: [ 473.325119][T10368] [ 473.325128][T10368] dump_stack_lvl+0x241/0x360 [ 473.325162][T10368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.325186][T10368] ? __pfx__printk+0x10/0x10 [ 473.325211][T10368] ? __pfx_lock_release+0x10/0x10 [ 473.325240][T10368] should_fail_ex+0x40a/0x550 [ 473.325263][T10368] _copy_from_user+0x2d/0xb0 [ 473.325281][T10368] snd_pcm_oss_write+0xa33/0x11f0 [ 473.325301][T10368] ? __lock_acquire+0x1397/0x2100 [ 473.325337][T10368] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 473.325360][T10368] ? bpf_lsm_file_permission+0x9/0x10 [ 473.325380][T10368] ? rw_verify_area+0x243/0x630 [ 473.325402][T10368] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 473.325425][T10368] vfs_write+0x29f/0xd10 [ 473.325450][T10368] ? __mutex_unlock_slowpath+0x227/0x800 [ 473.325474][T10368] ? __pfx_vfs_write+0x10/0x10 [ 473.325494][T10368] ? do_sys_openat2+0x17a/0x1d0 [ 473.325518][T10368] ? __fget_files+0x2a/0x410 [ 473.325540][T10368] ? __fget_files+0x395/0x410 [ 473.325558][T10368] ? __fget_files+0x2a/0x410 [ 473.325587][T10368] ksys_write+0x18f/0x2b0 [ 473.325612][T10368] ? __pfx_ksys_write+0x10/0x10 [ 473.325636][T10368] ? do_syscall_64+0x100/0x230 [ 473.325660][T10368] ? do_syscall_64+0xb6/0x230 [ 473.325709][T10368] do_syscall_64+0xf3/0x230 [ 473.325729][T10368] ? clear_bhb_loop+0x35/0x90 [ 473.325754][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.325774][T10368] RIP: 0033:0x7f616978cda9 [ 473.325789][T10368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.325803][T10368] RSP: 002b:00007f616a6c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.325821][T10368] RAX: ffffffffffffffda RBX: 00007f61699a5fa0 RCX: 00007f616978cda9 [ 473.325833][T10368] RDX: 00000000ffffffd9 RSI: 00000000200001c0 RDI: 0000000000000005 [ 473.325844][T10368] RBP: 00007f616a6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.325854][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.325865][T10368] R13: 0000000000000000 R14: 00007f61699a5fa0 R15: 00007ffd1e77d448 [ 473.325891][T10368] [ 473.702571][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 473.807105][ T3647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.873446][ T5871] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 474.025050][ T5871] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.036993][ T5871] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 474.048542][ T5871] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 474.060074][ T5871] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 474.069391][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.080461][T10375] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 474.247047][ T3647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.332417][ T3647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.404353][ T3647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.491467][ T3647] bridge_slave_1: left allmulticast mode [ 474.497419][ T3647] bridge_slave_1: left promiscuous mode [ 474.503194][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.512385][ T3647] bridge_slave_0: left allmulticast mode [ 474.518575][ T3647] bridge_slave_0: left promiscuous mode [ 474.526620][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.930698][ T3647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.943117][ T3647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.953897][ T3647] bond0 (unregistering): Released all slaves [ 475.243092][ T3647] hsr_slave_0: left promiscuous mode [ 475.251747][ T3647] hsr_slave_1: left promiscuous mode [ 475.257711][ T3647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.265257][ T3647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.273066][ T3647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.281939][ T3647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.309665][ T3647] veth1_macvtap: left promiscuous mode [ 475.315354][ T3647] veth0_macvtap: left promiscuous mode [ 475.320946][ T3647] veth1_vlan: left promiscuous mode [ 475.326329][ T3647] veth0_vlan: left promiscuous mode [ 475.467546][ T5871] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 475.477253][ T5871] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input17 [ 477.094561][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.165186][ T3647] team0 (unregistering): Port device team_slave_1 removed [ 477.493568][ T3647] team0 (unregistering): Port device team_slave_0 removed [ 477.960330][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.987048][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.098051][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.113408][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 478.515301][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.737166][T10375] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1162'. [ 478.858790][ T58] usb 3-1: USB disconnect, device number 36 [ 478.858870][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 479.346845][T10396] chnl_net:caif_netlink_parms(): no params data found [ 480.227392][T10417] tc_dump_action: action bad kind [ 480.310531][T10396] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.351765][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.359355][T10396] bridge_slave_0: entered allmulticast mode [ 480.378296][T10396] bridge_slave_0: entered promiscuous mode [ 480.412615][T10396] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.463113][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.470728][T10396] bridge_slave_1: entered allmulticast mode [ 480.527371][T10396] bridge_slave_1: entered promiscuous mode [ 480.563450][ T5840] Bluetooth: hci4: command tx timeout [ 480.651732][T10426] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.1170'. [ 480.705885][T10413] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 480.975692][T10425] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.1170'. [ 481.002912][T10396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.056006][T10396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.162786][T10396] team0: Port device team_slave_0 added [ 481.190188][T10396] team0: Port device team_slave_1 added [ 481.284129][T10396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.291116][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.382986][T10396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.600271][T10396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.607570][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.635789][T10396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.811028][T10396] hsr_slave_0: entered promiscuous mode [ 481.824002][T10396] hsr_slave_1: entered promiscuous mode [ 481.830130][T10396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.859279][T10396] Cannot create hsr debugfs directory [ 482.704415][ T5837] Bluetooth: hci4: command tx timeout [ 483.285410][ T29] audit: type=1326 audit(1738392859.449:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10465 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 483.332041][T10470] FAULT_INJECTION: forcing a failure. [ 483.332041][T10470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 483.353513][T10470] CPU: 1 UID: 0 PID: 10470 Comm: syz.5.1185 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 483.353538][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 483.353555][T10470] Call Trace: [ 483.353561][T10470] [ 483.353567][T10470] dump_stack_lvl+0x241/0x360 [ 483.353600][T10470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.353622][T10470] ? __pfx__printk+0x10/0x10 [ 483.353653][T10470] should_fail_ex+0x40a/0x550 [ 483.353674][T10470] prepare_alloc_pages+0x1da/0x5b0 [ 483.353698][T10470] __alloc_frozen_pages_noprof+0x16f/0x710 [ 483.353719][T10470] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 483.353742][T10470] ? look_up_lock_class+0x77/0x170 [ 483.353772][T10470] alloc_pages_mpol+0x311/0x660 [ 483.353797][T10470] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 483.353817][T10470] ? __lock_acquire+0x1397/0x2100 [ 483.353840][T10470] alloc_pages_noprof+0x121/0x190 [ 483.353862][T10470] pte_alloc_one+0x24/0x160 [ 483.353883][T10470] __pte_alloc+0x79/0x220 [ 483.353903][T10470] ? __pfx___pte_alloc+0x10/0x10 [ 483.353929][T10470] remap_pfn_range_notrack+0xb58/0xe10 [ 483.353966][T10470] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 483.353995][T10470] ? track_pfn_remap+0x319/0x3f0 [ 483.354020][T10470] remap_pfn_range+0x12c/0x1b0 [ 483.354042][T10470] ? __pfx_remap_pfn_range+0x10/0x10 [ 483.354071][T10470] usbdev_mmap+0x537/0x970 [ 483.354102][T10470] ? __pfx_usbdev_mmap+0x10/0x10 [ 483.354126][T10470] ? __mas_set_range+0x133/0x3c0 [ 483.354151][T10470] mmap_region+0x245e/0x2f80 [ 483.354198][T10470] ? __pfx_mmap_region+0x10/0x10 [ 483.354280][T10470] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 483.354307][T10470] ? lock_acquire+0x264/0x550 [ 483.354331][T10470] ? cap_mmap_addr+0xaa/0xf0 [ 483.354352][T10470] ? bpf_lsm_mmap_addr+0x9/0x10 [ 483.354367][T10470] ? security_mmap_addr+0x6f/0x250 [ 483.354389][T10470] ? shmem_mapping+0xd/0x50 [ 483.354413][T10470] do_mmap+0xecc/0x13a0 [ 483.354441][T10470] ? ima_file_mmap+0x17e/0x220 [ 483.354462][T10470] ? __pfx_do_mmap+0x10/0x10 [ 483.354481][T10470] ? down_write_killable+0x19e/0x260 [ 483.354501][T10470] ? vm_mmap_pgoff+0x182/0x430 [ 483.354524][T10470] ? __pfx_down_write_killable+0x10/0x10 [ 483.354563][T10470] vm_mmap_pgoff+0x214/0x430 [ 483.354597][T10470] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 483.354621][T10470] ? __fget_files+0x2a/0x410 [ 483.354643][T10470] ? __fget_files+0x395/0x410 [ 483.354661][T10470] ? __fget_files+0x2a/0x410 [ 483.354686][T10470] ksys_mmap_pgoff+0x4eb/0x720 [ 483.354709][T10470] ? __x64_sys_mmap+0x7f/0x140 [ 483.354733][T10470] do_syscall_64+0xf3/0x230 [ 483.354752][T10470] ? clear_bhb_loop+0x35/0x90 [ 483.354775][T10470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.354793][T10470] RIP: 0033:0x7fc1c198cda9 [ 483.354808][T10470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.354821][T10470] RSP: 002b:00007fc1c2812038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 483.354840][T10470] RAX: ffffffffffffffda RBX: 00007fc1c1ba5fa0 RCX: 00007fc1c198cda9 [ 483.354852][T10470] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000 [ 483.354863][T10470] RBP: 00007fc1c2812090 R08: 0000000000000004 R09: 0000000000002000 [ 483.354872][T10470] R10: 0000000000011011 R11: 0000000000000246 R12: 0000000000000002 [ 483.354882][T10470] R13: 0000000000000000 R14: 00007fc1c1ba5fa0 R15: 00007fff61511938 [ 483.354907][T10470] [ 483.354974][T10470] ------------[ cut here ]------------ [ 483.373816][ T29] audit: type=1326 audit(1738392859.469:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10465 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 483.376361][T10470] WARNING: CPU: 1 PID: 10470 at arch/x86/mm/pat/memtype.c:983 get_pat_info+0x1eb/0x3f0 [ 483.386211][ T29] audit: type=1326 audit(1738392859.519:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10465 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 483.387626][T10470] Modules linked in: [ 483.396928][ T29] audit: type=1326 audit(1738392859.519:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10465 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 483.401484][T10470] [ 483.401496][T10470] CPU: 1 UID: 0 PID: 10470 Comm: syz.5.1185 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 483.458572][ T29] audit: type=1326 audit(1738392859.519:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10465 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 483.463943][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 483.463958][T10470] RIP: 0010:get_pat_info+0x1eb/0x3f0 [ 483.463986][T10470] Code: 00 00 00 48 89 de e8 74 f6 50 00 48 83 fb 20 75 13 48 83 7c 24 10 00 0f 84 5e 01 00 00 e8 7d f1 50 00 eb 09 e8 76 f1 50 00 90 <0f> 0b 90 b8 ea ff ff ff 48 c7 44 24 20 0e 36 e0 45 48 b9 00 00 00 [ 483.464000][T10470] RSP: 0000:ffffc90005046f00 EFLAGS: 00010293 [ 483.464019][T10470] RAX: ffffffff816e6afa RBX: 0000000000000028 RCX: ffff88802b8a9e00 [ 483.464032][T10470] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020 [ 483.464042][T10470] RBP: ffffc90005046ff0 R08: ffffffff816e6adc R09: 1ffffffff20342ee [ 483.464054][T10470] R10: dffffc0000000000 R11: fffffbfff20342ef R12: 1ffff92000a08de4 [ 483.464067][T10470] R13: 1ffff1100e116db6 R14: ffffc90005046f40 R15: ffff8880708b6d90 [ 483.464081][T10470] FS: 00007fc1c28126c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 483.464097][T10470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.464110][T10470] CR2: 0000001b2fb1eff8 CR3: 000000006ba92000 CR4: 00000000003526f0 [ 483.475463][T10396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.480565][T10470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.724373][ T29] audit: type=1326 audit(1738392859.599:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10465 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f616978cda9 code=0x7ffc0000 [ 483.733103][T10470] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.733122][T10470] Call Trace: [ 483.733189][T10470] [ 483.733200][T10470] ? __warn+0x165/0x4d0 [ 483.733225][T10470] ? get_pat_info+0x1eb/0x3f0 [ 483.733251][T10470] ? report_bug+0x2b3/0x500 [ 483.733271][T10470] ? get_pat_info+0x1eb/0x3f0 [ 483.733298][T10470] ? handle_bug+0x60/0x90 [ 483.733319][T10470] ? exc_invalid_op+0x1a/0x50 [ 483.733340][T10470] ? asm_exc_invalid_op+0x1a/0x20 [ 483.733365][T10470] ? get_pat_info+0x1cc/0x3f0 [ 483.733385][T10470] ? get_pat_info+0x1ea/0x3f0 [ 483.817428][T10396] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.826515][T10470] ? get_pat_info+0x1eb/0x3f0 [ 484.026254][T10470] ? __pfx_get_pat_info+0x10/0x10 [ 484.031307][T10470] untrack_pfn+0x327/0x640 [ 484.035821][T10470] ? __pfx_untrack_pfn+0x10/0x10 [ 484.040778][T10470] ? zap_page_range_single+0x392/0x630 [ 484.046296][T10470] ? __pfx_lock_release+0x10/0x10 [ 484.051318][T10470] ? uprobe_munmap+0x183/0x460 [ 484.056156][T10470] ? look_up_lock_class+0x77/0x170 [ 484.061291][T10470] unmap_single_vma+0x1f6/0x2b0 [ 484.066216][T10470] zap_page_range_single+0x457/0x630 [ 484.071557][T10470] ? __pfx_zap_page_range_single+0x10/0x10 [ 484.077422][T10470] ? alloc_pages_noprof+0x13d/0x190 [ 484.082672][T10470] ? __pfx___pte_alloc+0x10/0x10 [ 484.087762][T10470] remap_pfn_range_notrack+0xc8e/0xe10 [ 484.093728][T10470] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 484.099744][T10470] ? track_pfn_remap+0x319/0x3f0 [ 484.105152][T10470] remap_pfn_range+0x12c/0x1b0 [ 484.109929][T10470] ? __pfx_remap_pfn_range+0x10/0x10 [ 484.115308][T10470] usbdev_mmap+0x537/0x970 [ 484.119760][T10470] ? __pfx_usbdev_mmap+0x10/0x10 [ 484.124783][T10470] ? __mas_set_range+0x133/0x3c0 [ 484.129739][T10470] mmap_region+0x245e/0x2f80 [ 484.134412][T10470] ? __pfx_mmap_region+0x10/0x10 [ 484.139413][T10470] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 484.146072][T10470] ? lock_acquire+0x264/0x550 [ 484.150761][T10470] ? cap_mmap_addr+0xaa/0xf0 [ 484.155398][T10470] ? bpf_lsm_mmap_addr+0x9/0x10 [ 484.160273][T10470] ? security_mmap_addr+0x6f/0x250 [ 484.165458][T10470] ? shmem_mapping+0xd/0x50 [ 484.169968][T10470] do_mmap+0xecc/0x13a0 [ 484.174165][T10470] ? ima_file_mmap+0x17e/0x220 [ 484.178990][T10470] ? __pfx_do_mmap+0x10/0x10 [ 484.183652][T10470] ? down_write_killable+0x19e/0x260 [ 484.188952][T10470] ? vm_mmap_pgoff+0x182/0x430 [ 484.194164][T10470] ? __pfx_down_write_killable+0x10/0x10 [ 484.199828][T10470] vm_mmap_pgoff+0x214/0x430 [ 484.204863][T10470] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 484.209999][T10470] ? __fget_files+0x2a/0x410 [ 484.214673][T10470] ? __fget_files+0x395/0x410 [ 484.219364][T10470] ? __fget_files+0x2a/0x410 [ 484.224011][T10470] ksys_mmap_pgoff+0x4eb/0x720 [ 484.228783][T10470] ? __x64_sys_mmap+0x7f/0x140 [ 484.233633][T10470] do_syscall_64+0xf3/0x230 [ 484.238144][T10470] ? clear_bhb_loop+0x35/0x90 [ 484.242846][T10470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.248819][T10470] RIP: 0033:0x7fc1c198cda9 [ 484.253278][T10470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.272952][T10470] RSP: 002b:00007fc1c2812038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 484.281418][T10470] RAX: ffffffffffffffda RBX: 00007fc1c1ba5fa0 RCX: 00007fc1c198cda9 [ 484.289445][T10470] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000 [ 484.297891][T10470] RBP: 00007fc1c2812090 R08: 0000000000000004 R09: 0000000000002000 [ 484.306238][T10470] R10: 0000000000011011 R11: 0000000000000246 R12: 0000000000000002 [ 484.314252][T10470] R13: 0000000000000000 R14: 00007fc1c1ba5fa0 R15: 00007fff61511938 [ 484.322237][T10470] [ 484.325589][T10470] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 484.332859][T10470] CPU: 1 UID: 0 PID: 10470 Comm: syz.5.1185 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 484.343283][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 484.353361][T10470] Call Trace: [ 484.356660][T10470] [ 484.359604][T10470] dump_stack_lvl+0x241/0x360 [ 484.364290][T10470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.369512][T10470] ? __pfx__printk+0x10/0x10 [ 484.374109][T10470] ? _printk+0xd5/0x120 [ 484.378281][T10470] ? __init_begin+0x41000/0x41000 [ 484.383428][T10470] ? vscnprintf+0x5d/0x90 [ 484.387825][T10470] panic+0x349/0x880 [ 484.391736][T10470] ? __warn+0x174/0x4d0 [ 484.395915][T10470] ? __pfx_panic+0x10/0x10 [ 484.400364][T10470] __warn+0x344/0x4d0 [ 484.404350][T10470] ? get_pat_info+0x1eb/0x3f0 [ 484.409061][T10470] report_bug+0x2b3/0x500 [ 484.413408][T10470] ? get_pat_info+0x1eb/0x3f0 [ 484.418097][T10470] handle_bug+0x60/0x90 [ 484.422254][T10470] exc_invalid_op+0x1a/0x50 [ 484.426774][T10470] asm_exc_invalid_op+0x1a/0x20 [ 484.431619][T10470] RIP: 0010:get_pat_info+0x1eb/0x3f0 [ 484.436912][T10470] Code: 00 00 00 48 89 de e8 74 f6 50 00 48 83 fb 20 75 13 48 83 7c 24 10 00 0f 84 5e 01 00 00 e8 7d f1 50 00 eb 09 e8 76 f1 50 00 90 <0f> 0b 90 b8 ea ff ff ff 48 c7 44 24 20 0e 36 e0 45 48 b9 00 00 00 [ 484.456528][T10470] RSP: 0000:ffffc90005046f00 EFLAGS: 00010293 [ 484.462590][T10470] RAX: ffffffff816e6afa RBX: 0000000000000028 RCX: ffff88802b8a9e00 [ 484.470557][T10470] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020 [ 484.478541][T10470] RBP: ffffc90005046ff0 R08: ffffffff816e6adc R09: 1ffffffff20342ee [ 484.486514][T10470] R10: dffffc0000000000 R11: fffffbfff20342ef R12: 1ffff92000a08de4 [ 484.494486][T10470] R13: 1ffff1100e116db6 R14: ffffc90005046f40 R15: ffff8880708b6d90 [ 484.502483][T10470] ? get_pat_info+0x1cc/0x3f0 [ 484.507181][T10470] ? get_pat_info+0x1ea/0x3f0 [ 484.511885][T10470] ? __pfx_get_pat_info+0x10/0x10 [ 484.516933][T10470] untrack_pfn+0x327/0x640 [ 484.521377][T10470] ? __pfx_untrack_pfn+0x10/0x10 [ 484.526323][T10470] ? zap_page_range_single+0x392/0x630 [ 484.531790][T10470] ? __pfx_lock_release+0x10/0x10 [ 484.536822][T10470] ? uprobe_munmap+0x183/0x460 [ 484.541579][T10470] ? look_up_lock_class+0x77/0x170 [ 484.546705][T10470] unmap_single_vma+0x1f6/0x2b0 [ 484.551566][T10470] zap_page_range_single+0x457/0x630 [ 484.556865][T10470] ? __pfx_zap_page_range_single+0x10/0x10 [ 484.562684][T10470] ? alloc_pages_noprof+0x13d/0x190 [ 484.567903][T10470] ? __pfx___pte_alloc+0x10/0x10 [ 484.572874][T10470] remap_pfn_range_notrack+0xc8e/0xe10 [ 484.578353][T10470] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 484.584338][T10470] ? track_pfn_remap+0x319/0x3f0 [ 484.589302][T10470] remap_pfn_range+0x12c/0x1b0 [ 484.594077][T10470] ? __pfx_remap_pfn_range+0x10/0x10 [ 484.599381][T10470] usbdev_mmap+0x537/0x970 [ 484.603835][T10470] ? __pfx_usbdev_mmap+0x10/0x10 [ 484.608802][T10470] ? __mas_set_range+0x133/0x3c0 [ 484.613768][T10470] mmap_region+0x245e/0x2f80 [ 484.618382][T10470] ? __pfx_mmap_region+0x10/0x10 [ 484.623386][T10470] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 484.629991][T10470] ? lock_acquire+0x264/0x550 [ 484.634721][T10470] ? cap_mmap_addr+0xaa/0xf0 [ 484.639329][T10470] ? bpf_lsm_mmap_addr+0x9/0x10 [ 484.644185][T10470] ? security_mmap_addr+0x6f/0x250 [ 484.649300][T10470] ? shmem_mapping+0xd/0x50 [ 484.653986][T10470] do_mmap+0xecc/0x13a0 [ 484.658161][T10470] ? ima_file_mmap+0x17e/0x220 [ 484.662927][T10470] ? __pfx_do_mmap+0x10/0x10 [ 484.667513][T10470] ? down_write_killable+0x19e/0x260 [ 484.672807][T10470] ? vm_mmap_pgoff+0x182/0x430 [ 484.677588][T10470] ? __pfx_down_write_killable+0x10/0x10 [ 484.683243][T10470] vm_mmap_pgoff+0x214/0x430 [ 484.687865][T10470] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 484.692982][T10470] ? __fget_files+0x2a/0x410 [ 484.697588][T10470] ? __fget_files+0x395/0x410 [ 484.702277][T10470] ? __fget_files+0x2a/0x410 [ 484.706907][T10470] ksys_mmap_pgoff+0x4eb/0x720 [ 484.711688][T10470] ? __x64_sys_mmap+0x7f/0x140 [ 484.716466][T10470] do_syscall_64+0xf3/0x230 [ 484.720981][T10470] ? clear_bhb_loop+0x35/0x90 [ 484.725676][T10470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.731565][T10470] RIP: 0033:0x7fc1c198cda9 [ 484.735977][T10470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.755602][T10470] RSP: 002b:00007fc1c2812038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 484.764020][T10470] RAX: ffffffffffffffda RBX: 00007fc1c1ba5fa0 RCX: 00007fc1c198cda9 [ 484.772000][T10470] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000 [ 484.779985][T10470] RBP: 00007fc1c2812090 R08: 0000000000000004 R09: 0000000000002000 [ 484.787965][T10470] R10: 0000000000011011 R11: 0000000000000246 R12: 0000000000000002 [ 484.795936][T10470] R13: 0000000000000000 R14: 00007fc1c1ba5fa0 R15: 00007fff61511938 [ 484.803916][T10470] [ 484.807103][T10470] Kernel Offset: disabled [ 484.811595][T10470] Rebooting in 86400 seconds..