last executing test programs: 11.97201145s ago: executing program 0 (id=239): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 11.871215867s ago: executing program 2 (id=241): getgroups(0x1, &(0x7f0000004c40)=[0xffffffffffffffff]) 11.815929102s ago: executing program 1 (id=242): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfeff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 11.395915274s ago: executing program 2 (id=245): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x200000, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 9.762168491s ago: executing program 4 (id=247): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) 9.628070452s ago: executing program 1 (id=248): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x10000, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0xd4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, 0x0}}], 0x2, 0x0) 9.627824851s ago: executing program 0 (id=249): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvfrom$inet(r0, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) 8.838018106s ago: executing program 3 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x1100) recvmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000480), 0x6e, &(0x7f0000000380), 0x0, &(0x7f00000007c0)}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x55a4, &(0x7f0000000140), &(0x7f0000000600), &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = accept4$alg(r1, 0x0, 0x0, 0x800) sendmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000002180)}}, {{&(0x7f0000000580)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f00000008c0)="7da9623a35fe457df7cb9ef7c99e070ae7a1c1bdef5812c1d6d81f314a26d42574148934d5b46bc0559956c705cc6ee210d6a963f53fb79acbe5dcd546b15349053a70f995dc1907d56231201652fed23cdc10b94fa03675d488346df7672227056f6e906e88742d523a6bb65295845f7d55f933b2dcac4430b05287ab1c33fcec647dc7d920effcbe618c050588599d60c8528f7a680f127bd1c1705777f713ef7f639ac5b1aead5369aa67c96d09ee29873da9b6516e747e93be18a9b3e43961586a31d465b2537f171bd55a8f38e577def9b2c0f19014f49061a1e563031ee2a0d477083ed520e20a74b0e546be48cf7ed573a9f6b91ae846", 0xfa}, {&(0x7f00000009c0)="33c4b792878c56bef4b37c00a5e4d663f928c90f3db958918dcba1ce45926b7e755014d2da1ea3be3e3646784024b09146e01367e6cc17122c51c086b54e851807a31a7a35af2ccf262a49ce64b2251947de31a120b20d809e5eab25dce7914e55fce83225e5eefad193eaa928dbac24baaaa4", 0x73}, {&(0x7f0000000740)="d59ac842fdd1bad93cdd79a559b87152c955d7ca658d578dab4410da78b0a94ccd189082314127ef297863671c2a3ba74557541086598417fd7cbe7dd398e9faa4ea36a24f2301400f37273f974c319bd2dc2d2ac99aac711c2c08677c993610c781c27f31ac04011e02dd60ccc2efd5dc15b15d9cf7", 0x76}], 0x3}}], 0x2, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000005500)={0x2020}, 0x2020) 8.697874241s ago: executing program 4 (id=251): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 8.603907182s ago: executing program 2 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x1c15, &(0x7f0000000240)={0x0, 0xfffffffd, 0x1}, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0xc, 0x110, 0xfffffffe}], 0xc}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) pread64(r4, &(0x7f00000002c0)=""/118, 0x53, 0x7) syz_emit_ethernet(0x4a, 0x0, 0x0) 8.59214915s ago: executing program 1 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0xf, 0x0, &(0x7f0000001280)) 7.475978308s ago: executing program 4 (id=254): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x21, r0, 0x202, &(0x7f0000000000)={0x0}) 6.643890007s ago: executing program 1 (id=255): openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x200040c4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) syz_emit_ethernet(0x37, &(0x7f00000000c0)=ANY=[], 0x0) socket(0x28, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r6}, 0x20) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) 6.643543889s ago: executing program 2 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200802, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) mmap$xdp(&(0x7f000068d000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) 6.59637987s ago: executing program 3 (id=257): syz_emit_vhci(0x0, 0xc) 6.494593122s ago: executing program 3 (id=258): io_uring_setup(0x1baa, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x42000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) 5.651858169s ago: executing program 4 (id=259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x5, 0x4}, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r3, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$usbfs(0x0, 0x6, 0x400000) socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000300)={0x0, 0xfffffff3}) socket$nl_route(0x10, 0x3, 0x0) 4.864240828s ago: executing program 2 (id=260): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x62, 0x5, 0x4d8, 0xa8, 0x150, 0xffffffff, 0x490, 0x398, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'rose0\x00', 'virt_wifi0\x00', {}, {}, 0xf1bca4f3d3c1eb74}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id=0x65, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0x0, 0x1c0, 0x1f8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_to_batadv\x00', {0x1, 0x3, 0x46, 0x71e, 0x6f, 0xfffffffc, 0x4, 0x20, 0x8}, {0x9}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "febc"}}, @common=@inet=@socket2={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @port=0x4e21, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4.846031039s ago: executing program 0 (id=261): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 4.656863882s ago: executing program 3 (id=262): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000004) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x128, 0x8, 0x7f02ae, 0x0, 0x200, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x10000, 0x8, 0x126d6, 0x8b12, 0x6, 0x4, 0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x7}, {0x0, 0x85, 0x4}, 0xe, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.540053919s ago: executing program 4 (id=263): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x1c005, &(0x7f00000001c0)={0xa, 0x2, 0x1012, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) shutdown(0xffffffffffffffff, 0x1) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 4.43203577s ago: executing program 0 (id=264): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) close_range(r0, r1, 0x0) 3.499576946s ago: executing program 0 (id=265): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket(0x2b, 0x1, 0x0) getsockname(r6, 0x0, &(0x7f0000000140)) 3.440441355s ago: executing program 3 (id=266): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvfrom$inet(r0, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) 448.030279ms ago: executing program 1 (id=267): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, 0x0) 297.311394ms ago: executing program 0 (id=268): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) 273.440723ms ago: executing program 1 (id=269): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfd61) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004'], 0x2a, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000200), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) mount(0x0, 0x0, &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') socket$inet(0xa, 0x801, 0x84) 80.739905ms ago: executing program 4 (id=270): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0408e8b7f22b7ff3d2f0b02164515ca73d7810f3a1c497e2c4d00896"], 0x7) 51.632247ms ago: executing program 2 (id=271): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) 0s ago: executing program 3 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0xfffffffffffffffc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [], 0xa, '\\\\'}, 0xd) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 56.693134][ T5805] cgroup: Unknown subsys name 'net' [ 56.825064][ T5805] cgroup: Unknown subsys name 'cpuset' [ 56.832550][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.092836][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.317298][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.325645][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.334644][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.342940][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.350801][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.358483][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.366355][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.373549][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.374855][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.388374][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.393320][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.403086][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.411414][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.411977][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.426336][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.432958][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.434159][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.440881][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.448536][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.454615][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.470207][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.470516][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.478837][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.486879][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.491717][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.498894][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.506356][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.520126][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.525759][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.528265][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.858912][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 61.019239][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 61.041180][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 61.086343][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.093565][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.100827][ T5815] bridge_slave_0: entered allmulticast mode [ 61.108447][ T5815] bridge_slave_0: entered promiscuous mode [ 61.119221][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 61.139940][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.147267][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.154542][ T5815] bridge_slave_1: entered allmulticast mode [ 61.161421][ T5815] bridge_slave_1: entered promiscuous mode [ 61.229630][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.241984][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.258159][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 61.307346][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.314587][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.321684][ T5819] bridge_slave_0: entered allmulticast mode [ 61.328490][ T5819] bridge_slave_0: entered promiscuous mode [ 61.349241][ T5815] team0: Port device team_slave_0 added [ 61.360974][ T5815] team0: Port device team_slave_1 added [ 61.379079][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.386241][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.393469][ T5819] bridge_slave_1: entered allmulticast mode [ 61.399944][ T5819] bridge_slave_1: entered promiscuous mode [ 61.459633][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.467040][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.474463][ T5822] bridge_slave_0: entered allmulticast mode [ 61.481322][ T5822] bridge_slave_0: entered promiscuous mode [ 61.495982][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.503373][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.510472][ T5817] bridge_slave_0: entered allmulticast mode [ 61.517268][ T5817] bridge_slave_0: entered promiscuous mode [ 61.525033][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.532128][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.539604][ T5817] bridge_slave_1: entered allmulticast mode [ 61.546589][ T5817] bridge_slave_1: entered promiscuous mode [ 61.557102][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.564130][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.590168][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.602379][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.609465][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.616808][ T5822] bridge_slave_1: entered allmulticast mode [ 61.623836][ T5822] bridge_slave_1: entered promiscuous mode [ 61.631800][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.653255][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.660200][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.686277][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.706334][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.761988][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.775188][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.792483][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.805241][ T5819] team0: Port device team_slave_0 added [ 61.814167][ T5819] team0: Port device team_slave_1 added [ 61.828039][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.835324][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.843039][ T5816] bridge_slave_0: entered allmulticast mode [ 61.849538][ T5816] bridge_slave_0: entered promiscuous mode [ 61.857908][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.896879][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.904306][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.911462][ T5816] bridge_slave_1: entered allmulticast mode [ 61.918149][ T5816] bridge_slave_1: entered promiscuous mode [ 61.957520][ T5817] team0: Port device team_slave_0 added [ 61.982054][ T5815] hsr_slave_0: entered promiscuous mode [ 61.988186][ T5815] hsr_slave_1: entered promiscuous mode [ 62.005061][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.012031][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.039155][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.051553][ T5817] team0: Port device team_slave_1 added [ 62.066456][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.078305][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.089493][ T5822] team0: Port device team_slave_0 added [ 62.097488][ T5822] team0: Port device team_slave_1 added [ 62.107431][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.114737][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.140676][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.194692][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.201759][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.227706][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.256250][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.263560][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.289756][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.301843][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.309519][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.336005][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.347960][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.354986][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.380886][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.394244][ T5816] team0: Port device team_slave_0 added [ 62.439324][ T5816] team0: Port device team_slave_1 added [ 62.451654][ T5819] hsr_slave_0: entered promiscuous mode [ 62.458013][ T5819] hsr_slave_1: entered promiscuous mode [ 62.464465][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.472224][ T5819] Cannot create hsr debugfs directory [ 62.489109][ T5822] hsr_slave_0: entered promiscuous mode [ 62.495627][ T5822] hsr_slave_1: entered promiscuous mode [ 62.501613][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.509264][ T5822] Cannot create hsr debugfs directory [ 62.545531][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.552736][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.578931][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.585756][ T54] Bluetooth: hci3: command tx timeout [ 62.589719][ T5832] Bluetooth: hci4: command tx timeout [ 62.595283][ T5132] Bluetooth: hci2: command tx timeout [ 62.600671][ T5832] Bluetooth: hci0: command tx timeout [ 62.605967][ T5831] Bluetooth: hci1: command tx timeout [ 62.613256][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.623742][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.650817][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.710959][ T5817] hsr_slave_0: entered promiscuous mode [ 62.717058][ T5817] hsr_slave_1: entered promiscuous mode [ 62.724119][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.731681][ T5817] Cannot create hsr debugfs directory [ 62.845876][ T5816] hsr_slave_0: entered promiscuous mode [ 62.851865][ T5816] hsr_slave_1: entered promiscuous mode [ 62.858448][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.866188][ T5816] Cannot create hsr debugfs directory [ 62.979252][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.008677][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.020078][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.053791][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.130784][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.139774][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.161767][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.173736][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.236542][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.265569][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.275015][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.285707][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.339517][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.357902][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.383806][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.396142][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.406413][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.444109][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.462902][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.484131][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.497707][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.510373][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.543848][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.551254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.560532][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.567624][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.602105][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.683614][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.699823][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.748055][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.755242][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.779343][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.786480][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.813533][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.833673][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.859167][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.866295][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.879499][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.886647][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.923472][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.953712][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.960818][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.985489][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.992612][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.020887][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.050879][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.101720][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.108890][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.122011][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.129156][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.167036][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.381234][ T5815] veth0_vlan: entered promiscuous mode [ 64.410914][ T5815] veth1_vlan: entered promiscuous mode [ 64.437538][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.466732][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.561396][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.585018][ T5822] veth0_vlan: entered promiscuous mode [ 64.599597][ T5815] veth0_macvtap: entered promiscuous mode [ 64.623320][ T5822] veth1_vlan: entered promiscuous mode [ 64.642124][ T5819] veth0_vlan: entered promiscuous mode [ 64.657108][ T5815] veth1_macvtap: entered promiscuous mode [ 64.663481][ T5831] Bluetooth: hci1: command tx timeout [ 64.668909][ T5831] Bluetooth: hci2: command tx timeout [ 64.675672][ T5132] Bluetooth: hci0: command tx timeout [ 64.681119][ T5829] Bluetooth: hci4: command tx timeout [ 64.686769][ T54] Bluetooth: hci3: command tx timeout [ 64.689971][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.714441][ T5819] veth1_vlan: entered promiscuous mode [ 64.747966][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.787402][ T5822] veth0_macvtap: entered promiscuous mode [ 64.806500][ T5819] veth0_macvtap: entered promiscuous mode [ 64.814999][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.826534][ T5822] veth1_macvtap: entered promiscuous mode [ 64.837398][ T5819] veth1_macvtap: entered promiscuous mode [ 64.852128][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.861283][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.870232][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.879316][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.910758][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.922067][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.936383][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.960854][ T5816] veth0_vlan: entered promiscuous mode [ 64.969734][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.980450][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.991932][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.024989][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.034134][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.043664][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.052574][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.064756][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.075394][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.085724][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.096445][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.107588][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.118020][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.128575][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.139863][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.159174][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.170124][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.204134][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.215806][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.226514][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.235435][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.248729][ T5816] veth1_vlan: entered promiscuous mode [ 65.290313][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.307028][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.376591][ T5816] veth0_macvtap: entered promiscuous mode [ 65.391234][ T5817] veth0_vlan: entered promiscuous mode [ 65.399651][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.404656][ T5817] veth1_vlan: entered promiscuous mode [ 65.415018][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.426317][ T5816] veth1_macvtap: entered promiscuous mode [ 65.470391][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.487018][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.513231][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.527103][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.537227][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.548448][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.561947][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.563719][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.580373][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.599189][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.625142][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.636106][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.647573][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.663857][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.677676][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.703122][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.721736][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.745111][ T5817] veth0_macvtap: entered promiscuous mode [ 65.759680][ T5817] veth1_macvtap: entered promiscuous mode [ 65.777149][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.807652][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.826565][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.840652][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.853556][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.869961][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.881495][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.896806][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.913615][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.953288][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.961224][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.981105][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.989905][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.002253][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.011152][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.141634][ T5906] netlink: 'syz.0.1': attribute type 8 has an invalid length. [ 66.149512][ T5906] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.212096][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.349304][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.439659][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.498345][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.708654][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.720120][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.732106][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.742494][ T5132] Bluetooth: hci0: command tx timeout [ 66.742665][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.747901][ T5132] Bluetooth: hci4: command tx timeout [ 66.757677][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.757693][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.760375][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.763334][ T54] Bluetooth: hci3: command tx timeout [ 66.773835][ T5829] Bluetooth: hci1: command tx timeout [ 66.802573][ T5831] Bluetooth: hci2: command tx timeout [ 66.834455][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.848819][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.858068][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.872233][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.018042][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.042386][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.081681][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.111231][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.125373][ T5911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 67.132038][ T5911] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 67.156910][ T5911] vhci_hcd vhci_hcd.0: Device attached [ 67.168530][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.183881][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.194573][ T5914] vhci_hcd: connection closed [ 67.195927][ T199] vhci_hcd: stop threads [ 67.229376][ T199] vhci_hcd: release socket [ 67.251181][ T199] vhci_hcd: disconnect device [ 67.258449][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.284860][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.290387][ T5919] Zero length message leads to an empty skb [ 67.342463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.861162][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.919977][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.963553][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.051539][ T95] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.064961][ T95] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.101630][ T95] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.135245][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.071252][ T5829] Bluetooth: hci3: command tx timeout [ 69.071568][ T5831] Bluetooth: hci4: command tx timeout [ 69.076802][ T5832] Bluetooth: hci0: command tx timeout [ 69.084257][ T5831] Bluetooth: hci1: command tx timeout [ 69.088195][ T5832] Bluetooth: hci2: command tx timeout [ 69.126415][ T5917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.372216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 69.386747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.491268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.499976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.651605][ T95] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.744105][ T5936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.782514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.301601][ T5939] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 70.308155][ T5939] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.318078][ T5939] vhci_hcd vhci_hcd.0: Device attached [ 70.417122][ T5826] usb 1-1: USB disconnect, device number 2 [ 70.432616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.506444][ T5947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 70.615097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.615432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.623725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.683459][ T9] vhci_hcd: vhci_device speed not set [ 70.992529][ T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 71.292420][ T5871] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.613392][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.668105][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.277850][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 72.310157][ T5871] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 72.350729][ T5871] usb 2-1: config 0 has no interface number 0 [ 72.376015][ T5871] usb 2-1: config 0 interface 184 has no altsetting 0 [ 72.525910][ T5871] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 72.538570][ T5941] vhci_hcd: connection reset by peer [ 73.236792][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.244899][ T5871] usb 2-1: Product: syz [ 73.249073][ T5871] usb 2-1: Manufacturer: syz [ 73.253727][ T5871] usb 2-1: SerialNumber: syz [ 73.283849][ T5871] usb 2-1: config 0 descriptor?? [ 73.354244][ T5871] smsc75xx v1.0.0 [ 73.378411][ T66] vhci_hcd: stop threads [ 73.392253][ T66] vhci_hcd: release socket [ 73.422685][ T66] vhci_hcd: disconnect device [ 74.719975][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 74.731041][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 74.749265][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 74.760093][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 74.779474][ T5980] netlink: 'syz.2.18': attribute type 8 has an invalid length. [ 74.787101][ T5980] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.18'. [ 75.734133][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 75.748533][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 75.758607][ T5871] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 75.770801][ T5871] usb 2-1: USB disconnect, device number 2 [ 76.102685][ T9] vhci_hcd: vhci_device speed not set [ 77.376489][ T5989] can0: slcan on ptm0. [ 77.617738][ T5997] netlink: 'syz.4.21': attribute type 8 has an invalid length. [ 77.625420][ T5997] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.21'. [ 78.483226][ T6005] 9pnet_fd: Insufficient options for proto=fd [ 78.822419][ T5987] can0 (unregistered): slcan off ptm0. [ 79.074699][ T5871] hid (null): report_id 64697 is invalid [ 79.224238][ T5871] hid-generic 0005:00D6:0040.0001: unknown main item tag 0x6 [ 79.363970][ T5871] hid-generic 0005:00D6:0040.0001: report_id 64697 is invalid [ 79.654271][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.666947][ T5871] hid-generic 0005:00D6:0040.0001: item 0 2 1 8 parsing failed [ 79.822850][ T5871] hid-generic 0005:00D6:0040.0001: probe with driver hid-generic failed with error -22 [ 79.849190][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.907156][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.957771][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.990510][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.040479][ T6011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.071447][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.786583][ T978] cfg80211: failed to load regulatory.db [ 81.932283][ T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.196271][ T52] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.503202][ T52] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.551975][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.559749][ T52] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.563379][ T5874] usb 2-1: USB disconnect, device number 3 [ 82.609467][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.661000][ T6047] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 82.742931][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 82.765385][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.802045][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.832383][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.855110][ T52] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.879148][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.937563][ T9] usb 4-1: Product: syz [ 82.979566][ T9] usb 4-1: Manufacturer: syz [ 83.442240][ T9] usb 4-1: SerialNumber: syz [ 83.772308][ T978] usb 5-1: USB disconnect, device number 2 [ 83.787362][ T9] usb 4-1: 0:2 : does not exist [ 83.797725][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 84.582527][ T9] usb 4-1: USB disconnect, device number 2 [ 85.799444][ T6084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.287982][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 86.886557][ T6088] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 86.893117][ T6088] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.912424][ T6088] vhci_hcd vhci_hcd.0: Device attached [ 87.039668][ T6090] vhci_hcd: connection closed [ 87.041111][ T66] vhci_hcd: stop threads [ 87.064870][ T66] vhci_hcd: release socket [ 87.080627][ T66] vhci_hcd: disconnect device [ 87.103188][ T978] vhci_hcd: vhci_device speed not set [ 87.300379][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'. [ 87.312300][ T6097] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 91.392302][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.103731][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.122246][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.142582][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.158496][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.241515][ T6142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.709175][ T6126] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.735520][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.114994][ T6163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.326655][ T5871] usb 3-1: USB disconnect, device number 2 [ 97.515106][ T6173] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 102.161330][ T6218] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.464202][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.197063][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 103.734458][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.973729][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.321868][ T5874] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.331009][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.339143][ T5874] usb 3-1: Product: syz [ 104.360677][ T5874] usb 3-1: Manufacturer: syz [ 104.365845][ T5874] usb 3-1: SerialNumber: syz [ 104.823750][ T5874] usb 3-1: 0:2 : does not exist [ 104.875241][ T5874] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 105.856110][ T5874] usb 3-1: USB disconnect, device number 3 [ 106.586336][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.675639][ T6255] 9pnet_fd: Insufficient options for proto=fd [ 107.342271][ T5871] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.518265][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.600639][ T5871] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.638952][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.642334][ T978] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.688647][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.275701][ T978] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.379378][ T978] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.513231][ T6257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.533592][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.712082][ T978] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.740886][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.834783][ T6263] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.037190][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.484384][ T52] usb 5-1: USB disconnect, device number 3 [ 111.678542][ T5871] usb 3-1: USB disconnect, device number 4 [ 112.902289][ T29] audit: type=1326 audit(1738097108.548:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588798cda9 code=0x7ffc0000 [ 113.036599][ T29] audit: type=1326 audit(1738097108.548:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588798cda9 code=0x7ffc0000 [ 113.291745][ T6299] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 113.298293][ T6299] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.306775][ T6299] vhci_hcd vhci_hcd.0: Device attached [ 113.922383][ T5874] vhci_hcd: vhci_device speed not set [ 114.151245][ T5874] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 115.463960][ T6301] vhci_hcd: connection reset by peer [ 115.471891][ T1035] vhci_hcd: stop threads [ 115.489661][ T1035] vhci_hcd: release socket [ 115.510965][ T1035] vhci_hcd: disconnect device [ 115.543428][ T6318] 9pnet_fd: Insufficient options for proto=fd [ 115.775417][ T6324] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 115.781982][ T6324] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.791741][ T6324] vhci_hcd vhci_hcd.0: Device attached [ 117.732487][ T978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.959393][ T978] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.992365][ T978] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.133047][ T978] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.142137][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.180777][ T6343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.191620][ T6325] vhci_hcd: connection closed [ 119.192039][ T66] vhci_hcd: stop threads [ 119.226823][ T66] vhci_hcd: release socket [ 119.250860][ T66] vhci_hcd: disconnect device [ 119.263706][ T978] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.313263][ T5874] vhci_hcd: vhci_device speed not set [ 119.447359][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.114'. [ 119.463494][ T6360] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 119.632319][ T5931] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.977170][ T6365] tty tty29: ldisc open failed (-12), clearing slot 28 [ 121.239942][ T5931] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.292635][ T6359] Cannot find map_set index 0 as target [ 121.308562][ T5931] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.331539][ T6369] 9pnet_fd: Insufficient options for proto=fd [ 121.341153][ T5931] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.382887][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.458903][ T6358] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 121.474983][ T978] usb 2-1: USB disconnect, device number 4 [ 121.999685][ T5931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.199066][ T5931] usb 3-1: USB disconnect, device number 5 [ 124.211588][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.127'. [ 124.226937][ T6398] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 124.428239][ T6398] Cannot find map_set index 0 as target [ 129.750719][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.087008][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 130.289679][ T5871] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.300214][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.316686][ T5871] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.337431][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.346265][ T5871] usb 2-1: Product: syz [ 130.351927][ T5871] usb 2-1: Manufacturer: syz [ 130.357323][ T5871] usb 2-1: SerialNumber: syz [ 130.607914][ T5871] usb 2-1: 0:2 : does not exist [ 130.630113][ T5871] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 130.697521][ T5871] usb 2-1: USB disconnect, device number 5 [ 130.997954][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.893319][ T5931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.894118][ T5931] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.966279][ T5931] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.987162][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.994129][ T5931] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.994279][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.010352][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.099560][ T6444] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.126451][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.169394][ T29] audit: type=1326 audit(1738097129.818:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 134.491076][ T29] audit: type=1326 audit(1738097129.828:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 135.141395][ T29] audit: type=1326 audit(1738097129.828:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 135.174030][ T29] audit: type=1326 audit(1738097129.828:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 135.196059][ T29] audit: type=1326 audit(1738097129.828:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 135.217411][ T29] audit: type=1326 audit(1738097129.828:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 135.249485][ T29] audit: type=1326 audit(1738097129.828:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 135.279815][ T29] audit: type=1326 audit(1738097129.828:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 135.330091][ T29] audit: type=1326 audit(1738097129.828:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f5500f8cda9 code=0x7ffc0000 [ 135.376704][ T29] audit: type=1326 audit(1738097129.828:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6454 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 135.480536][ T6464] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.529996][ T6464] smc: net device bond0 erased user defined pnetid SYZ0 [ 135.686126][ T52] usb 1-1: USB disconnect, device number 3 [ 138.561507][ T6489] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 140.011937][ T6513] usb usb8: usbfs: process 6513 (syz.1.161) did not claim interface 0 before use [ 143.943052][ T978] IPVS: starting estimator thread 0... [ 144.032321][ T6533] 9pnet: Could not find request transport: f [ 144.052323][ T6543] IPVS: using max 24 ests per chain, 57600 per kthread [ 144.589117][ T6545] kvm: kvm [6544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1f60000ffc8 [ 144.666144][ T6545] kvm: kvm [6544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4e00007ffe [ 144.739829][ T6545] kvm: kvm [6544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x480000fffb [ 144.792053][ T6545] kvm: kvm [6544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x25f0000dffb [ 144.897190][ T6557] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.499621][ T5874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.555064][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 145.572701][ T6545] kvm: kvm [6544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfe0000ffbd [ 145.636831][ T6545] kvm: kvm [6544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf80000ffbe [ 145.655538][ T6545] kvm: kvm [6544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2cf0000ffff [ 145.664993][ T6545] kvm: kvm [6544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x460000eedf [ 145.728626][ T6560] netdevsim netdevsim2: Direct firmware load for . [ 145.728626][ T6560] failed with error -2 [ 145.742914][ T6560] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 145.742914][ T6560] [ 149.937469][ T5931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 150.276719][ T5931] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.315614][ T5931] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 150.376488][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.392308][ T978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.432133][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 150.548868][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 150.561842][ T5931] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.581667][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.620097][ T5931] usb 3-1: Product: syz [ 150.641050][ T5931] usb 3-1: Manufacturer: syz [ 150.772410][ T6608] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.343791][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.441184][ T5931] cdc_wdm 3-1:1.0: skipping garbage [ 151.510362][ T978] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.520554][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.543264][ T978] usb 2-1: config 0 descriptor?? [ 151.551519][ T5931] cdc_wdm 3-1:1.0: skipping garbage [ 151.592504][ T5931] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 151.692774][ T6613] ======================================================= [ 151.692774][ T6613] WARNING: The mand mount option has been deprecated and [ 151.692774][ T6613] and is ignored by this kernel. Remove the mand [ 151.692774][ T6613] option from the mount to silence this warning. [ 151.692774][ T6613] ======================================================= [ 151.732611][ T6613] overlayfs: failed to clone upperpath [ 152.194765][ T5931] cdc_wdm 3-1:1.0: Unknown control protocol [ 152.202803][ T5931] usb 3-1: USB disconnect, device number 6 [ 152.446285][ T978] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 152.501721][ T978] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input5 [ 152.698022][ T978] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 152.806263][ T978] usb 2-1: USB disconnect, device number 6 [ 153.142298][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.325597][ T5874] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.361407][ T5874] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.399813][ T5874] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.444238][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.496251][ T6625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.742428][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.754471][ T5931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.468367][ T5874] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.575980][ T5874] usb 1-1: USB disconnect, device number 4 [ 155.592266][ T978] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.805991][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'. [ 155.815950][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'. [ 155.873280][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.883597][ T978] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 155.914672][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.951700][ T6655] netlink: 'syz.2.206': attribute type 16 has an invalid length. [ 155.959622][ T6655] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.206'. [ 155.999280][ T978] usb 5-1: Product: syz [ 156.096901][ T978] usb 5-1: Manufacturer: syz [ 156.155580][ T978] usb 5-1: SerialNumber: syz [ 156.635395][ T978] usb 5-1: config 0 descriptor?? [ 156.642395][ T978] usb 5-1: can't set config #0, error -71 [ 156.650734][ T978] usb 5-1: USB disconnect, device number 4 [ 156.922766][ T6664] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 159.190627][ T6689] block device autoloading is deprecated and will be removed. [ 164.577955][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.980880][ T6768] xt_SECMARK: unable to map security context 'unconfined' [ 170.465561][ T6857] ubi0: attaching mtd0 [ 170.476605][ T6857] ubi0: scanning is finished [ 170.481263][ T6857] ubi0: empty MTD device detected [ 170.939373][ T6857] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 172.273295][ T6880] SET target dimension over the limit! [ 173.072355][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.307865][ T9] usb 2-1: device descriptor read/all, error -71 [ 174.334538][ T5874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.346653][ T5873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.701793][ T6907] ubi0: attaching mtd0 [ 176.711225][ T6907] ubi0: scanning is finished [ 176.719124][ T6907] ================================================================== [ 176.727201][ T6907] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x141/0x3f0 [ 176.735624][ T6907] Read of size 4 at addr ffff88805cdd18d8 by task syz.1.269/6907 [ 176.743344][ T6907] [ 176.745682][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.1.269 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 176.745703][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 176.745718][ T6907] Call Trace: [ 176.745725][ T6907] [ 176.745732][ T6907] dump_stack_lvl+0x241/0x360 [ 176.745755][ T6907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.745772][ T6907] ? __pfx__printk+0x10/0x10 [ 176.745802][ T6907] ? _printk+0xd5/0x120 [ 176.745824][ T6907] ? __virt_addr_valid+0x183/0x530 [ 176.745846][ T6907] ? __virt_addr_valid+0x183/0x530 [ 176.745869][ T6907] print_report+0x169/0x550 [ 176.745888][ T6907] ? __virt_addr_valid+0x183/0x530 [ 176.745908][ T6907] ? __virt_addr_valid+0x183/0x530 [ 176.745929][ T6907] ? __virt_addr_valid+0x45f/0x530 [ 176.745949][ T6907] ? __phys_addr+0xba/0x170 [ 176.745970][ T6907] ? notifier_chain_register+0x141/0x3f0 [ 176.745990][ T6907] kasan_report+0x143/0x180 [ 176.746013][ T6907] ? notifier_chain_register+0x141/0x3f0 [ 176.746032][ T6907] notifier_chain_register+0x141/0x3f0 [ 176.746053][ T6907] blocking_notifier_chain_register+0x61/0xc0 [ 176.746074][ T6907] ubi_wl_init+0x3396/0x3720 [ 176.746099][ T6907] ? ubi_read_volume_table+0x2322/0x2e80 [ 176.746123][ T6907] ubi_attach+0x3e01/0x5b80 [ 176.746156][ T6907] ? __pfx_ubi_attach+0x10/0x10 [ 176.746179][ T6907] ? ubi_attach_mtd_dev+0x19fa/0x3540 [ 176.746203][ T6907] ubi_attach_mtd_dev+0x1a3a/0x3540 [ 176.746234][ T6907] ctrl_cdev_ioctl+0x346/0x570 [ 176.746258][ T6907] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 176.746284][ T6907] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 176.746307][ T6907] __se_sys_ioctl+0xf5/0x170 [ 176.746324][ T6907] do_syscall_64+0xf3/0x230 [ 176.746344][ T6907] ? clear_bhb_loop+0x35/0x90 [ 176.746367][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.746388][ T6907] RIP: 0033:0x7f4bdc18cda9 [ 176.746407][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.746421][ T6907] RSP: 002b:00007f4bd9ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.746441][ T6907] RAX: ffffffffffffffda RBX: 00007f4bdc3a6160 RCX: 00007f4bdc18cda9 [ 176.746453][ T6907] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000006 [ 176.746465][ T6907] RBP: 00007f4bdc20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.746475][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.746486][ T6907] R13: 0000000000000000 R14: 00007f4bdc3a6160 R15: 00007ffedd69bdc8 [ 176.746504][ T6907] [ 176.746510][ T6907] [ 176.995436][ T6907] Allocated by task 6857: [ 176.999768][ T6907] kasan_save_track+0x3f/0x80 [ 177.004436][ T6907] __kasan_kmalloc+0x98/0xb0 [ 177.009018][ T6907] __kmalloc_cache_noprof+0x243/0x390 [ 177.014386][ T6907] ubi_attach_mtd_dev+0x552/0x3540 [ 177.019493][ T6907] ctrl_cdev_ioctl+0x346/0x570 [ 177.024248][ T6907] __se_sys_ioctl+0xf5/0x170 [ 177.028825][ T6907] do_syscall_64+0xf3/0x230 [ 177.033323][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.039208][ T6907] [ 177.041518][ T6907] Freed by task 6857: [ 177.045479][ T6907] kasan_save_track+0x3f/0x80 [ 177.050141][ T6907] kasan_save_free_info+0x40/0x50 [ 177.055153][ T6907] __kasan_slab_free+0x59/0x70 [ 177.059900][ T6907] kfree+0x196/0x430 [ 177.063783][ T6907] device_release+0x99/0x1c0 [ 177.068358][ T6907] kobject_put+0x22f/0x480 [ 177.072770][ T6907] ubi_attach_mtd_dev+0x8f5/0x3540 [ 177.077873][ T6907] ctrl_cdev_ioctl+0x346/0x570 [ 177.082634][ T6907] __se_sys_ioctl+0xf5/0x170 [ 177.087207][ T6907] do_syscall_64+0xf3/0x230 [ 177.091698][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.097579][ T6907] [ 177.099889][ T6907] The buggy address belongs to the object at ffff88805cdd0000 [ 177.099889][ T6907] which belongs to the cache kmalloc-8k of size 8192 [ 177.113926][ T6907] The buggy address is located 6360 bytes inside of [ 177.113926][ T6907] freed 8192-byte region [ffff88805cdd0000, ffff88805cdd2000) [ 177.127882][ T6907] [ 177.130193][ T6907] The buggy address belongs to the physical page: [ 177.136592][ T6907] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cdd0 [ 177.145336][ T6907] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 177.153815][ T6907] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 177.161345][ T6907] page_type: f5(slab) [ 177.165312][ T6907] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 177.173881][ T6907] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 177.182464][ T6907] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 177.191124][ T6907] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 177.199780][ T6907] head: 00fff00000000003 ffffea0001737401 ffffffffffffffff 0000000000000000 [ 177.208436][ T6907] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 177.217086][ T6907] page dumped because: kasan: bad access detected [ 177.223493][ T6907] page_owner tracks the page as allocated [ 177.229194][ T6907] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6857, tgid 6845 (syz.2.256), ts 170465224226, free_ts 169885800248 [ 177.250464][ T6907] post_alloc_hook+0x1f4/0x240 [ 177.255229][ T6907] get_page_from_freelist+0x3651/0x37a0 [ 177.260761][ T6907] __alloc_frozen_pages_noprof+0x292/0x710 [ 177.266552][ T6907] alloc_pages_mpol+0x311/0x660 [ 177.271388][ T6907] allocate_slab+0x8f/0x3a0 [ 177.275875][ T6907] ___slab_alloc+0xc27/0x14a0 [ 177.280543][ T6907] __slab_alloc+0x58/0xa0 [ 177.284864][ T6907] __kmalloc_cache_noprof+0x27b/0x390 [ 177.290223][ T6907] ubi_attach_mtd_dev+0x552/0x3540 [ 177.295325][ T6907] ctrl_cdev_ioctl+0x346/0x570 [ 177.300079][ T6907] __se_sys_ioctl+0xf5/0x170 [ 177.304656][ T6907] do_syscall_64+0xf3/0x230 [ 177.309148][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.315030][ T6907] page last free pid 5816 tgid 5816 stack trace: [ 177.321339][ T6907] free_frozen_pages+0xe04/0x10e0 [ 177.326362][ T6907] __slab_free+0x2c2/0x380 [ 177.330767][ T6907] qlist_free_all+0x9a/0x140 [ 177.335352][ T6907] kasan_quarantine_reduce+0x14f/0x170 [ 177.340803][ T6907] __kasan_slab_alloc+0x23/0x80 [ 177.345642][ T6907] kmem_cache_alloc_noprof+0x1d9/0x380 [ 177.351090][ T6907] ptlock_alloc+0x20/0x70 [ 177.355405][ T6907] pte_alloc_one+0x73/0x160 [ 177.359895][ T6907] __pte_alloc+0x79/0x220 [ 177.364211][ T6907] copy_pmd_range+0x6fb4/0x77a0 [ 177.369059][ T6907] copy_page_range+0x99f/0xe90 [ 177.373821][ T6907] copy_mm+0x1279/0x2110 [ 177.378054][ T6907] copy_process+0x1845/0x3d50 [ 177.382719][ T6907] kernel_clone+0x223/0x870 [ 177.387208][ T6907] __x64_sys_clone+0x258/0x2a0 [ 177.391963][ T6907] do_syscall_64+0xf3/0x230 [ 177.396455][ T6907] [ 177.398767][ T6907] Memory state around the buggy address: [ 177.404381][ T6907] ffff88805cdd1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.412425][ T6907] ffff88805cdd1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.420471][ T6907] >ffff88805cdd1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.428517][ T6907] ^ [ 177.435548][ T6907] ffff88805cdd1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.443597][ T6907] ffff88805cdd1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.451638][ T6907] ================================================================== [ 177.460683][ T6907] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 177.467896][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.1.269 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 177.478141][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 177.488199][ T6907] Call Trace: [ 177.491481][ T6907] [ 177.494422][ T6907] dump_stack_lvl+0x241/0x360 [ 177.499116][ T6907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.504333][ T6907] ? __pfx__printk+0x10/0x10 [ 177.508937][ T6907] ? preempt_schedule+0xe1/0xf0 [ 177.513801][ T6907] ? vscnprintf+0x5d/0x90 [ 177.518143][ T6907] panic+0x349/0x880 [ 177.522055][ T6907] ? check_panic_on_warn+0x21/0xb0 [ 177.527183][ T6907] ? __pfx_panic+0x10/0x10 [ 177.531618][ T6907] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 177.537608][ T6907] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 177.543951][ T6907] ? print_report+0x502/0x550 [ 177.548652][ T6907] check_panic_on_warn+0x86/0xb0 [ 177.553605][ T6907] ? notifier_chain_register+0x141/0x3f0 [ 177.559248][ T6907] end_report+0x77/0x160 [ 177.563501][ T6907] kasan_report+0x154/0x180 [ 177.568024][ T6907] ? notifier_chain_register+0x141/0x3f0 [ 177.573673][ T6907] notifier_chain_register+0x141/0x3f0 [ 177.579147][ T6907] blocking_notifier_chain_register+0x61/0xc0 [ 177.585229][ T6907] ubi_wl_init+0x3396/0x3720 [ 177.589837][ T6907] ? ubi_read_volume_table+0x2322/0x2e80 [ 177.595487][ T6907] ubi_attach+0x3e01/0x5b80 [ 177.600022][ T6907] ? __pfx_ubi_attach+0x10/0x10 [ 177.604888][ T6907] ? ubi_attach_mtd_dev+0x19fa/0x3540 [ 177.610277][ T6907] ubi_attach_mtd_dev+0x1a3a/0x3540 [ 177.615506][ T6907] ctrl_cdev_ioctl+0x346/0x570 [ 177.620286][ T6907] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 177.625590][ T6907] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 177.630893][ T6907] __se_sys_ioctl+0xf5/0x170 [ 177.635494][ T6907] do_syscall_64+0xf3/0x230 [ 177.640013][ T6907] ? clear_bhb_loop+0x35/0x90 [ 177.644705][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.650612][ T6907] RIP: 0033:0x7f4bdc18cda9 [ 177.655037][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.674653][ T6907] RSP: 002b:00007f4bd9ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.683087][ T6907] RAX: ffffffffffffffda RBX: 00007f4bdc3a6160 RCX: 00007f4bdc18cda9 [ 177.691069][ T6907] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000006 [ 177.699051][ T6907] RBP: 00007f4bdc20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.707029][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.715013][ T6907] R13: 0000000000000000 R14: 00007f4bdc3a6160 R15: 00007ffedd69bdc8 [ 177.723006][ T6907] [ 177.726269][ T6907] Kernel Offset: disabled [ 177.730580][ T6907] Rebooting in 86400 seconds..