last executing test programs: 44.055455992s ago: executing program 3 (id=8118): migrate_pages(0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0xef6b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f00000003c0)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="5763f922081ae50887ede09da114c1daa077f9611f8aa81d1b6fa5f806897377d6aa8524a8b1d8c81597ae6a3411d62b43ead10f470c911e8223cee2d6745ff65b450f8b0b46f900c910f852", 0x4c}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f0000000300)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4f3e4e6d317ba457f2d0deee1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d", 0x8d}, {&(0x7f0000000540)="a840c8a67da22f1b2c4e068bb1ad9c499f093b4480b55eb7b9408f5400cc74932ab986ca937640a84378eb6446626516e84b0055936bb61fac109e2624e86903d729b0b10b4f16db7da1fa3aaa808fe333de0c9316c2412cb9ed2d604f8b3fa52416302221487c294ae9dc54783573eb5e7c1027fc39fa60c39afee14fb7cf3e6ef0041470dfd6a4a356a1d7e20a437bcadc7f0b5afa9f9d68bccd88", 0x9c}, {&(0x7f0000000840)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8dd348d49550faf55f18c1d9f281054ffbe9a13132e9a95e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ac151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e8c8c6bcf4ebd", 0xd0}, {&(0x7f0000000700)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254a30d1e53084dd7f6b7114fa3825fcbae9443ec15fb31bca97a87824d4bc8b632cf971bfb523a", 0x9a}], 0x6, &(0x7f0000000480)="a6d462c399e20d9d7ab1999fd5b3d0e1d617be45eb50440e1e51f20cd773cd1b34f7669a511f6292d81a777376560dc1daae580d2419af271bdd485f32ddaa3679178bcbe6ff6f5d5d758535afbe2a930342eaa16108a32d9d31fbfe8bf4d89784440c3ff3fef2f998aebc9634", 0x6d}, 0x4c890) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)=0x10f2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd8136000) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeed, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) readahead(0xffffffffffffffff, 0x100000000, 0x3) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getrlimit(0xb, 0x0) syz_clone3(&(0x7f0000000ac0)={0x1008440, &(0x7f0000000240), &(0x7f0000000400), &(0x7f0000000440), {0x28}, &(0x7f0000000600)=""/135, 0x87, &(0x7f00000009c0)=""/152, &(0x7f00000006c0)=[r4, r3, 0x0, r2, r3, r4, r3, r3, r4, r3], 0xa}, 0x58) sched_setscheduler(r4, 0x6, &(0x7f0000000200)=0x80004) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000040), 0x4) 39.444429994s ago: executing program 3 (id=8130): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000080), &(0x7f00000005c0)=""/153}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5c, 0x1}, {0x6}]}) signalfd(r7, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) unshare(0x2040400) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xce) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000280)={0x1f, 0x300, @none, 0x0, 0x1}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x8, 0xfec9, &(0x7f0000000240)="005c2000a0ffffff", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0xfe9d, 0x0, 0x0}, 0x50) 37.406163708s ago: executing program 3 (id=8133): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x63, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, &(0x7f0000002540), 0x8, 0x68, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000795f020000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000004}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f00000001c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000009b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000097c0)=[{&(0x7f0000008600)=""/4096, 0x1000}], 0x1}}], 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64], 0x20000600}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000000101010200000000b100001802000000100002800c000280050001000000000008001a40000000000800034000"/64], 0x40}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2100) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000040)={0x2, 0x9}) 36.412565664s ago: executing program 3 (id=8136): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000f43ec0a100000000000000851000000100000006000000fcffffff18120000bd6af80d46e40751cf75ab9c3c14ca067ae7b52d0561a18566cda887543235d2c285969381536db45273f790599bbac5450793e397c5bcb42924cc4d77b630f3408fcada41a5ab2a7396e46eb77cb76fe8c3f3df4c6b5fcee0c35c377530d4d4e6f697a373e7b13dbb0025", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x90) read$FUSE(r0, &(0x7f0000008580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = socket(0x0, 0x80000, 0x4) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000500), 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x10}], 0x10}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0xdc30) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x24d00, 0x0) socket(0xf, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 34.918883872s ago: executing program 3 (id=8140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xc3ff, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}]}, 0x50}}, 0x0) 34.689238977s ago: executing program 3 (id=8142): socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=@other={'trylock', ' ', 'mem'}, 0xc) r1 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file1\x00', 0x141042, 0xc3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x5, [{}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ftruncate(r3, 0x8800000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001403) ioctl$TUNSETOFFLOAD(r5, 0x4004743b, 0x20002eae) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0xffffffffffffff01, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0xffffff1f, 0x700, 0x0) sendfile(r6, r3, 0x0, 0x578410eb) 17.452369424s ago: executing program 2 (id=8201): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@updpolicy={0xe8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8a2}, {}, 0x1f, 0x8}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd2b, 0x70bd2a, 0x70bd2b, 0x70bd2d, 0x4544, [0x8, 0x1, 0xd7, 0x0, 0x3]}}]}, 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) syz_usbip_server_init(0x0) r1 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x3a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd68, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000040)=':]\x18b\x83\a)REk)z\x0e\xcc\fw\x8a\xa5\x0e\xaa\xfc\x00\x00\x101\x03\x02[\xfb\x00{\xe0\x19\xc3\x14', 0xffcd4, &(0x7f0000000080)='[[-\'^%{\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000300)="2e000300010000", 0x7) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0) 11.189521334s ago: executing program 2 (id=8221): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c250000000000202020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x39) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010200000000000000001000000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r8], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) r12 = pidfd_getfd(r11, r11, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r13 = fcntl$dupfd(r0, 0x0, r12) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r13, 0x0) 9.697532106s ago: executing program 0 (id=8225): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcef9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4000811) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x401, 0x45833af96e4b39fe, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x1f}) 9.341620689s ago: executing program 2 (id=8226): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4200}, {r1, 0x8052}], 0x2, &(0x7f0000000180), &(0x7f0000000200)={[0x2]}, 0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmat(r4, &(0x7f0000409000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = open(0x0, 0x20881, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x0, 0x7fe2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x0, 0xb7d375beb1f4ba0d}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) 9.168510808s ago: executing program 4 (id=8227): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000002e40)="5536b3165b8347b6d7c4f83a4049519b", 0x10}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001e40)=""/4082, 0xff2}], 0x1}, 0x10041) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 9.021464146s ago: executing program 4 (id=8228): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYBLOB, @ANYBLOB="a1d9185329b116d37e5efd7589609de017e6c943c76d17f940d698259dd148baaf9e42e3ed7a5b466c6b8a365affcb1ad92dc78ae0e5bcfe83aa6d95a350f42c1d7c3effc4a8c53ee6436dd2e3c30ffb0ae04162f0df6c5ed19cd3dd40d46071943c24f1fed28e1d4ecc3a615f9ca60ac763b2118a81cbe607ff7b2ce7f9a3799ae620f72db8935227eeee25f12f4b9cdea546ca79594bf0", @ANYRESDEC, @ANYRESHEX=r4, @ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x90) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x281}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x5]}, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0xfffffffc, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000a00)) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) 8.180914406s ago: executing program 2 (id=8230): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@updpolicy={0xe8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8a2}, {}, 0x1f, 0x8}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd2b, 0x70bd2a, 0x70bd2b, 0x70bd2d, 0x4544, [0x8, 0x1, 0xd7, 0x0, 0x3]}}]}, 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) syz_usbip_server_init(0x0) r1 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x3a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd68, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000040)=':]\x18b\x83\a)REk)z\x0e\xcc\fw\x8a\xa5\x0e\xaa\xfc\x00\x00\x101\x03\x02[\xfb\x00{\xe0\x19\xc3\x14', 0xffcd4, &(0x7f0000000080)='[[-\'^%{\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000300)="2e000300010000", 0x7) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0) 8.055681479s ago: executing program 0 (id=8231): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x80000000, 0x4, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbaebff0ebd3e9bd5a8e"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [], {0x14, 0x11, 0x1, 0x4}}, 0x28}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e7261f69f80841f27b0354ffd326e733d66642c5b66646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x2, &(0x7f0000000700)=0x91, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[], 0x53) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) 7.286144842s ago: executing program 0 (id=8234): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x80000000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x2, 0x24044040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180300000000000000000000000000008510000002000000200000000000000085000000130000009500000000000000e169f5e67876c82991351b7475fab39fad6d008401b19cf6497acaaa19ca19e015522d08046ad70ec91b5c0eb4f70982c6d2875d12a45accd56cbfa6476ed6c842b24ddebad16831d62916c564028a"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x92, &(0x7f0000000240)=""/146}, 0x90) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefc, 0x10, 0x8, 0x0, 0x0}}, 0x10) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2000000, 0x0, 0xb3550aa4ba878396}, 0x9c) 6.068651163s ago: executing program 0 (id=8236): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private, @multicast1}}}], 0x20}, 0x0) (fail_nth: 11) 5.302801975s ago: executing program 0 (id=8238): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000400)=0x8, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}}]}}, 0xf) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x1000}) syz_emit_vhci(&(0x7f0000003580)=ANY=[@ANYBLOB], 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000002580)=ANY=[@ANYBLOB="85e6dad5418cb3ed741472853189d40000c100000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2000}, 0x10, 0x0, r0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0xd6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002380)) 5.034189889s ago: executing program 0 (id=8239): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000580)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0x0, @empty, @local, [@fragment={0x3a}]}}}}}}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 4.551918753s ago: executing program 4 (id=8240): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) userfaultfd(0x801) r3 = userfaultfd(0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0xfffffffffffffffe) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r4) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000840)=ANY=[]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r2, 0x0, 0x360) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)=0x1) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) 4.330753775s ago: executing program 4 (id=8241): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'geneve0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb1000000000088a8400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 3.95884919s ago: executing program 4 (id=8242): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 3.730388549s ago: executing program 4 (id=8243): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='befs\x00', 0x0, &(0x7f0000000a80)=',\x00') getuid() r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r1, 0x4b36) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x34}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x7, 0x35b, 0xa58]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="8a5c45a7c3c3", {0x6, 0x40}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8, @val={0x8c, 0x18, {0x715, "8087c5e0de92", @long="5f7eaf638accf61e02bffdaacdc05ed9"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfa0}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8d1f59ddef891bf3) recvmmsg(0xffffffffffffffff, &(0x7f0000006b00), 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2016}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1, 0xc9, 0xdc}}}, 0x7) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3ff}, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r10, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) setpgid(r2, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000020000000000000003003e00000000000000000000000000400000000000003eea70e8f1cf0dfc1238c739d200000000000000000000d70e7df638dbbb2a3edbcb5dbb2c0400380001000000000000020300000000000000000000000000000000000000000000000000000000000000000800"/133], 0x78) close(r11) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_int(r0, 0x10d, 0xdf, &(0x7f0000000000), &(0x7f0000000080)=0x4) 3.021665183s ago: executing program 2 (id=8244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpid() r3 = getpid() r4 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000002040)={r4}) 2.706787875s ago: executing program 2 (id=8245): ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000080)={0x7fffffffffffffff, 0x20, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket(0x10, 0x3, 0x2fd) write(r1, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372"], 0x40}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.642495631s ago: executing program 1 (id=8246): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x0, 0x0, 0x3, 0x5, 0x1, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 2.359425761s ago: executing program 1 (id=8247): socket(0x15, 0x2, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setrlimit(0x2, &(0x7f0000000280)={0x9f60, 0x2400000}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a003fca000000611188eb9cd82d00180200000000000000000000000000409500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x9, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100f7803d3c00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100005d5abbccc55246403e58ceca03000000d4adf5726a756616b8c14b3516cf30cd29e0eb2e54ef681fd4730deb641069014b321610040301f272805f1b45991b81c90f3240107c705d920f65a1fbc10aad215723dae37b93", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x20001412) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x7d, @rand_addr=' \x01\x00', 0x8}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 2.026917771s ago: executing program 1 (id=8248): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4}, 0x48) 1.954057845s ago: executing program 1 (id=8249): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYBLOB, @ANYBLOB="a1d9185329b116d37e5efd7589609de017e6c943c76d17f940d698259dd148baaf9e42e3ed7a5b466c6b8a365affcb1ad92dc78ae0e5bcfe83aa6d95a350f42c1d7c3effc4a8c53ee6436dd2e3c30ffb0ae04162f0df6c5ed19cd3dd40d46071943c24f1fed28e1d4ecc3a615f9ca60ac763b2118a81cbe607ff7b2ce7f9a3799ae620f72db8935227eeee25f12f4b9cdea546ca79594bf0", @ANYRESDEC, @ANYRESHEX=r4, @ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x90) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x281}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x5]}, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0xfffffffc, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000a00)) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) 227.074233ms ago: executing program 1 (id=8250): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) userfaultfd(0x801) r3 = userfaultfd(0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0xfffffffffffffffe) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r4) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000840)=ANY=[]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r2, 0x0, 0x360) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)=0x1) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) 0s ago: executing program 1 (id=8251): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8001}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x3fe, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r4 = epoll_create1(0x80000) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000200)={0x80000000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r9 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r10, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): ackets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.714298][T31535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.747906][T31539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.787576][T31543] team0: Port device team_slave_0 added [ 1799.815391][T31543] team0: Port device team_slave_1 added [ 1800.173189][T31535] hsr_slave_0: entered promiscuous mode [ 1800.209619][T31535] hsr_slave_1: entered promiscuous mode [ 1800.229992][T31535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1800.258793][T31535] Cannot create hsr debugfs directory [ 1800.296633][T31539] team0: Port device team_slave_0 added [ 1800.312001][T31658] netlink: 'syz.3.7933': attribute type 29 has an invalid length. [ 1800.322473][T31543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.329527][T31543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.391421][T31543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.424592][T31543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.440415][T31543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.497551][T31543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.575855][T31659] netlink: 'syz.3.7933': attribute type 29 has an invalid length. [ 1800.610234][T31539] team0: Port device team_slave_1 added [ 1800.689878][T31660] netlink: 'syz.3.7933': attribute type 29 has an invalid length. [ 1800.698255][T31661] netlink: 'syz.3.7933': attribute type 29 has an invalid length. [ 1800.955230][T31539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.973256][T31539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.096250][T31539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.368189][T31539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.414708][T31539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.554574][T31539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.696908][T31543] hsr_slave_0: entered promiscuous mode [ 1801.719749][T31543] hsr_slave_1: entered promiscuous mode [ 1801.762627][T31543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1801.770494][T31543] Cannot create hsr debugfs directory [ 1802.055509][ T1037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.980001][T31539] hsr_slave_0: entered promiscuous mode [ 1803.009316][T31539] hsr_slave_1: entered promiscuous mode [ 1803.058107][T31539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1803.080974][T31539] Cannot create hsr debugfs directory [ 1803.172978][ T1037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.408721][ T1037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.756399][ T1037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.424869][T31684] Process accounting resumed [ 1804.896475][ T1037] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.165041][ T1037] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.313658][ T1037] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.453725][ T1037] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.624536][T29009] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1805.970176][ T1037] bridge_slave_1: left allmulticast mode [ 1805.988129][ T1037] bridge_slave_1: left promiscuous mode [ 1806.010332][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.016742][T29009] usb 4-1: Using ep0 maxpacket: 32 [ 1806.028140][T29009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1806.051246][T29009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1806.067574][ T1037] bridge_slave_0: left allmulticast mode [ 1806.456854][T29009] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1806.471765][ T1037] bridge_slave_0: left promiscuous mode [ 1806.485029][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.499729][T29009] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1806.525160][T29009] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1806.548153][ T1037] bridge_slave_1: left allmulticast mode [ 1806.568090][T29009] usb 4-1: Product: syz [ 1806.569847][ T1037] bridge_slave_1: left promiscuous mode [ 1806.581355][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.585139][T29009] usb 4-1: Manufacturer: syz [ 1806.601106][ T1037] bridge_slave_0: left allmulticast mode [ 1806.641409][ T1037] bridge_slave_0: left promiscuous mode [ 1806.651564][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.718282][T29009] usb 4-1: SerialNumber: syz [ 1806.733214][T31692] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1806.745207][T29009] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input84 [ 1806.841489][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 1807.006753][T25918] usb 4-1: USB disconnect, device number 4 [ 1807.044034][T25918] appletouch 4-1:1.0: input: appletouch disconnected [ 1810.586321][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1810.620011][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1810.648014][ T1037] bond0 (unregistering): Released all slaves [ 1811.215063][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1811.235712][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1811.260971][ T1037] bond0 (unregistering): Released all slaves [ 1811.414881][ T1037] Κό: left promiscuous mode [ 1811.552974][ T1037] Κό: left promiscuous mode [ 1811.756048][ T1037] tipc: Left network mode [ 1812.562898][T31543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1812.607129][T31543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1813.007991][T31543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1813.140592][ T1037] hsr_slave_0: left promiscuous mode [ 1813.169384][ T1037] hsr_slave_1: left promiscuous mode [ 1813.187521][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1813.195359][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1813.223700][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1813.258078][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1813.344004][ T1037] hsr_slave_0: left promiscuous mode [ 1813.372152][ T1037] hsr_slave_1: left promiscuous mode [ 1813.405110][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1813.436996][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1813.473933][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1813.498400][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1813.695895][ T1037] veth1_macvtap: left promiscuous mode [ 1813.713394][ T1037] veth0_macvtap: left promiscuous mode [ 1813.721100][ T1037] veth1_vlan: left promiscuous mode [ 1813.736903][ T1037] veth0_vlan: left promiscuous mode [ 1813.766202][ T1037] veth1_macvtap: left promiscuous mode [ 1813.777086][ T1037] veth0_macvtap: left promiscuous mode [ 1813.795323][ T1037] veth1_vlan: left promiscuous mode [ 1813.815506][ T1037] veth0_vlan: left promiscuous mode [ 1815.040698][ T29] audit: type=1326 audit(1721674950.500:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31746 comm="syz.3.7958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c975f19 code=0x0 [ 1815.175544][ T29] audit: type=1326 audit(1721674950.640:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31746 comm="syz.3.7958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c975f19 code=0x0 [ 1816.705259][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 1816.930590][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 1820.744689][T31776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7964'. [ 1822.151359][ T7141] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1822.364179][ T7141] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1822.374011][ T7141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.395245][ T7141] usb 4-1: Product: syz [ 1822.399454][ T7141] usb 4-1: Manufacturer: syz [ 1822.432564][ T7141] usb 4-1: SerialNumber: syz [ 1822.444510][ T7141] usb 4-1: config 0 descriptor?? [ 1822.454123][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 1822.471103][ T7141] ch341 4-1:0.0: ch341-uart converter detected [ 1822.702835][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 1823.002405][ T7141] usb 4-1: failed to send control message: -71 [ 1823.008677][ T7141] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1823.054420][ T7141] usb 4-1: USB disconnect, device number 5 [ 1823.069211][ T7141] ch341 4-1:0.0: device disconnected [ 1825.122645][T31541] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1825.138379][T31541] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1825.168070][T31541] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1825.179412][T31541] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1825.205545][T31541] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1825.215294][T31541] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1825.483095][T31543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1826.405173][T31539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1826.515277][T31539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1826.654948][T31539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1826.871074][T31539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1827.235467][T31804] wg1: entered promiscuous mode [ 1827.291307][T31541] Bluetooth: hci12: command tx timeout [ 1827.305500][T31794] chnl_net:caif_netlink_parms(): no params data found [ 1827.391171][ T5095] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1827.485324][T31543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.517605][T31535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1827.544245][T31535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1827.590952][ T5095] usb 4-1: Using ep0 maxpacket: 32 [ 1827.598060][ T5095] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.613674][ T5095] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1827.631037][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.675974][ T5095] usb 4-1: config 0 descriptor?? [ 1827.693958][T31535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1827.799500][T31543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.819684][T31535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1827.924912][ T1150] usb 4-1: USB disconnect, device number 6 [ 1828.053922][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.132667][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.139843][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.174084][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.181297][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.219843][T31794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.231414][T31794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.259427][T31794] bridge_slave_0: entered allmulticast mode [ 1828.289765][T31794] bridge_slave_0: entered promiscuous mode [ 1828.383820][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.431182][T31794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.438348][T31794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.468219][T31794] bridge_slave_1: entered allmulticast mode [ 1828.483823][T31794] bridge_slave_1: entered promiscuous mode [ 1828.593695][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.693729][T31539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.727669][ T29] audit: type=1326 audit(1721674964.190:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31810 comm="syz.3.7972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c975f19 code=0x0 [ 1828.890012][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.945460][T31794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.009660][T31543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1829.057487][T31543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1829.119573][T31794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.363865][T31541] Bluetooth: hci12: command tx timeout [ 1829.441330][T31541] Bluetooth: hci9: command 0x0406 tx timeout [ 1829.502189][T31794] team0: Port device team_slave_0 added [ 1829.577640][T31539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1829.652000][T31817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7973'. [ 1829.666268][T31794] team0: Port device team_slave_1 added [ 1829.776410][T31535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1829.877376][T31794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1829.901008][T31794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1829.982067][T31794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.155893][T31794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.173234][T31794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.231276][T31794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.278442][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.285703][ T7141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1830.360013][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.367247][ T7141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1830.419510][T31535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.473895][ T1037] team0: left allmulticast mode [ 1830.481783][ T1037] team_slave_0: left allmulticast mode [ 1830.488728][ T1037] team_slave_1: left allmulticast mode [ 1830.494969][ T1037] bridge0: port 3(team0) entered disabled state [ 1830.509372][ T1037] bridge_slave_1: left allmulticast mode [ 1830.522123][ T1037] bridge_slave_1: left promiscuous mode [ 1830.535722][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.562063][ T1037] bridge_slave_0: left allmulticast mode [ 1830.567837][ T1037] bridge_slave_0: left promiscuous mode [ 1830.574145][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.455615][T22626] Bluetooth: hci12: command tx timeout [ 1831.781266][ T29] audit: type=1326 audit(1721674967.240:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31835 comm="syz.3.7979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c975f19 code=0x0 [ 1832.587097][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1832.634374][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1832.664478][ T1037] bond0 (unregistering): Released all slaves [ 1832.696077][ T1037] bond1 (unregistering): Released all slaves [ 1832.886979][T31794] hsr_slave_0: entered promiscuous mode [ 1833.521885][T22626] Bluetooth: hci12: command tx timeout [ 1833.542920][T31794] hsr_slave_1: entered promiscuous mode [ 1833.605262][T31794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1833.640987][T31794] Cannot create hsr debugfs directory [ 1833.755116][T31543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1833.771436][ T1037] Κό: left promiscuous mode [ 1833.959654][T30767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.967532][T30767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.032889][T30767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.040211][T30767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1834.224891][ T1037] tipc: Left network mode [ 1834.973757][T31543] veth0_vlan: entered promiscuous mode [ 1835.169336][ T1037] hsr_slave_0: left promiscuous mode [ 1835.194168][ T1037] hsr_slave_1: left promiscuous mode [ 1835.202002][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.209594][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.240176][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.261510][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.346191][ T1037] veth1_macvtap: left promiscuous mode [ 1835.368776][ T1037] veth0_macvtap: left promiscuous mode [ 1835.378976][ T1037] veth1_vlan: left promiscuous mode [ 1835.392068][ T1037] veth0_vlan: left promiscuous mode [ 1835.526648][ T29] audit: type=1326 audit(1721674970.990:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31870 comm="syz.3.7986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c975f19 code=0x0 [ 1836.811150][T31879] netlink: 'syz.3.7987': attribute type 1 has an invalid length. [ 1836.851101][T31879] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.7987'. [ 1837.787405][ T1037] team_slave_1 (unregistering): left promiscuous mode [ 1837.839331][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 1838.043672][ T1037] team_slave_0 (unregistering): left promiscuous mode [ 1838.063474][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 1839.989317][T31543] veth1_vlan: entered promiscuous mode [ 1840.219654][T31539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1840.434438][T31543] veth0_macvtap: entered promiscuous mode [ 1840.664719][T31543] veth1_macvtap: entered promiscuous mode [ 1840.772070][T31535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1841.001422][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.040981][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.071005][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.111023][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.141059][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.161906][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.180312][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.203451][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.224826][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.246135][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.266493][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.290526][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.312890][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.334852][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.355334][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.377707][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.400899][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.422646][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.443812][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.465005][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.485595][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.510133][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.530066][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.553398][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.578749][T31543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1841.623062][T31539] veth0_vlan: entered promiscuous mode [ 1841.660685][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.688288][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.709092][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.733237][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.753169][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.788467][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.808707][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.842311][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.867956][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.899929][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.923658][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.947001][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.966850][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.988854][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.010278][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1842.036039][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.056003][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1842.103968][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.133364][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1842.166760][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.191061][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1842.211055][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.231413][T31543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1842.251051][T31543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.273150][T31543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1842.340643][T31543] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.359755][T31543] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.379995][T31543] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.400224][T31543] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.483703][T31539] veth1_vlan: entered promiscuous mode [ 1842.623081][T31535] veth0_vlan: entered promiscuous mode [ 1842.782620][T31535] veth1_vlan: entered promiscuous mode [ 1842.907837][T31794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1842.969706][T31794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1843.035855][T31794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1843.057783][T31794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1843.132947][T31539] veth0_macvtap: entered promiscuous mode [ 1843.153914][T26039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.172535][T26039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.492997][T31539] veth1_macvtap: entered promiscuous mode [ 1844.058339][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.092011][T31535] veth0_macvtap: entered promiscuous mode [ 1844.102581][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.113695][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.131489][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.152737][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.178898][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.199843][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.225498][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.241903][ T29] audit: type=1326 audit(1721674979.690:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31903 comm="syz.3.7993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c975f19 code=0x0 [ 1844.256909][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.331549][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.370995][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.401125][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.424563][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.451553][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.481148][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.513908][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.545312][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.593281][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.634319][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.684106][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.732473][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.772718][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.823421][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.861955][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.912778][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1844.955897][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.006797][T31539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1845.049402][T31539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.098500][T31539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1845.350240][T31541] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1845.365167][T31541] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1845.374811][T31541] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1845.383050][T31541] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1845.405003][T31541] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1845.461397][T31541] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1845.571673][T31540] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1845.581142][ T4487] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1845.598693][ T4487] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1845.625208][ T4487] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1845.640369][T31540] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1845.660229][T31540] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1845.668217][ T4487] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1845.684963][T31540] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 1845.692835][ T4487] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1845.702131][T31540] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1845.711073][T31540] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 1845.720541][T31540] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1845.783087][T31794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1845.916390][T31921] netlink: 'syz.3.7994': attribute type 1 has an invalid length. [ 1845.925487][T31921] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.7994'. [ 1846.021936][T31794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1846.371661][T30678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1846.378869][T30678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1847.251110][T30678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.258661][T30678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1847.523021][ T4487] Bluetooth: hci10: command tx timeout [ 1847.761158][ T4487] Bluetooth: hci17: command tx timeout [ 1847.843093][ T4487] Bluetooth: hci18: command tx timeout [ 1848.517903][ T4247] bridge_slave_1: left allmulticast mode [ 1848.532448][ T4247] bridge_slave_1: left promiscuous mode [ 1848.553564][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.623615][ T4247] bridge_slave_0: left allmulticast mode [ 1848.629326][ T4247] bridge_slave_0: left promiscuous mode [ 1848.661364][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.601441][ T4487] Bluetooth: hci10: command tx timeout [ 1849.844071][ T4487] Bluetooth: hci17: command tx timeout [ 1849.926978][ T4487] Bluetooth: hci18: command tx timeout [ 1850.219598][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1850.264292][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1850.290426][ T4247] bond0 (unregistering): Released all slaves [ 1850.351142][T31913] chnl_net:caif_netlink_parms(): no params data found [ 1850.601672][ T4247] hsr_slave_0: left promiscuous mode [ 1850.635518][ T4247] hsr_slave_1: left promiscuous mode [ 1850.671151][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.721720][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1850.779400][ T4247] veth0_macvtap: left promiscuous mode [ 1850.798943][ T4247] veth1_vlan: left promiscuous mode [ 1850.813666][ T4247] veth0_vlan: left promiscuous mode [ 1851.700992][ T4487] Bluetooth: hci10: command tx timeout [ 1851.920981][T31540] Bluetooth: hci17: command tx timeout [ 1852.001103][T31540] Bluetooth: hci18: command tx timeout [ 1852.019704][T31957] Process accounting resumed [ 1852.969297][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.980087][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.392080][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1853.613239][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1853.761690][T31540] Bluetooth: hci10: command tx timeout [ 1854.017713][T31540] Bluetooth: hci17: command tx timeout [ 1854.083299][T31540] Bluetooth: hci18: command tx timeout [ 1855.116723][T31979] Process accounting resumed [ 1856.515167][T31914] chnl_net:caif_netlink_parms(): no params data found [ 1856.673299][T31794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1856.973172][T31913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.985366][T31913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.008569][T31913] bridge_slave_0: entered allmulticast mode [ 1857.026060][T31913] bridge_slave_0: entered promiscuous mode [ 1857.046966][T31988] netlink: 'syz.3.8009': attribute type 12 has an invalid length. [ 1857.099954][T31916] chnl_net:caif_netlink_parms(): no params data found [ 1857.337953][T31913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.351067][T31913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.362554][T31913] bridge_slave_1: entered allmulticast mode [ 1857.374277][T31913] bridge_slave_1: entered promiscuous mode [ 1857.773660][T31913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.808463][T31913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.937460][T31914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.981329][T31914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.989048][T31914] bridge_slave_0: entered allmulticast mode [ 1857.998981][T31914] bridge_slave_0: entered promiscuous mode [ 1858.021212][T31914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.032279][T31914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.039774][T31914] bridge_slave_1: entered allmulticast mode [ 1858.048377][T31914] bridge_slave_1: entered promiscuous mode [ 1858.107726][T31913] team0: Port device team_slave_0 added [ 1858.153149][T31913] team0: Port device team_slave_1 added [ 1858.490432][T31916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.531410][T31916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.550323][T31916] bridge_slave_0: entered allmulticast mode [ 1858.575396][T31916] bridge_slave_0: entered promiscuous mode [ 1858.635653][T31914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1858.674231][T31914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1858.700280][T31913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1858.723169][T31913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1858.801131][T31913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.035747][T31916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.076974][T31916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.100213][T31916] bridge_slave_1: entered allmulticast mode [ 1859.122643][T31916] bridge_slave_1: entered promiscuous mode [ 1859.272478][T31913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1859.279474][T31913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1859.351067][T31913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1859.501091][ T5134] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1859.565696][T31916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1859.625128][T31914] team0: Port device team_slave_0 added [ 1859.670599][T31913] hsr_slave_0: entered promiscuous mode [ 1859.710987][ T5134] usb 4-1: Using ep0 maxpacket: 16 [ 1859.711558][T31913] hsr_slave_1: entered promiscuous mode [ 1859.717956][ T5134] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.741059][T31913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1859.748783][T31913] Cannot create hsr debugfs directory [ 1859.762128][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1859.800899][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1859.810605][ T5134] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1859.840433][ T5134] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1859.865268][T31916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1859.882303][ T5134] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1859.896347][ T5134] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1859.914774][ T5134] usb 4-1: Manufacturer: syz [ 1859.927844][ T5134] usb 4-1: config 0 descriptor?? [ 1859.936992][T31914] team0: Port device team_slave_1 added [ 1859.985970][T31794] veth0_vlan: entered promiscuous mode [ 1860.146854][T31916] team0: Port device team_slave_0 added [ 1860.205946][T31914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1860.213396][T31914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.271132][T31914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1860.301067][ T5134] rc_core: IR keymap rc-hauppauge not found [ 1860.307067][ T5134] Registered IR keymap rc-empty [ 1860.315191][T31914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1860.322453][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.342498][T31914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.371925][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.396766][T31914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1860.410608][ T5134] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1860.456001][T31916] team0: Port device team_slave_1 added [ 1860.462616][ T5134] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input85 [ 1860.521189][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.552945][T31794] veth1_vlan: entered promiscuous mode [ 1860.570982][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.611157][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.661116][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.695377][T31916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1860.705267][T31916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.711050][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.776814][T31916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1860.791056][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.840981][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.880319][T31916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1860.891033][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.896733][T31916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.941081][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.976467][ T5134] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1860.982542][T31916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.025311][ T5134] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1861.028536][T31914] hsr_slave_0: entered promiscuous mode [ 1861.053553][ T5134] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1861.063236][T31914] hsr_slave_1: entered promiscuous mode [ 1861.069789][T31914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1861.081458][T31914] Cannot create hsr debugfs directory [ 1861.088264][ T5134] usb 4-1: USB disconnect, device number 7 [ 1861.310453][T31794] veth0_macvtap: entered promiscuous mode [ 1861.541175][ T4247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.603910][T31794] veth1_macvtap: entered promiscuous mode [ 1861.844645][ T4247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.912677][T31916] hsr_slave_0: entered promiscuous mode [ 1861.929957][T31916] hsr_slave_1: entered promiscuous mode [ 1861.942820][T31916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1861.960683][T31916] Cannot create hsr debugfs directory [ 1862.007144][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.028271][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.048552][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.069399][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.089645][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.124307][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.150978][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.180913][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.200983][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.221359][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.251049][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.280884][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.300909][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.320943][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.341856][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.366278][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.390958][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.410970][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.431018][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.452000][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.471090][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.492048][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.520863][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.540855][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.564267][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.580870][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.600895][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.630987][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.651321][T30678] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1862.652903][T31794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1862.773479][ T4247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.864160][T30678] usb 4-1: Using ep0 maxpacket: 8 [ 1862.872760][T30678] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1862.888297][T30678] usb 4-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 1862.890222][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1862.908816][T30678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.942867][T30678] usb 4-1: config 0 descriptor?? [ 1862.950551][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.974470][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1862.996174][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.019520][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.040626][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.061736][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.082958][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.103458][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.127652][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.147969][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.169754][T32025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.169945][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.209273][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.211838][T32025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.239445][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.249421][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.260116][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.270028][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.280666][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.292033][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.302793][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.312815][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.324905][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.334975][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.347783][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.362190][T25918] usb 4-1: USB disconnect, device number 8 [ 1863.370561][T31794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.383535][T31794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.395711][T31794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1863.584598][ T4247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.769995][T31794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1863.801269][T31794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1863.810032][T31794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1863.842630][T31794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.657493][ T4247] bridge_slave_1: left allmulticast mode [ 1864.671900][ T4247] bridge_slave_1: left promiscuous mode [ 1864.677693][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.702596][ T4247] bridge_slave_0: left allmulticast mode [ 1864.708291][ T4247] bridge_slave_0: left promiscuous mode [ 1864.731232][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.753020][ T4247] bridge_slave_1: left allmulticast mode [ 1864.758715][ T4247] bridge_slave_1: left promiscuous mode [ 1864.792523][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.826350][ T4247] bridge_slave_0: left allmulticast mode [ 1864.840884][ T4247] bridge_slave_0: left promiscuous mode [ 1864.846673][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.915540][T32036] tmpfs: Unknown parameter 'ΐ1B€n؟θn' [ 1865.999589][T32043] fuse: Unknown parameter 'Θ' [ 1867.398455][T32050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1867.671218][T32053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1867.759020][T32053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1867.869820][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1867.898752][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1867.933524][ T4247] bond0 (unregistering): Released all slaves [ 1868.625104][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1868.667614][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1868.686704][ T4247] bond0 (unregistering): Released all slaves [ 1868.729874][T26039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.749889][T26039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.327057][T26038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.335114][T26038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.743308][T32058] Process accounting resumed [ 1869.821837][ T4247] hsr_slave_0: left promiscuous mode [ 1869.852372][ T4247] hsr_slave_1: left promiscuous mode [ 1869.887303][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1869.905190][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1869.937070][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1869.977830][ T4247] hsr_slave_0: left promiscuous mode [ 1870.002794][ T4247] hsr_slave_1: left promiscuous mode [ 1870.014017][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1870.029396][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.059411][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1870.077082][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.232932][ T4247] veth1_macvtap: left promiscuous mode [ 1870.252523][ T4247] veth0_macvtap: left promiscuous mode [ 1870.267128][ T4247] veth1_vlan: left promiscuous mode [ 1870.281816][ T4247] veth0_vlan: left promiscuous mode [ 1870.298190][ T4247] veth1_macvtap: left promiscuous mode [ 1870.313865][ T4247] veth0_macvtap: left promiscuous mode [ 1870.328466][ T4247] veth1_vlan: left promiscuous mode [ 1870.344459][ T4247] veth0_vlan: left promiscuous mode [ 1870.872501][T32068] FAULT_INJECTION: forcing a failure. [ 1870.872501][T32068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1870.948329][T32068] CPU: 1 UID: 0 PID: 32068 Comm: syz.3.8028 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1870.958788][T32068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1870.968841][T32068] Call Trace: [ 1870.972112][T32068] [ 1870.975040][T32068] dump_stack_lvl+0x241/0x360 [ 1870.979722][T32068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1870.984924][T32068] ? __pfx__printk+0x10/0x10 [ 1870.989513][T32068] ? snprintf+0xda/0x120 [ 1870.993794][T32068] should_fail_ex+0x3b0/0x4e0 [ 1870.998602][T32068] _copy_to_user+0x2f/0xb0 [ 1871.003053][T32068] simple_read_from_buffer+0xca/0x150 [ 1871.008471][T32068] proc_fail_nth_read+0x1e9/0x250 [ 1871.013539][T32068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1871.019141][T32068] ? rw_verify_area+0x520/0x6b0 [ 1871.024029][T32068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1871.029609][T32068] vfs_read+0x204/0xbc0 [ 1871.033793][T32068] ? __pfx_lock_release+0x10/0x10 [ 1871.038839][T32068] ? do_sock_setsockopt+0x3e2/0x720 [ 1871.044053][T32068] ? __pfx_vfs_read+0x10/0x10 [ 1871.048759][T32068] ? udp_setsockopt+0x73/0xb0 [ 1871.053644][T32068] ? __fget_files+0x29/0x470 [ 1871.058267][T32068] ? __fget_files+0x3f6/0x470 [ 1871.062981][T32068] ksys_read+0x1a0/0x2c0 [ 1871.067244][T32068] ? __pfx_ksys_read+0x10/0x10 [ 1871.072020][T32068] ? do_syscall_64+0x100/0x230 [ 1871.076799][T32068] ? do_syscall_64+0xb6/0x230 [ 1871.081493][T32068] do_syscall_64+0xf3/0x230 [ 1871.086012][T32068] ? clear_bhb_loop+0x35/0x90 [ 1871.090711][T32068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.096888][T32068] RIP: 0033:0x7f8f5c9749fc [ 1871.101320][T32068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1871.121046][T32068] RSP: 002b:00007f8f5d677040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1871.129490][T32068] RAX: ffffffffffffffda RBX: 00007f8f5cb05f60 RCX: 00007f8f5c9749fc [ 1871.137481][T32068] RDX: 000000000000000f RSI: 00007f8f5d6770b0 RDI: 0000000000000004 [ 1871.145472][T32068] RBP: 00007f8f5d6770a0 R08: 0000000000000000 R09: 0000000000000000 [ 1871.153466][T32068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.161550][T32068] R13: 000000000000000b R14: 00007f8f5cb05f60 R15: 00007ffe76d72aa8 [ 1871.169579][T32068] [ 1872.371797][T32073] FAULT_INJECTION: forcing a failure. [ 1872.371797][T32073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1872.400525][T32073] CPU: 0 UID: 0 PID: 32073 Comm: syz.3.8030 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1872.410990][T32073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1872.421061][T32073] Call Trace: [ 1872.424349][T32073] [ 1872.427293][T32073] dump_stack_lvl+0x241/0x360 [ 1872.432000][T32073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1872.437235][T32073] ? __pfx__printk+0x10/0x10 [ 1872.441866][T32073] ? __pfx_lock_release+0x10/0x10 [ 1872.446925][T32073] should_fail_ex+0x3b0/0x4e0 [ 1872.451633][T32073] _copy_from_user+0x2f/0xe0 [ 1872.456242][T32073] copy_msghdr_from_user+0xae/0x680 [ 1872.461483][T32073] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1872.467326][T32073] __sys_sendmsg+0x23d/0x3a0 [ 1872.471935][T32073] ? __pfx___sys_sendmsg+0x10/0x10 [ 1872.477051][T32073] ? vfs_write+0x7c4/0xc90 [ 1872.481524][T32073] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1872.487888][T32073] ? do_syscall_64+0x100/0x230 [ 1872.492691][T32073] ? do_syscall_64+0xb6/0x230 [ 1872.497406][T32073] do_syscall_64+0xf3/0x230 [ 1872.501938][T32073] ? clear_bhb_loop+0x35/0x90 [ 1872.506631][T32073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.512563][T32073] RIP: 0033:0x7f8f5c975f19 [ 1872.517075][T32073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1872.536878][T32073] RSP: 002b:00007f8f5d677048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1872.545314][T32073] RAX: ffffffffffffffda RBX: 00007f8f5cb05f60 RCX: 00007f8f5c975f19 [ 1872.553305][T32073] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1872.561291][T32073] RBP: 00007f8f5d6770a0 R08: 0000000000000000 R09: 0000000000000000 [ 1872.569274][T32073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.577254][T32073] R13: 000000000000000b R14: 00007f8f5cb05f60 R15: 00007ffe76d72aa8 [ 1872.585252][T32073] [ 1873.283764][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1873.458043][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1877.100095][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1877.288896][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1879.584826][T31914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1879.612478][T16510] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1879.651563][T31914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1879.741134][T31914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1879.772375][T31914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1879.829943][T16510] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.860973][T16510] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.880893][T16510] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1879.891199][T16510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.913888][T16510] usb 4-1: config 0 descriptor?? [ 1880.540621][T31914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1880.572115][T16510] usbhid 4-1:0.0: can't add hid device: -71 [ 1880.578202][T16510] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1880.633791][T16510] usb 4-1: USB disconnect, device number 9 [ 1880.755468][T31914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1880.800726][T31913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1880.867784][T31913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1880.946557][T31913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1880.979788][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1880.986992][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1881.066737][T31913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1881.183331][T30673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.190501][T30673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1881.408319][T26036] Bluetooth: hci14: Frame reassembly failed (-84) [ 1881.453517][T32098] No control pipe specified [ 1881.693841][T31916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1881.726135][T31916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1881.787526][T31916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1881.817515][T32103] FAULT_INJECTION: forcing a failure. [ 1881.817515][T32103] name failslab, interval 1, probability 0, space 0, times 0 [ 1881.846282][T31916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1881.856559][T32103] CPU: 1 UID: 0 PID: 32103 Comm: syz.0.8040 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1881.867024][T32103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1881.877189][T32103] Call Trace: [ 1881.880493][T32103] [ 1881.883442][T32103] dump_stack_lvl+0x241/0x360 [ 1881.888149][T32103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1881.893451][T32103] ? __pfx__printk+0x10/0x10 [ 1881.898057][T32103] ? fs_reclaim_acquire+0x93/0x140 [ 1881.903183][T32103] ? __pfx___might_resched+0x10/0x10 [ 1881.908490][T32103] should_fail_ex+0x3b0/0x4e0 [ 1881.913191][T32103] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1881.918926][T32103] should_failslab+0xac/0x100 [ 1881.923628][T32103] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1881.929361][T32103] __kmalloc_noprof+0xd8/0x400 [ 1881.934141][T32103] ? kfree+0x4e/0x360 [ 1881.938143][T32103] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1881.943722][T32103] tomoyo_path_number_perm+0x23a/0x880 [ 1881.949196][T32103] ? tomoyo_path_number_perm+0x208/0x880 [ 1881.954845][T32103] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1881.960874][T32103] ? __fget_files+0x29/0x470 [ 1881.965493][T32103] ? __fget_files+0x3f6/0x470 [ 1881.970214][T32103] ? __fget_files+0x29/0x470 [ 1881.974840][T32103] security_file_ioctl+0x75/0xb0 [ 1881.979800][T32103] __se_sys_ioctl+0x47/0x170 [ 1881.984404][T32103] do_syscall_64+0xf3/0x230 [ 1881.988949][T32103] ? clear_bhb_loop+0x35/0x90 [ 1881.993656][T32103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.999599][T32103] RIP: 0033:0x7fd639175f19 [ 1882.004038][T32103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1882.023692][T32103] RSP: 002b:00007fd639ffc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1882.032138][T32103] RAX: ffffffffffffffda RBX: 00007fd639305f60 RCX: 00007fd639175f19 [ 1882.040125][T32103] RDX: 0000000020000000 RSI: 00000000c0145401 RDI: 0000000000000003 [ 1882.048110][T32103] RBP: 00007fd639ffc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1882.056114][T32103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.064105][T32103] R13: 000000000000000b R14: 00007fd639305f60 R15: 00007ffc7e3a88f8 [ 1882.072111][T32103] [ 1882.121013][T32103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1882.218525][T31914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1882.270977][T31914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1882.650327][T31913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1882.737675][T31913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1882.814373][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.821602][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1882.906849][T25918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.914099][T25918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.072307][T31916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.094127][T31914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.131893][T32114] netlink: 'syz.0.8043': attribute type 9 has an invalid length. [ 1883.175700][T32114] bond0: entered promiscuous mode [ 1883.191160][T32114] bond_slave_0: entered promiscuous mode [ 1883.206150][T32114] bond_slave_1: entered promiscuous mode [ 1883.223156][T32114] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1883.243884][T32114] bond0: left promiscuous mode [ 1883.248731][T32114] bond_slave_0: left promiscuous mode [ 1883.268267][T32114] bond_slave_1: left promiscuous mode [ 1883.388585][T31913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1883.441163][T31540] Bluetooth: hci14: Opcode 0x1003 failed: -110 [ 1883.441829][ T4487] Bluetooth: hci14: command 0x1003 tx timeout [ 1883.494208][T31916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.636985][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.644318][T16510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.707823][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.715054][T16510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1884.495540][T32123] FAULT_INJECTION: forcing a failure. [ 1884.495540][T32123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.511912][T32123] CPU: 1 UID: 0 PID: 32123 Comm: syz.0.8045 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1884.522377][T32123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1884.532459][T32123] Call Trace: [ 1884.535751][T32123] [ 1884.538690][T32123] dump_stack_lvl+0x241/0x360 [ 1884.543410][T32123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1884.548644][T32123] ? __pfx__printk+0x10/0x10 [ 1884.553261][T32123] ? __pfx_lock_release+0x10/0x10 [ 1884.558323][T32123] should_fail_ex+0x3b0/0x4e0 [ 1884.563040][T32123] _copy_from_user+0x2f/0xe0 [ 1884.567662][T32123] copy_msghdr_from_user+0xae/0x680 [ 1884.572903][T32123] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1884.578756][T32123] __sys_sendmsg+0x23d/0x3a0 [ 1884.583369][T32123] ? __pfx___sys_sendmsg+0x10/0x10 [ 1884.588502][T32123] ? vfs_write+0x7c4/0xc90 [ 1884.593057][T32123] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1884.599413][T32123] ? do_syscall_64+0x100/0x230 [ 1884.604214][T32123] ? do_syscall_64+0xb6/0x230 [ 1884.608942][T32123] do_syscall_64+0xf3/0x230 [ 1884.613501][T32123] ? clear_bhb_loop+0x35/0x90 [ 1884.613538][T32123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.613565][T32123] RIP: 0033:0x7fd639175f19 [ 1884.613583][T32123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.613599][T32123] RSP: 002b:00007fd639ffc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1884.613625][T32123] RAX: ffffffffffffffda RBX: 00007fd639305f60 RCX: 00007fd639175f19 [ 1884.613639][T32123] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 1884.613652][T32123] RBP: 00007fd639ffc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1884.613665][T32123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.613678][T32123] R13: 000000000000000b R14: 00007fd639305f60 R15: 00007ffc7e3a88f8 [ 1884.613707][T32123] [ 1884.668436][T31914] veth0_vlan: entered promiscuous mode [ 1884.746287][T31914] veth1_vlan: entered promiscuous mode [ 1884.850496][T31913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1884.898425][T31914] veth0_macvtap: entered promiscuous mode [ 1884.906663][T31914] veth1_macvtap: entered promiscuous mode [ 1885.034996][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035021][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035033][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035048][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035060][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035073][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035087][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035101][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035114][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035127][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035140][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035154][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035166][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035179][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035192][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035205][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035217][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035231][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035244][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035258][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035270][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035283][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035296][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035309][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.035322][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.035336][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.037191][T31914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1885.053223][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053248][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053259][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053273][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053285][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053299][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053313][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053327][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053340][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053355][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053366][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053379][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053391][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053404][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053416][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053430][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053442][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053455][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053467][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053480][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053491][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053504][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053522][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053535][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.053547][T31914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.053561][T31914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.055076][T31914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1885.098534][T32137] Process accounting resumed [ 1885.116971][T31914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.117011][T31914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.117039][T31914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.117067][T31914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.145277][T31913] veth0_vlan: entered promiscuous mode [ 1885.227697][T31913] veth1_vlan: entered promiscuous mode [ 1885.723395][T31916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1886.361171][T31913] veth0_macvtap: entered promiscuous mode [ 1886.393351][T31913] veth1_macvtap: entered promiscuous mode [ 1886.514594][T26038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1886.543402][T26038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1886.573564][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1886.620949][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.661286][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1886.691027][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.722852][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1886.758749][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.800583][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1886.831054][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.850875][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1886.882833][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.910964][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1886.941066][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.976133][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1887.044549][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.142720][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1887.303518][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.658839][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1887.669478][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.688322][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1887.748427][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.790872][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1887.808198][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.822281][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1887.834552][T32164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8054'. [ 1887.853907][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.890870][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1887.921140][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.949755][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1887.980680][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.009332][T31913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1888.096110][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.144351][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.166293][T32168] Process accounting resumed [ 1888.190523][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.216005][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.249658][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.270692][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.291971][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.315343][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.343532][ T29] audit: type=1326 audit(1721675023.810:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32170 comm="syz.0.8056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd639175f19 code=0x0 [ 1888.375371][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.396958][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.420074][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.442130][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.455313][T32173] fuse: Bad value for 'fd' [ 1888.480994][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.506413][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.535781][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.584173][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.619072][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.651307][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.677111][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.720143][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.746046][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.768672][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.798807][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.848367][T32177] FAULT_INJECTION: forcing a failure. [ 1888.848367][T32177] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.861263][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.891134][T32177] CPU: 1 UID: 0 PID: 32177 Comm: syz.3.8058 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1888.901580][T32177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1888.911635][T32177] Call Trace: [ 1888.914952][T32177] [ 1888.917882][T32177] dump_stack_lvl+0x241/0x360 [ 1888.922569][T32177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1888.927768][T32177] ? __pfx__printk+0x10/0x10 [ 1888.932356][T32177] ? fs_reclaim_acquire+0x93/0x140 [ 1888.937462][T32177] ? __pfx___might_resched+0x10/0x10 [ 1888.942747][T32177] should_fail_ex+0x3b0/0x4e0 [ 1888.947600][T32177] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1888.953317][T32177] should_failslab+0xac/0x100 [ 1888.958004][T32177] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1888.963815][T32177] __kmalloc_noprof+0xd8/0x400 [ 1888.968666][T32177] ? kfree+0x4e/0x360 [ 1888.972652][T32177] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1888.978258][T32177] tomoyo_path_number_perm+0x23a/0x880 [ 1888.983720][T32177] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1888.989353][T32177] ? tomoyo_path_number_perm+0x208/0x880 [ 1888.995012][T32177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1889.001056][T32177] ? sb_end_write+0xe9/0x1c0 [ 1889.005671][T32177] ? vfs_write+0x7c4/0xc90 [ 1889.010101][T32177] ? __pfx_vfs_write+0x10/0x10 [ 1889.014885][T32177] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1889.020888][T32177] security_file_ioctl+0x75/0xb0 [ 1889.025837][T32177] __se_sys_ioctl+0x47/0x170 [ 1889.030432][T32177] do_syscall_64+0xf3/0x230 [ 1889.034948][T32177] ? clear_bhb_loop+0x35/0x90 [ 1889.039622][T32177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.045519][T32177] RIP: 0033:0x7f8f5c975f19 [ 1889.049930][T32177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1889.069567][T32177] RSP: 002b:00007f8f5d677048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1889.078101][T32177] RAX: ffffffffffffffda RBX: 00007f8f5cb05f60 RCX: 00007f8f5c975f19 [ 1889.086100][T32177] RDX: 0000000000000000 RSI: 0000000000005418 RDI: 0000000000000003 [ 1889.094072][T32177] RBP: 00007f8f5d6770a0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.102055][T32177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.110045][T32177] R13: 000000000000000b R14: 00007f8f5cb05f60 R15: 00007ffe76d72aa8 [ 1889.118038][T32177] [ 1889.122905][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.150886][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.151017][T32177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1889.170944][T31913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.200893][T31913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.223003][T31913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1889.244989][T31913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.270914][T31913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.279761][T31913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.331111][T31913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.373270][T26039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1889.413830][T26039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.430626][T26038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.460238][T26038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.526985][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.541441][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.624034][T32202] bridge0: port 3(gretap0) entered blocking state [ 1890.658351][T32202] bridge0: port 3(gretap0) entered disabled state [ 1890.679158][T32202] gretap0: entered allmulticast mode [ 1890.731254][T32202] gretap0: entered promiscuous mode [ 1890.804280][T32202] bridge0: port 3(gretap0) entered blocking state [ 1890.813491][T32202] bridge0: port 3(gretap0) entered forwarding state [ 1891.158664][T31916] veth0_vlan: entered promiscuous mode [ 1891.202984][T31916] veth1_vlan: entered promiscuous mode [ 1891.318563][T31916] veth0_macvtap: entered promiscuous mode [ 1891.329433][T31916] veth1_macvtap: entered promiscuous mode [ 1891.350030][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.376070][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.456041][ T29] audit: type=1326 audit(1721675026.920:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32213 comm="syz.3.8066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c975f19 code=0x0 [ 1891.470962][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.542036][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.556968][T32218] fuse: Bad value for 'fd' [ 1891.590514][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.639706][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.673517][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.715470][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.896536][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.929306][T32222] dlm: no local IP address has been set [ 1891.956742][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.990528][T32222] dlm: cannot start dlm midcomms -107 [ 1892.059099][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.194481][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.410854][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.482719][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.532104][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.576025][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.586560][T32228] FAULT_INJECTION: forcing a failure. [ 1892.586560][T32228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.630916][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.644078][T32228] CPU: 0 UID: 0 PID: 32228 Comm: syz.3.8070 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1892.654528][T32228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1892.664671][T32228] Call Trace: [ 1892.667965][T32228] [ 1892.670909][T32228] dump_stack_lvl+0x241/0x360 [ 1892.675611][T32228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1892.680843][T32228] ? __pfx__printk+0x10/0x10 [ 1892.685462][T32228] ? snprintf+0xda/0x120 [ 1892.689738][T32228] should_fail_ex+0x3b0/0x4e0 [ 1892.694448][T32228] _copy_to_user+0x2f/0xb0 [ 1892.698884][T32228] simple_read_from_buffer+0xca/0x150 [ 1892.704292][T32228] proc_fail_nth_read+0x1e9/0x250 [ 1892.709349][T32228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1892.714926][T32228] ? rw_verify_area+0x520/0x6b0 [ 1892.719808][T32228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1892.725383][T32228] vfs_read+0x204/0xbc0 [ 1892.729577][T32228] ? __pfx_lock_release+0x10/0x10 [ 1892.734693][T32228] ? __pfx_vfs_read+0x10/0x10 [ 1892.739363][T32228] ? __fget_files+0x29/0x470 [ 1892.743952][T32228] ? __fget_files+0x3f6/0x470 [ 1892.748631][T32228] ksys_read+0x1a0/0x2c0 [ 1892.752879][T32228] ? __pfx_ksys_read+0x10/0x10 [ 1892.757641][T32228] ? do_syscall_64+0x100/0x230 [ 1892.762407][T32228] ? do_syscall_64+0xb6/0x230 [ 1892.767091][T32228] do_syscall_64+0xf3/0x230 [ 1892.771592][T32228] ? clear_bhb_loop+0x35/0x90 [ 1892.776263][T32228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.782158][T32228] RIP: 0033:0x7f8f5c9749fc [ 1892.786568][T32228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1892.806174][T32228] RSP: 002b:00007f8f5d677040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1892.814589][T32228] RAX: ffffffffffffffda RBX: 00007f8f5cb05f60 RCX: 00007f8f5c9749fc [ 1892.822577][T32228] RDX: 000000000000000f RSI: 00007f8f5d6770b0 RDI: 0000000000000005 [ 1892.830565][T32228] RBP: 00007f8f5d6770a0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.838559][T32228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1892.846531][T32228] R13: 000000000000000b R14: 00007f8f5cb05f60 R15: 00007ffe76d72aa8 [ 1892.854779][T32228] [ 1892.857915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1892.880984][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.900948][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.924914][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.955398][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.998399][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.054924][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.101108][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.111113][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.127767][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.138673][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.149531][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.159649][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.170585][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.184216][T31916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1893.219861][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.230551][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.240738][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.257906][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.268448][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.279149][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.290623][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.301566][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.314644][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.332586][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.342635][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.356532][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.366627][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.377376][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.387910][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.398525][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.409022][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.426781][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.436727][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.458049][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.488289][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.515041][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.561996][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.621791][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.641317][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.655441][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.666043][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.676825][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.696621][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.717384][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.738997][T31916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1893.780136][T31916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.845522][T31916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.873249][T31916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.900925][T31916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.109905][T26036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1894.146568][T26036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.275932][T26038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1894.334016][T26038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.847733][T32278] dlm: no local IP address has been set [ 1895.853454][T32278] dlm: cannot start dlm midcomms -107 [ 1896.925256][T25918] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1897.461011][T25918] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1897.480699][T25918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.536915][T25918] usb 2-1: config 0 descriptor?? [ 1897.602713][T25918] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input86 [ 1898.825028][T25918] usb 2-1: USB disconnect, device number 104 [ 1899.581249][ T51] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1899.792526][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 1899.822015][ T51] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1899.848052][ T51] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.902564][ T51] usb 5-1: config 0 has no interface number 0 [ 1899.915237][ T51] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1900.028759][ T51] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1900.061527][T32321] dlm: no local IP address has been set [ 1900.067176][T32321] dlm: cannot start dlm midcomms -107 [ 1900.074337][ T51] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1900.085810][ T51] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1900.097475][ T51] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1900.111127][ T51] usb 5-1: Product: syz [ 1900.116495][ T51] usb 5-1: SerialNumber: syz [ 1900.133738][ T51] usb 5-1: config 0 descriptor?? [ 1900.371564][ T51] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input87 [ 1901.323404][T32327] dccp_close: ABORT with 120 bytes unread [ 1902.181531][T16510] usb 5-1: USB disconnect, device number 5 [ 1902.382281][T32353] FAULT_INJECTION: forcing a failure. [ 1902.382281][T32353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1902.450998][T32353] CPU: 0 UID: 0 PID: 32353 Comm: syz.1.8103 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1902.461473][T32353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1902.471585][T32353] Call Trace: [ 1902.474885][T32353] [ 1902.477825][T32353] dump_stack_lvl+0x241/0x360 [ 1902.482526][T32353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1902.487751][T32353] ? __pfx__printk+0x10/0x10 [ 1902.492360][T32353] ? __pfx_lock_release+0x10/0x10 [ 1902.497414][T32353] should_fail_ex+0x3b0/0x4e0 [ 1902.502122][T32353] _copy_to_iter+0x1f6/0x1960 [ 1902.506826][T32353] ? __virt_addr_valid+0x183/0x530 [ 1902.512691][T32353] ? __pfx_lock_release+0x10/0x10 [ 1902.517834][T32353] ? skb_recv_datagram+0x26c/0x310 [ 1902.522975][T32353] ? __pfx__copy_to_iter+0x10/0x10 [ 1902.528093][T32353] ? __virt_addr_valid+0x183/0x530 [ 1902.533203][T32353] ? __virt_addr_valid+0x183/0x530 [ 1902.538316][T32353] ? __virt_addr_valid+0x45f/0x530 [ 1902.543446][T32353] ? __check_object_size+0x49c/0x900 [ 1902.548928][T32353] raw_recvmsg+0x228/0x700 [ 1902.553364][T32353] ? __pfx_raw_recvmsg+0x10/0x10 [ 1902.558305][T32353] ? get_pid_task+0x23/0x1f0 [ 1902.562976][T32353] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1902.568256][T32353] ? security_socket_recvmsg+0x90/0xb0 [ 1902.573711][T32353] ? __pfx_raw_recvmsg+0x10/0x10 [ 1902.578647][T32353] sock_recvmsg+0x22f/0x280 [ 1902.583152][T32353] sock_read_iter+0x2ca/0x3e0 [ 1902.588084][T32353] ? __pfx_sock_read_iter+0x10/0x10 [ 1902.593381][T32353] ? bpf_lsm_file_permission+0x9/0x10 [ 1902.598751][T32353] ? security_file_permission+0x7f/0xa0 [ 1902.604304][T32353] vfs_read+0x9bd/0xbc0 [ 1902.608456][T32353] ? __pfx_lock_release+0x10/0x10 [ 1902.613491][T32353] ? __pfx_vfs_read+0x10/0x10 [ 1902.618179][T32353] ksys_read+0x1a0/0x2c0 [ 1902.622414][T32353] ? __pfx_ksys_read+0x10/0x10 [ 1902.627168][T32353] ? do_syscall_64+0x100/0x230 [ 1902.631958][T32353] ? do_syscall_64+0xb6/0x230 [ 1902.636635][T32353] do_syscall_64+0xf3/0x230 [ 1902.641162][T32353] ? clear_bhb_loop+0x35/0x90 [ 1902.645947][T32353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.651855][T32353] RIP: 0033:0x7f1ea8d75f19 [ 1902.656271][T32353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1902.675959][T32353] RSP: 002b:00007f1ea9a85048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1902.684369][T32353] RAX: ffffffffffffffda RBX: 00007f1ea8f05f60 RCX: 00007f1ea8d75f19 [ 1902.692710][T32353] RDX: 0000000000000ffb RSI: 00000000200037c0 RDI: 0000000000000003 [ 1902.700671][T32353] RBP: 00007f1ea9a850a0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.708726][T32353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.716693][T32353] R13: 000000000000000b R14: 00007f1ea8f05f60 R15: 00007ffd4ef97558 [ 1902.724672][T32353] [ 1904.782682][ T29] audit: type=1326 audit(1721675040.220:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32364 comm="syz.1.8107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ea8d75f19 code=0x0 [ 1905.823682][T32389] dlm: no local IP address has been set [ 1905.829286][T32389] dlm: cannot start dlm midcomms -107 [ 1905.856601][T32387] syzkaller0: entered allmulticast mode [ 1909.130512][ T29] audit: type=1326 audit(1721675044.570:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32422 comm="syz.0.8122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd639175f19 code=0x0 [ 1909.888469][T32435] usb usb9: check_ctrlrecip: process 32435 (syz.0.8125) requesting ep 01 but needs 81 [ 1909.932406][T32435] usb usb9: usbfs: process 32435 (syz.0.8125) did not claim interface 0 before use [ 1909.969223][T32435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8125'. [ 1913.421121][ T29] audit: type=1326 audit(1721675048.800:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32457 comm="syz.3.8130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c975f19 code=0x0 [ 1914.420623][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.433164][T32474] dlm: no local IP address has been set [ 1914.438965][T32474] dlm: cannot start dlm midcomms -107 [ 1914.450958][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.697173][T32472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1915.298709][ T29] audit: type=1326 audit(1721675050.760:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32478 comm="syz.1.8135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ea8d75f19 code=0x0 [ 1916.748056][T32504] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8141'. [ 1916.865180][T32504] Κό: entered promiscuous mode [ 1916.981949][T32508] netlink: 'syz.3.8142': attribute type 5 has an invalid length. [ 1917.029542][T32514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1917.056741][T32514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1917.292062][T32523] overlayfs: overlapping lowerdir path [ 1917.554826][T32527] FAULT_INJECTION: forcing a failure. [ 1917.554826][T32527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1917.599586][T32527] CPU: 1 UID: 0 PID: 32527 Comm: syz.4.8147 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1917.610118][T32527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1917.620263][T32527] Call Trace: [ 1917.623542][T32527] [ 1917.626463][T32527] dump_stack_lvl+0x241/0x360 [ 1917.631139][T32527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1917.636346][T32527] ? __pfx__printk+0x10/0x10 [ 1917.641138][T32527] ? __pfx_lock_release+0x10/0x10 [ 1917.646191][T32527] should_fail_ex+0x3b0/0x4e0 [ 1917.650877][T32527] _copy_from_user+0x2f/0xe0 [ 1917.655489][T32527] copy_msghdr_from_user+0xae/0x680 [ 1917.660696][T32527] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1917.666502][T32527] __sys_sendmsg+0x23d/0x3a0 [ 1917.671132][T32527] ? __pfx___sys_sendmsg+0x10/0x10 [ 1917.676234][T32527] ? vfs_write+0x7c4/0xc90 [ 1917.680654][T32527] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1917.687094][T32527] ? do_syscall_64+0x100/0x230 [ 1917.691867][T32527] ? do_syscall_64+0xb6/0x230 [ 1917.696545][T32527] do_syscall_64+0xf3/0x230 [ 1917.701043][T32527] ? clear_bhb_loop+0x35/0x90 [ 1917.705714][T32527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.711630][T32527] RIP: 0033:0x7f0901575f19 [ 1917.716054][T32527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1917.735666][T32527] RSP: 002b:00007f0900fff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1917.744139][T32527] RAX: ffffffffffffffda RBX: 00007f0901705f60 RCX: 00007f0901575f19 [ 1917.752114][T32527] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1917.760092][T32527] RBP: 00007f0900fff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1917.768075][T32527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1917.776158][T32527] R13: 000000000000000b R14: 00007f0901705f60 R15: 00007fff7ea84ec8 [ 1917.784148][T32527] [ 1917.866665][T32530] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.8146'. [ 1918.283253][T32536] dlm: no local IP address has been set [ 1918.288853][T32536] dlm: cannot start dlm midcomms -107 [ 1919.751749][T32547] xt_connbytes: Forcing CT accounting to be enabled [ 1921.166309][T32559] Invalid logical block size (32) [ 1921.232775][T12760] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1921.446047][T12760] usb 5-1: Using ep0 maxpacket: 8 [ 1921.498496][T12760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.541023][T12760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.573296][T12760] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1921.622014][T12760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.666463][T12760] usb 5-1: config 0 descriptor?? [ 1922.029475][ T29] audit: type=1326 audit(1721675057.490:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32566 comm="syz.0.8161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd639175f19 code=0x0 [ 1922.656153][T12760] usbhid 5-1:0.0: can't add hid device: -71 [ 1922.668701][T12760] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1922.678939][T12760] usb 5-1: USB disconnect, device number 6 [ 1923.030938][T32591] dlm: no local IP address has been set [ 1923.036965][T32591] dlm: cannot start dlm midcomms -107 [ 1924.104182][T32593] mkiss: ax0: crc mode is auto. [ 1924.567881][ T29] audit: type=1326 audit(1721675060.030:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32611 comm="syz.1.8171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ea8d75f19 code=0x0 [ 1924.711581][T31849] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1924.933199][T31849] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1924.977261][T31849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.017721][T31849] usb 3-1: config 0 descriptor?? [ 1925.067566][T31849] cp210x 3-1:0.0: cp210x converter detected [ 1926.092062][T31849] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1926.144059][T31849] cp210x 3-1:0.0: querying part number failed [ 1926.178069][T31849] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1926.222824][T31849] usb 3-1: USB disconnect, device number 103 [ 1926.253024][T31849] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1926.295943][T31849] cp210x 3-1:0.0: device disconnected [ 1926.390408][T32629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1926.431720][T32629] team0: Port device bond0 added [ 1926.584510][T32636] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8177'. [ 1926.775539][T31540] Bluetooth: hci18: link tx timeout [ 1926.783998][T31540] Bluetooth: hci18: killing stalled connection 11:aa:aa:aa:aa:aa [ 1926.912164][T32644] dlm: no local IP address has been set [ 1926.917766][T32644] dlm: cannot start dlm midcomms -107 [ 1927.593911][T31541] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1927.609079][T31541] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1927.622498][T31541] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1927.634233][T31541] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1927.661459][T31541] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1927.669208][T31541] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1927.782388][ T29] audit: type=1326 audit(1721675064.242:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32657 comm="syz.4.8185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0901575f19 code=0x0 [ 1928.365710][T32675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8188'. [ 1928.383335][T32675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8188'. [ 1928.455574][T32675] geneve2: entered promiscuous mode [ 1928.484389][T32675] geneve2: entered allmulticast mode [ 1928.613069][T32676] mkiss: ax0: crc mode is auto. [ 1928.830197][ T29] audit: type=1326 audit(1721675065.282:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1928.881141][ T4487] Bluetooth: hci18: command 0x0406 tx timeout [ 1928.928912][T32656] chnl_net:caif_netlink_parms(): no params data found [ 1928.977025][ T29] audit: type=1326 audit(1721675065.282:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1929.090681][T12760] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1929.100406][ T29] audit: type=1326 audit(1721675065.322:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1929.179786][ T29] audit: type=1326 audit(1721675065.322:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1929.214654][T32694] xt_connbytes: Forcing CT accounting to be enabled [ 1929.352931][T12760] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1929.391013][T12760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.424461][T12760] usb 3-1: config 0 descriptor?? [ 1929.481952][ T29] audit: type=1326 audit(1721675065.322:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1929.504339][ T29] audit: type=1326 audit(1721675065.322:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1929.714564][T12760] cp210x 3-1:0.0: cp210x converter detected [ 1929.944806][ T29] audit: type=1326 audit(1721675065.322:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1929.955235][ T4487] Bluetooth: hci14: command tx timeout [ 1930.164693][ T29] audit: type=1326 audit(1721675065.322:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1930.395631][ T29] audit: type=1326 audit(1721675065.332:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32689 comm="syz.1.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1ea8d75f19 code=0x7ffc0000 [ 1931.656246][T12760] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1931.672330][T12760] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1931.705761][T12760] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1931.734841][T12760] usb 3-1: USB disconnect, device number 104 [ 1931.761911][T12760] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1931.764240][T32656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.797301][T12760] cp210x 3-1:0.0: device disconnected [ 1931.827066][T32656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.135045][T31540] Bluetooth: hci14: command tx timeout [ 1933.504097][T32656] bridge_slave_0: entered allmulticast mode [ 1933.518445][T32656] bridge_slave_0: entered promiscuous mode [ 1933.704662][T32656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.725569][T32656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.732932][T32656] bridge_slave_1: entered allmulticast mode [ 1933.786738][T32656] bridge_slave_1: entered promiscuous mode [ 1934.101122][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 1934.101141][ T29] audit: type=1326 audit(1721675070.532:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32726 comm="syz.0.8199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd639175f19 code=0x0 [ 1934.186078][T32731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8200'. [ 1934.199309][T31540] Bluetooth: hci14: command tx timeout [ 1934.235041][T32656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.329016][T32734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1934.345168][T32656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.787180][T32656] team0: Port device team_slave_0 added [ 1934.862406][T32656] team0: Port device team_slave_1 added [ 1935.205321][T32656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1935.235051][T32656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.347636][T32656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.406418][T32656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1935.445495][T32656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.489727][ C0] eth0: bad gso: type: 1, size: 1408 [ 1935.518764][T32656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.714420][T32746] nullb0: [POWERTEC] p1 p2 p3 [ 1935.731330][T32746] nullb0: p1 start 1986356271 is beyond EOD, truncated [ 1935.781989][T32746] nullb0: p2 size 536871424 extends beyond EOD, truncated [ 1935.806162][T32746] nullb0: p3 start 1819635247 is beyond EOD, truncated [ 1935.893866][ T4247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.260859][ T4247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.292079][T31540] Bluetooth: hci14: command tx timeout [ 1936.386797][ T29] audit: type=1326 audit(1721675072.806:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32762 comm="syz.0.8211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd639175f19 code=0x0 [ 1937.616180][ T4247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.675603][ T312] xt_cgroup: invalid path, errno=-2 [ 1937.687521][T32656] hsr_slave_0: entered promiscuous mode [ 1937.719702][T32656] hsr_slave_1: entered promiscuous mode [ 1937.743394][T32656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1937.769556][T32656] Cannot create hsr debugfs directory [ 1937.877648][ T4247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.037693][ T51] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1938.228023][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 1938.252531][ T51] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1938.267456][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.302504][ T51] usb 2-1: config 0 descriptor?? [ 1938.488163][ T4247] bridge_slave_1: left allmulticast mode [ 1938.503825][ T4247] bridge_slave_1: left promiscuous mode [ 1938.536249][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.565030][ T4247] bridge_slave_0: left allmulticast mode [ 1938.593503][ T4247] bridge_slave_0: left promiscuous mode [ 1938.599363][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.976806][ T328] Process accounting resumed [ 1940.255927][ T332] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8221'. [ 1941.386465][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1941.446286][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1941.496996][ T4247] bond0 (unregistering): Released all slaves [ 1941.739195][ T332] Κό: entered promiscuous mode [ 1941.802283][ T322] netlink: 'syz.1.8217': attribute type 6 has an invalid length. [ 1941.810384][ T322] netlink: 'syz.1.8217': attribute type 7 has an invalid length. [ 1941.837340][ T322] netlink: 'syz.1.8217': attribute type 8 has an invalid length. [ 1942.001993][ T51] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1942.015167][ T51] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1942.190522][ T4247] Κό: left promiscuous mode [ 1942.260134][ T51] usb 2-1: USB disconnect, device number 105 [ 1943.330091][ T356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1943.622548][ T367] FAULT_INJECTION: forcing a failure. [ 1943.622548][ T367] name failslab, interval 1, probability 0, space 0, times 0 [ 1943.635626][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz.1.8233 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1943.645895][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1943.655975][ T367] Call Trace: [ 1943.659268][ T367] [ 1943.662216][ T367] dump_stack_lvl+0x241/0x360 [ 1943.666915][ T367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1943.672129][ T367] ? __pfx__printk+0x10/0x10 [ 1943.676753][ T367] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 1943.682672][ T367] ? __pfx___might_resched+0x10/0x10 [ 1943.687989][ T367] should_fail_ex+0x3b0/0x4e0 [ 1943.692797][ T367] ? sock_alloc_inode+0x28/0xc0 [ 1943.697685][ T367] should_failslab+0xac/0x100 [ 1943.702389][ T367] ? sock_alloc_inode+0x28/0xc0 [ 1943.707269][ T367] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 1943.713020][ T367] sock_alloc_inode+0x28/0xc0 [ 1943.717720][ T367] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1943.723123][ T367] new_inode_pseudo+0x69/0x1a0 [ 1943.727915][ T367] do_accept+0x16e/0x6c0 [ 1943.732189][ T367] ? __pfx_do_accept+0x10/0x10 [ 1943.737006][ T367] __sys_accept4+0x11e/0x1c0 [ 1943.741631][ T367] ? __pfx___sys_accept4+0x10/0x10 [ 1943.746783][ T367] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1943.753232][ T367] ? do_syscall_64+0x100/0x230 [ 1943.758029][ T367] __x64_sys_accept4+0x9a/0xb0 [ 1943.762822][ T367] do_syscall_64+0xf3/0x230 [ 1943.767351][ T367] ? clear_bhb_loop+0x35/0x90 [ 1943.772059][ T367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.777986][ T367] RIP: 0033:0x7f1ea8d75f19 [ 1943.782426][ T367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1943.802067][ T367] RSP: 002b:00007f1ea9a64048 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1943.810511][ T367] RAX: ffffffffffffffda RBX: 00007f1ea8f06038 RCX: 00007f1ea8d75f19 [ 1943.818525][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1943.826587][ T367] RBP: 00007f1ea9a640a0 R08: 0000000000000000 R09: 0000000000000000 [ 1943.834596][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1943.842617][ T367] R13: 000000000000006e R14: 00007f1ea8f06038 R15: 00007ffd4ef97558 [ 1943.850631][ T367] [ 1943.975215][ T356] Invalid ELF header magic: != ELF [ 1944.072874][ T4247] hsr_slave_0: left promiscuous mode [ 1944.097848][ T4247] hsr_slave_1: left promiscuous mode [ 1944.117965][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1944.139504][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1944.164857][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1944.190890][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1944.423241][ T4247] veth1_macvtap: left promiscuous mode [ 1944.430095][ T4247] veth0_macvtap: left promiscuous mode [ 1944.437254][ T4247] veth1_vlan: left promiscuous mode [ 1944.463934][ T4247] veth0_vlan: left promiscuous mode [ 1945.318246][ T379] FAULT_INJECTION: forcing a failure. [ 1945.318246][ T379] name failslab, interval 1, probability 0, space 0, times 0 [ 1945.359096][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz.0.8236 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1945.369425][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1945.379510][ T379] Call Trace: [ 1945.382818][ T379] [ 1945.385770][ T379] dump_stack_lvl+0x241/0x360 [ 1945.390490][ T379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1945.395722][ T379] ? __pfx__printk+0x10/0x10 [ 1945.400356][ T379] should_fail_ex+0x3b0/0x4e0 [ 1945.405075][ T379] should_failslab+0xac/0x100 [ 1945.409781][ T379] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 1945.416138][ T379] ? nf_ct_ext_add+0x1a2/0x3e0 [ 1945.421025][ T379] krealloc_noprof+0x7d/0x120 [ 1945.425738][ T379] nf_ct_ext_add+0x1a2/0x3e0 [ 1945.430364][ T379] init_conntrack+0x7da/0x1310 [ 1945.435167][ T379] ? __pfx_init_conntrack+0x10/0x10 [ 1945.440413][ T379] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 1945.446420][ T379] ? __local_bh_enable_ip+0x168/0x200 [ 1945.451828][ T379] nf_conntrack_in+0xd59/0x1880 [ 1945.456730][ T379] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1945.462065][ T379] ? ipt_do_table+0x312/0x1860 [ 1945.466835][ T379] ? __pfx_ipt_do_table+0x10/0x10 [ 1945.471865][ T379] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 1945.477335][ T379] ? ipv4_conntrack_local+0x120/0x200 [ 1945.482711][ T379] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 1945.488424][ T379] nf_hook_slow+0xc3/0x220 [ 1945.492835][ T379] ? __pfx_dst_output+0x10/0x10 [ 1945.497682][ T379] nf_hook+0x2c4/0x450 [ 1945.501749][ T379] ? nf_hook+0x9e/0x450 [ 1945.505900][ T379] ? __pfx_nf_hook+0x10/0x10 [ 1945.510495][ T379] ? __pfx_dst_output+0x10/0x10 [ 1945.515342][ T379] ? ip_setup_cork+0x4ae/0x8b0 [ 1945.520103][ T379] ? ip_fast_csum+0x1f0/0x2b0 [ 1945.524779][ T379] __ip_local_out+0x3d9/0x4e0 [ 1945.529472][ T379] ? __pfx_dst_output+0x10/0x10 [ 1945.534338][ T379] ip_push_pending_frames+0x95/0x150 [ 1945.539633][ T379] raw_sendmsg+0x1ac5/0x2490 [ 1945.544231][ T379] ? raw_sendmsg+0xc32/0x2490 [ 1945.548945][ T379] ? __pfx_raw_sendmsg+0x10/0x10 [ 1945.553909][ T379] ? iovec_from_user+0x61/0x240 [ 1945.558774][ T379] ? __pfx_lock_release+0x10/0x10 [ 1945.563807][ T379] ? inet_sendmsg+0x330/0x390 [ 1945.568480][ T379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1945.573771][ T379] ? security_socket_sendmsg+0x87/0xb0 [ 1945.579225][ T379] __sock_sendmsg+0x1a6/0x270 [ 1945.583905][ T379] ____sys_sendmsg+0x525/0x7d0 [ 1945.588695][ T379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1945.594001][ T379] __sys_sendmsg+0x2b0/0x3a0 [ 1945.598596][ T379] ? __pfx___sys_sendmsg+0x10/0x10 [ 1945.603703][ T379] ? vfs_write+0x7c4/0xc90 [ 1945.608147][ T379] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1945.614475][ T379] ? do_syscall_64+0x100/0x230 [ 1945.619237][ T379] ? do_syscall_64+0xb6/0x230 [ 1945.623910][ T379] do_syscall_64+0xf3/0x230 [ 1945.628410][ T379] ? clear_bhb_loop+0x35/0x90 [ 1945.633080][ T379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.638970][ T379] RIP: 0033:0x7fd639175f19 [ 1945.643383][ T379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1945.662990][ T379] RSP: 002b:00007fd639ffc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1945.671403][ T379] RAX: ffffffffffffffda RBX: 00007fd639305f60 RCX: 00007fd639175f19 [ 1945.679371][ T379] RDX: 0000000000000000 RSI: 0000000020003a80 RDI: 0000000000000003 [ 1945.687335][ T379] RBP: 00007fd639ffc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1945.695397][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1945.703362][ T379] R13: 000000000000000b R14: 00007fd639305f60 R15: 00007ffc7e3a88f8 [ 1945.711349][ T379] [ 1947.710286][ T402] befs: (nullb0): No write support. Marking filesystem read-only [ 1947.734864][ T402] befs: (nullb0): invalid magic header [ 1947.877565][ T402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8243'. [ 1948.112946][ T403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1948.279062][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1948.525554][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1950.134175][ T4487] Bluetooth: hci17: command 0x0406 tx timeout [ 1951.259177][ T392] vlan2: entered promiscuous mode [ 1951.275644][ T392] bridge0: entered promiscuous mode [ 1951.291322][ T392] vlan2: entered allmulticast mode [ 1951.308402][ T392] bridge0: entered allmulticast mode [ 1951.342571][ T409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8245'. [ 1951.586445][T32656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1952.181477][ T4487] Bluetooth: hci17: Controller not accepting commands anymore: ncmd = 0 [ 1952.190833][ T4487] Bluetooth: hci17: Injecting HCI hardware error event [ 1952.205164][ T4487] Bluetooth: hci17: hardware error 0x00 [ 1978.573828][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-...D } 2635 jiffies s: 98569 root: 0x1/. [ 1978.606810][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 1978.632540][ T19] Sending NMI from CPU 1 to CPUs 0: [ 1978.637803][ C0] NMI backtrace for cpu 0 [ 1978.637819][ C0] CPU: 0 UID: 0 PID: 31916 Comm: syz-executor Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1978.637839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1978.637849][ C0] RIP: 0010:__netif_schedule+0x2b1/0x310 [ 1978.637878][ C0] Code: 4d 85 e4 75 16 e8 6f 2c 3d f8 eb 15 e8 68 2c 3d f8 e8 43 ef 31 02 4d 85 e4 74 ea e8 59 2c 3d f8 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 44 35 00 00 00 00 00 66 43 c7 44 35 09 00 00 43 c6 44 35 0b [ 1978.637891][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00000046 [ 1978.637906][ C0] RAX: ffffffff89565344 RBX: 0000000000000001 RCX: ffff888063df1e00 [ 1978.637919][ C0] RDX: 0000000080010000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1978.637929][ C0] RBP: ffffc90000007c80 R08: ffffffff8956533a R09: 1ffff1100be4822b [ 1978.637942][ C0] R10: dffffc0000000000 R11: ffffed100be4822c R12: ffff88805f241000 [ 1978.637954][ C0] R13: dffffc0000000000 R14: 1ffff92000000f78 R15: ffff88805f241300 [ 1978.637966][ C0] FS: 00005555889ca500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1978.637980][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1978.637991][ C0] CR2: 00007fff7ea83ff8 CR3: 000000007ae5c000 CR4: 00000000003506f0 [ 1978.638006][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1978.638015][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1978.638026][ C0] Call Trace: [ 1978.638034][ C0] [ 1978.638042][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1978.638066][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1978.638090][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1978.638113][ C0] ? nmi_handle+0x2a/0x5a0 [ 1978.638137][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1978.638156][ C0] ? nmi_handle+0x14f/0x5a0 [ 1978.638171][ C0] ? nmi_handle+0x2a/0x5a0 [ 1978.638188][ C0] ? __netif_schedule+0x2b1/0x310 [ 1978.638210][ C0] ? default_do_nmi+0x63/0x160 [ 1978.638227][ C0] ? exc_nmi+0x123/0x1f0 [ 1978.638241][ C0] ? end_repeat_nmi+0xf/0x53 [ 1978.638260][ C0] ? __netif_schedule+0xba/0x310 [ 1978.638281][ C0] ? __netif_schedule+0xc4/0x310 [ 1978.638305][ C0] ? __netif_schedule+0x2b1/0x310 [ 1978.638328][ C0] ? __netif_schedule+0x2b1/0x310 [ 1978.638352][ C0] ? __netif_schedule+0x2b1/0x310 [ 1978.638375][ C0] [ 1978.638380][ C0] [ 1978.638387][ C0] ? __pfx_lock_release+0x10/0x10 [ 1978.638413][ C0] ? __pfx___netif_schedule+0x10/0x10 [ 1978.638438][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1978.638457][ C0] ? taprio_set_budgets+0x32c/0x370 [ 1978.638482][ C0] ? advance_sched+0xa02/0xca0 [ 1978.638503][ C0] ? advance_sched+0xa02/0xca0 [ 1978.638526][ C0] advance_sched+0xaa9/0xca0 [ 1978.638556][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1978.638578][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 1978.638597][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1978.638628][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1978.638646][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1978.638671][ C0] hrtimer_interrupt+0x396/0x990 [ 1978.638701][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1978.638726][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1978.638746][ C0] [ 1978.638752][ C0] [ 1978.638758][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1978.638783][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 1978.638804][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0a e5 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1978.638817][ C0] RSP: 0018:ffffc9000ce37c20 EFLAGS: 00000206 [ 1978.638831][ C0] RAX: 0000000000000001 RBX: 1ffff920019c6f90 RCX: 10f6e9dc8ec52100 [ 1978.638842][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcae720 RDI: ffffffff8c1fd0c0 [ 1978.638854][ C0] RBP: ffffc9000ce37d78 R08: ffffffff92fcf817 R09: 1ffffffff25f9f02 [ 1978.638867][ C0] R10: dffffc0000000000 R11: fffffbfff25f9f03 R12: 1ffff920019c6f8c [ 1978.638879][ C0] R13: dffffc0000000000 R14: ffffc9000ce37c80 R15: 0000000000000246 [ 1978.638905][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1978.638926][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1978.638950][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 1978.638967][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1978.638989][ C0] ? do_unlinkat+0x7b0/0x830 [ 1978.639005][ C0] ? fs_reclaim_acquire+0x93/0x140 [ 1978.639023][ C0] ? getname_flags+0xb7/0x540 [ 1978.639042][ C0] fs_reclaim_acquire+0xaf/0x140 [ 1978.639059][ C0] ? fs_reclaim_acquire+0x93/0x140 [ 1978.639077][ C0] kmem_cache_alloc_noprof+0x3d/0x2a0 [ 1978.639101][ C0] getname_flags+0xb7/0x540 [ 1978.639123][ C0] user_path_at+0x24/0x60 [ 1978.639147][ C0] __x64_sys_umount+0xf1/0x170 [ 1978.639162][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 1978.639178][ C0] ? do_syscall_64+0x100/0x230 [ 1978.639200][ C0] ? do_syscall_64+0xb6/0x230 [ 1978.639222][ C0] do_syscall_64+0xf3/0x230 [ 1978.639242][ C0] ? clear_bhb_loop+0x35/0x90 [ 1978.639259][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.639283][ C0] RIP: 0033:0x7f0901577247 [ 1978.639297][ C0] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1978.639310][ C0] RSP: 002b:00007fff7ea840d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1978.639325][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0901577247 [ 1978.639337][ C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7ea84190 [ 1978.639347][ C0] RBP: 00007fff7ea84190 R08: 0000000000000000 R09: 0000000000000000 [ 1978.639358][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7ea85250 [ 1978.639369][ C0] R13: 00007f09015e344c R14: 00005555889dd590 R15: 00000000001db947 [ 1978.639389][ C0] [ 1983.563768][T22626] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1983.578642][T22626] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1983.587867][T22626] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1983.597661][T22626] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1983.605482][T22626] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1983.613938][T22626] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2