last executing test programs: 9.886861576s ago: executing program 1 (id=232): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r4, 0x164, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10) mmap$snddsp_control(&(0x7f0000001000/0x4000)=nil, 0x1000, 0x100000a, 0x8012, 0xffffffffffffffff, 0x83000000) 9.861870722s ago: executing program 0 (id=234): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x5b16, &(0x7f0000000040)) 6.234300095s ago: executing program 1 (id=243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000001c00)=ANY=[@ANYBLOB="18080000d0ff00000000000000002000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000000095000000000000003e0a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.107514007s ago: executing program 4 (id=244): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80), 0x0, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x3b, 0x2c}, 0x44004) 6.029984274s ago: executing program 1 (id=246): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05690200000000000109022400010000000009040400010300000009210000000122070009058103"], 0x0) r1 = gettid() tkill(r1, 0x12) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x8, 0x3, "02b51112"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14}}, 0x9c}}, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x7d, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xed, 0x3a, 0x1}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x1, 0x9, 0xd, 0x8}, 0x10f, &(0x7f0000000440)={0x5, 0xf, 0x10f, 0x4, [@generic={0xf6, 0x10, 0x1, "fa744bbe3e4be39de37aa463b6f2d1a5d714640edcaf5b3ae2d802a4826b4403dcfcfa92fcfc2c7db741f9d0f7814d645dd82623e1c87f15b1a7382cced137212013b96eaf8e43b1949f297a4045cf4e9eb1933c09a0c0b598d95d874ea2be9fb19a241763eea8ea205cf1a777a4b686414432ac8373c3baf803c7281dfc4b74351fe6106f886a797164f8053f2e7508fadce9735c25467c3290485545cc9c9308c153746e861c8a8f5f2f4e3c8c6c28e1d3e8600c320378106258f1f209bac5b14cc392986c77437e5c54916fdd78b0fd3e23e40bf4f5154c8720ecebe53fef4cdda2361438ae0fd5f9eed50a5634f6683731"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x8, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xe, 0x2, 0x3c}]}, 0x5, [{0xdd, &(0x7f0000000180)=@string={0xdd, 0x3, "98fcf62ddec09205a4c03da3bafebb3da8e9b98c6c182b777cb957e4316fa86fcbff9693e10f52b6dff86e2df561c6d3d09b38fea22e654c1ebff658100b047c9c47d84699325b5069f54d6e85317cfcf3f90baf8dc4cc7641ab318737de623bd74c67d6d2eaeef427a39696406700bce629993bf1f5964fa514ace1f44c1b681ba2e7315486eeb233ed880e62c3c5f7b5e8efbbc285be1fe314eac35a7390af5364f3b91891b711f1c9c12be2706237e04d2172d39313e9b050777b64d82cde1d44dc4d160e9172690094c7b434e1ba7239db72be014c42c35c0e"}}, {0x5d, &(0x7f00000002c0)=@string={0x5d, 0x3, "44afdfe722938338811cf0bd35540cbc38f1fcc840350411e5a2cba3455710252a301b44ee0cedd81916ab76ccbb13e8d0a7d093d407a45d2b9dc6372c92632105caca62fdea5a178611801746d8867c6a404a54d22df3f099599d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x809}}, {0x36, &(0x7f0000000580)=@string={0x36, 0x3, "da7c4f085998426a43955fd907aaee1e65077ee159cc202f905544e127e9e35e550916845ceb06d686612da089c7cd10d785374f"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000a00837967e"], 0x0}, 0x0) 5.944942769s ago: executing program 4 (id=247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000000)) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"10001f00", 0x5, 0x1, 0x0, 0x2, 0xfff, "c6100540f81210081bdc601425a82c", "f38e08ab", "0100", "5b0d5cdb", ["f2eac802849c38f821ce4b9b", '\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', "e1fcf1e2247d00", "e3200dd64a68d9fa035f03c7"]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/181, 0xb5) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) chdir(&(0x7f0000001180)='./bus\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.429946548s ago: executing program 4 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x34}}, 0x1c) (async) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="901240c26659aa66cdbf4f8f9f57ad7070c857acb9e3d346635baf03a38eef5a4028", 0x22}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a4ad4fcd2b7bfd0b2f4a75ccee9e3bd7cd3fb7c6ce850046ed2a07c53d86bdf1db172d", 0x23}], 0x1}}], 0x2, 0xc8040) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a008000dcd19a9974b0843c15ab2ab304da2cf5e0afab3891663daaf16bd3b81ba3cc7e9c4144c416b405067b692f1954d30a74ed6381c3c1a23c180cd16dd335ad929196381d3597b95304e187c58626c9a964cdf615d5d0bec024b6c6af701840c36760e3be66ae072523f99ff45fe4c1e6bd51f3012b7965fc9c6699dc6a65806af1da5d6b4e5d6a6678250fef9d6a378067", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x38}}, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x4, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x4000800) (async) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x6) (async, rerun: 64) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50) (rerun: 64) listen(r3, 0x0) (async, rerun: 32) accept$inet6(r3, 0x0, 0x0) (rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e24000000002e003a000000003a000000000000005f02000000200002000a0000000000000cff010000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) (async) r8 = syz_open_pts(0xffffffffffffffff, 0x406002) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) (async) fcntl$setlease(r0, 0x400, 0x2) 4.67801723s ago: executing program 0 (id=251): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x6c}, @TCA_FQ_QUANTUM={0x8}]}}, @qdisc_kind_options=@q_multiq={{}, {0x0, 0x2, {0x1, 0xa}}}, @TCA_RATE={0x0, 0x5, {0x4, 0x2e}}, @TCA_RATE={0x0, 0x5, {0xe7, 0xff}}, @TCA_RATE={0x0, 0x5, {0x20, 0x4f}}]}, 0x48}}, 0x48040) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, r3, 0x7, 0x500, 0xfffffffc, 0x7, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x3, 0x5, 0x4cab, 0xe176, 0xfffe, 0x0, 0x3f, 0x0, "fe1d0e223ede04a6a770f5dbbd0b0bd17b480240438ece397736ec0268208f7d"}}) socket$packet(0x11, 0x3, 0x300) 4.659983493s ago: executing program 3 (id=252): ioperm(0x5, 0x6, 0x800000000001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000009180)=ANY=[], 0x31) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x100000001, 0x22100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10300}], 0x0) fanotify_mark(0xffffffffffffffff, 0xff80, 0x8000021, 0xffffffffffffffff, 0x0) 4.545281172s ago: executing program 2 (id=253): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000dc769844c80fa13f9500000000000000bf9100000000001dcd020000010000008500100084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) fstat(r5, &(0x7f00000029c0)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r6, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4008000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x0, [0x0, 0x2]}}) readv(r9, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r10}, 0x8) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r11, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000280)="d7", 0x1}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open$dir(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x98) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) 4.374861516s ago: executing program 4 (id=254): r0 = socket$netlink(0x10, 0x3, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@remote, @null, @rose, @bcast, @netrom, @null, @remote, @bcast]}, &(0x7f0000000080)=0x48, 0x80000) sendmsg$inet(r0, 0x0, 0x20048011) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r0, &(0x7f0000000400)="899667377b8bda4ae38b17d8373ec3c2218d04647e7a778338e39ae37bc31157aaf92ac80d12761c7a599620d07549d08c23ecc99997e71c69d03d0d5f02e1dde4fb8ae919f2131f08d83652", 0x4c) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000280)=0x0) timer_create(0x3, &(0x7f0000000480)={0x0, 0xf, 0x2, @tid=r5}, &(0x7f00000004c0)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'veth0_macvtap\x00', 0x1000}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.7337206s ago: executing program 4 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000001"], 0x10}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x40000000001}) unshare(0x22020400) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, r8, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fcntl$lock(r7, 0x25, &(0x7f00000001c0)={0x1, 0x2, 0x6, 0x7}) fcntl$lock(r7, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x8, 0x5}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000180)={&(0x7f0000003000)={[{&(0x7f0000000240)="4e4c823a61b30291659b0d39a56c901789048d65030820689013aa77b5fa1cf7356a1624c6c025fc00814b4c4c17f42369680c97def4b9dd7ae731f845362ca33fa00426eced781e5be0724fb80399c1161b41a450c25e55c9122e7dd63ea99a1cb99d70558ec3c26d9a246de8a08ac82767aedecbb626ce80e4ee2a46e00649044803b5577c3c55b84006dc8a5974f4afe8cda3097def83bcf0d342ecfa56149c2bd72628d5c0fbba1473ccd311", 0xae, 0x1}, {&(0x7f0000000100)="45bd974471fd6b762d8e07ae811de323b18a1a188afa0340e3e92f6bba027bd35064cbcbac8e6f995797afebddc31b9e5c60416ece64ba75aaec", 0x3a, 0x2}]}, 0x2, 0x3}, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 3.681240359s ago: executing program 0 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000180)={0x3000, 0x7000}) (fail_nth: 2) 3.546055492s ago: executing program 3 (id=257): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x88000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 3.474353546s ago: executing program 2 (id=258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000180)={0x3000, 0x7000}) 2.485976979s ago: executing program 3 (id=259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000107afffe800000fdff00000000000000000000ff020000000000000000000000000001"], 0x0) 2.391594816s ago: executing program 2 (id=260): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x2, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000780)='suspend_resume\x00', r2}, 0xffffffffffffffe1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000000), &(0x7f0000000380)=r2}, 0x20) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x270, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'team0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @empty, [], [], 'gre0\x00', 'caif0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x20}}}, {{@ipv6={@private1, @private1, [], [], 'veth1_virt_wifi\x00', 'pimreg\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @private0, @ipv4, @local, @local, @local, @local, @private2, @private2, @private1, @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) syz_emit_ethernet(0x7a, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c200000000000000000086dd60f2a40000442f00fe800000000000000000000000000000fe8000000000000000000000000000aa04206558"], 0x0) 2.314872345s ago: executing program 3 (id=261): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f00000004c0)={0x1, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="92931f6e32e1ffa94914674af600", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x4}, 0x50) mkdir(&(0x7f0000000000)='./file1\x00', 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmmsg$sock(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}, {&(0x7f0000000180)="e4ce4c", 0x3}], 0x2}}], 0x2, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) chdir(&(0x7f0000000140)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[], 0x0, 0x1200) 1.935435374s ago: executing program 2 (id=262): dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000100)=""/23, 0x17}], 0x2, 0x4c, 0x3ff) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c02"]) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff05, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x96, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x68a49a0f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x90, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 1.905198509s ago: executing program 1 (id=263): ioperm(0x5, 0x6, 0x800000000001) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000009180)=ANY=[], 0x31) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$sndctrl(0x0, 0x100000001, 0x22100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x100000) fanotify_mark(0xffffffffffffffff, 0xff80, 0x8000021, 0xffffffffffffffff, 0x0) 1.753132894s ago: executing program 4 (id=264): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x757) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="200d460000004630c6c2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.683113724s ago: executing program 0 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x80000000000000) 981.674532ms ago: executing program 1 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f0000000440)=@ethtool_eeprom={0x48, 0x6bf, 0x8}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0xae03, 0xb6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) r3 = socket(0x1d, 0x1, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x16b202, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5, 0x2}, 0x18) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xa) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x7}, r7}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r7, 0x9dffffff}}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2a, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func, @alu={0x4, 0x0, 0xb, 0x3, 0xb, 0x4, 0xffffffffffffffe7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x55f9973e, 0x0, 0x0, 0x0, 0xd}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x2, 0x2, 0x18, 0x8}, @call, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x400, 0xd3, &(0x7f0000000500)=""/211, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0xc, 0xffffffff, 0x80000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x0, 0x86, 0x72, &(0x7f00000006c0)="f8bf3ee20935741f9821f1a2622adbe107fbd68eb89d9633f8baea5c14f946f846f740172ecbd8a1b68152475a858ea182a3dd936a1d87dbe080cbdba9fd812dcbd3e9981836650e56bbdcab1069e2db204ef324701fed47b9653a6832658677eddfd27fcbbd802d358e3893e97dd50e94b18b98bbf98786aedf6e346cebbc07495a5c1b62c2", &(0x7f00000003c0)=""/114, 0x7, 0x0, 0x98, 0x2e, &(0x7f0000000780)="68d95e782723444ed9fec5b71f56d391c51494177bdf2d9a1a89ad93a59224607ed9833e8b25d04bfc3d56c018a0a1883414de64ffa9d9d87ac91ed664d8fe5feb67c5ca336752049c01fa02ce9335c7af5f5fc566195b0c756930db21afcb1992af034c3f37e6064762ad5258b2057eae29e35efee920155401784dfff116f3a87245e5e5e5e4627b82ebd78a1822e3e7ba3021f2e6342e", &(0x7f0000000840)="defa3a647c961222d6f90b3d9baf6e8acd8068ba8f5ed8c6f7bfa72fdff183271ebeee0babec43eba734c528451c", 0x1, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0x7, &(0x7f0000000900)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 506.025076ms ago: executing program 3 (id=267): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x583}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0xffffffffffffffe4) 403.579193ms ago: executing program 0 (id=268): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x8001ffe4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) 402.375727ms ago: executing program 2 (id=269): socket(0x2, 0x80805, 0x0) socket(0x2, 0xa, 0x200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket(0x2, 0x3, 0x6) epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400010000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 317.954054ms ago: executing program 3 (id=270): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x9, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900000000003000", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000300)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 317.119539ms ago: executing program 1 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000b400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f000070c000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mremap(&(0x7f0000b9c000/0x3000)=nil, 0x3000, 0x600000, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mmc_request_start\x00', r3, 0x0, 0x20f}, 0x18) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYRESHEX, @ANYRES16=r1, @ANYRES32=r3, @ANYRES8, @ANYRES64=r4, @ANYRESDEC=r2], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffdef, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xa, @local, 0x10}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r7}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x8480, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r10, 0xc00464d0, &(0x7f0000000140)) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, 0x0, 0x0) sendmmsg$unix(r12, &(0x7f0000000000), 0x0, 0x24004001) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 15.776959ms ago: executing program 2 (id=272): socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc}) eventfd2(0x0, 0x0) syz_usbip_server_init(0x1) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000008000001c0012800b00010067656e65766500000c00028008000200ac1414bb766bc91409d10a8c8a4229a5edcb3cd67541e1b73b35d5a8ce0a966035753d5cd1f0311a3b8d"], 0x3c}}, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10) 0s ago: executing program 0 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 69.013439][ T5815] cgroup: Unknown subsys name 'net' [ 69.124839][ T5815] cgroup: Unknown subsys name 'cpuset' [ 69.133583][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.435599][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.355301][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.361652][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.954436][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.962543][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.969806][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.970123][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.986528][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.986880][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.001717][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.002667][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.017800][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.036024][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.045261][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.057181][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.065416][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.076663][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.084142][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.090158][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.092054][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.098598][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.106398][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.119378][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.127980][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.139294][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.147433][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.155674][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.166683][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.731231][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 73.791912][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 73.879140][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 73.909773][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 74.064388][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.071579][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.079159][ T5825] bridge_slave_0: entered allmulticast mode [ 74.087418][ T5825] bridge_slave_0: entered promiscuous mode [ 74.134899][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 74.150384][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.157580][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.165083][ T5825] bridge_slave_1: entered allmulticast mode [ 74.172380][ T5825] bridge_slave_1: entered promiscuous mode [ 74.179196][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.186851][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.194231][ T5827] bridge_slave_0: entered allmulticast mode [ 74.201052][ T5827] bridge_slave_0: entered promiscuous mode [ 74.274391][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.281518][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.289829][ T5827] bridge_slave_1: entered allmulticast mode [ 74.297925][ T5827] bridge_slave_1: entered promiscuous mode [ 74.316138][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.323697][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.330951][ T5835] bridge_slave_0: entered allmulticast mode [ 74.338197][ T5835] bridge_slave_0: entered promiscuous mode [ 74.392034][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.399196][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.406836][ T5835] bridge_slave_1: entered allmulticast mode [ 74.414734][ T5835] bridge_slave_1: entered promiscuous mode [ 74.426215][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.435368][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.442594][ T5837] bridge_slave_0: entered allmulticast mode [ 74.449741][ T5837] bridge_slave_0: entered promiscuous mode [ 74.458702][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.466093][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.474040][ T5837] bridge_slave_1: entered allmulticast mode [ 74.480911][ T5837] bridge_slave_1: entered promiscuous mode [ 74.490594][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.503034][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.553132][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.576906][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.638972][ T5825] team0: Port device team_slave_0 added [ 74.659812][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.684676][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.696387][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.706951][ T5825] team0: Port device team_slave_1 added [ 74.724786][ T5827] team0: Port device team_slave_0 added [ 74.734299][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.781408][ T5827] team0: Port device team_slave_1 added [ 74.801046][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.808385][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.816318][ T5836] bridge_slave_0: entered allmulticast mode [ 74.824244][ T5836] bridge_slave_0: entered promiscuous mode [ 74.840725][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.848248][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.874514][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.887894][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.894914][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.921471][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.958743][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.966128][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.973457][ T5836] bridge_slave_1: entered allmulticast mode [ 74.980330][ T5836] bridge_slave_1: entered promiscuous mode [ 74.989781][ T5837] team0: Port device team_slave_0 added [ 74.999040][ T5837] team0: Port device team_slave_1 added [ 75.025526][ T5835] team0: Port device team_slave_0 added [ 75.033725][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.040671][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.066650][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.117904][ T5835] team0: Port device team_slave_1 added [ 75.123800][ T5839] Bluetooth: hci0: command tx timeout [ 75.123806][ T55] Bluetooth: hci1: command tx timeout [ 75.140304][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.148130][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.174723][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.191919][ T5839] Bluetooth: hci4: command tx timeout [ 75.191989][ T55] Bluetooth: hci2: command tx timeout [ 75.197367][ T5833] Bluetooth: hci3: command tx timeout [ 75.209708][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.266951][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.276718][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.285508][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.312262][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.323818][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.330760][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.357460][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.374583][ T5825] hsr_slave_0: entered promiscuous mode [ 75.380821][ T5825] hsr_slave_1: entered promiscuous mode [ 75.409529][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.416618][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.442754][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.460841][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.468070][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.494417][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.555559][ T5836] team0: Port device team_slave_0 added [ 75.565208][ T5836] team0: Port device team_slave_1 added [ 75.594978][ T5827] hsr_slave_0: entered promiscuous mode [ 75.601117][ T5827] hsr_slave_1: entered promiscuous mode [ 75.607251][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.615064][ T5827] Cannot create hsr debugfs directory [ 75.699162][ T5835] hsr_slave_0: entered promiscuous mode [ 75.706232][ T5835] hsr_slave_1: entered promiscuous mode [ 75.712807][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.720358][ T5835] Cannot create hsr debugfs directory [ 75.755555][ T5837] hsr_slave_0: entered promiscuous mode [ 75.763853][ T5837] hsr_slave_1: entered promiscuous mode [ 75.769852][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.777529][ T5837] Cannot create hsr debugfs directory [ 75.785491][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.792501][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.818490][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.848587][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.855592][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.881918][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.068712][ T5836] hsr_slave_0: entered promiscuous mode [ 76.075661][ T5836] hsr_slave_1: entered promiscuous mode [ 76.081648][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.089737][ T5836] Cannot create hsr debugfs directory [ 76.396870][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.415737][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.425728][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.456830][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.513595][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.523771][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.534943][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.546564][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.646721][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.658997][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.677075][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.688237][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.750522][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.776741][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.789823][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.827788][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.898437][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.945732][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.964783][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.983031][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.996415][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.006604][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.030752][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.038044][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.076985][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.084350][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.145944][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.188834][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.199839][ T5833] Bluetooth: hci0: command tx timeout [ 77.205435][ T5839] Bluetooth: hci1: command tx timeout [ 77.235351][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.267941][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.274667][ T5833] Bluetooth: hci2: command tx timeout [ 77.283449][ T5833] Bluetooth: hci4: command tx timeout [ 77.289098][ T5839] Bluetooth: hci3: command tx timeout [ 77.299474][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.306574][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.334770][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.341950][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.361183][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.384544][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.391692][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.419040][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.426241][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.499068][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.549806][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.557024][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.570960][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.578121][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.663563][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.737203][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.758569][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.776696][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.787850][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.824821][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.831995][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.849800][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.856973][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.979444][ T5825] veth0_vlan: entered promiscuous mode [ 78.112505][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.120048][ T5825] veth1_vlan: entered promiscuous mode [ 78.207541][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.235683][ T5825] veth0_macvtap: entered promiscuous mode [ 78.284084][ T5825] veth1_macvtap: entered promiscuous mode [ 78.299399][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.347319][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.385303][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.418195][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.429229][ T5827] veth0_vlan: entered promiscuous mode [ 78.448304][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.459324][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.469624][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.479495][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.500384][ T5837] veth0_vlan: entered promiscuous mode [ 78.541296][ T5827] veth1_vlan: entered promiscuous mode [ 78.583638][ T5837] veth1_vlan: entered promiscuous mode [ 78.729161][ T5836] veth0_vlan: entered promiscuous mode [ 78.736797][ T5835] veth0_vlan: entered promiscuous mode [ 78.748758][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.749747][ T5827] veth0_macvtap: entered promiscuous mode [ 78.762552][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.783861][ T5837] veth0_macvtap: entered promiscuous mode [ 78.791093][ T5836] veth1_vlan: entered promiscuous mode [ 78.801060][ T5827] veth1_macvtap: entered promiscuous mode [ 78.814182][ T5835] veth1_vlan: entered promiscuous mode [ 78.845762][ T5837] veth1_macvtap: entered promiscuous mode [ 78.870287][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.880196][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.903265][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.916052][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.928577][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.941303][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.953472][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.965216][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.993610][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.004393][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.014639][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.023416][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.071723][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.083717][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.093962][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.106045][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.118638][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.135781][ T5836] veth0_macvtap: entered promiscuous mode [ 79.139838][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.146234][ T5835] veth0_macvtap: entered promiscuous mode [ 79.172745][ T5836] veth1_macvtap: entered promiscuous mode [ 79.191001][ T5835] veth1_macvtap: entered promiscuous mode [ 79.227325][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.252335][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.263003][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.275958][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.282500][ T5839] Bluetooth: hci0: command tx timeout [ 79.287679][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.291186][ T5833] Bluetooth: hci1: command tx timeout [ 79.352127][ T5833] Bluetooth: hci3: command tx timeout [ 79.357587][ T5839] Bluetooth: hci4: command tx timeout [ 79.359686][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.363061][ T5839] Bluetooth: hci2: command tx timeout [ 79.383849][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.396994][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.405931][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.422819][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.443915][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.458459][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.468951][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.483137][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.496732][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.509681][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.523816][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.535421][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.546362][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.558096][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.568134][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.579921][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.589796][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.600788][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.612507][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.655671][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.670601][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.682959][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.697788][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.707691][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.721892][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.740617][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.778979][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.803356][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.816209][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.827676][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.842548][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.853422][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.863649][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.875414][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.887594][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.930650][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.943037][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.954521][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.963517][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.986028][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.995931][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.005077][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.014232][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.049507][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.067802][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.218495][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.245970][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.308362][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.326040][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.377339][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.390340][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.481176][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.524925][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.588780][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.614470][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.874955][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.887053][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.249377][ T5928] ======================================================= [ 81.249377][ T5928] WARNING: The mand mount option has been deprecated and [ 81.249377][ T5928] and is ignored by this kernel. Remove the mand [ 81.249377][ T5928] option from the mount to silence this warning. [ 81.249377][ T5928] ======================================================= [ 81.376256][ T55] Bluetooth: hci1: command tx timeout [ 81.382018][ T55] Bluetooth: hci0: command tx timeout [ 81.432830][ T55] Bluetooth: hci2: command tx timeout [ 81.438512][ T55] Bluetooth: hci4: command tx timeout [ 81.444510][ T5833] Bluetooth: hci3: command tx timeout [ 81.815355][ T59] cfg80211: failed to load regulatory.db [ 82.071040][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.202471][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.802765][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 84.044982][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.146146][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 84.187296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.211723][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.315362][ T5952] IPVS: length: 32 != 8 [ 84.338664][ T24] usb 3-1: config 0 descriptor?? [ 84.662413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 84.672572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 84.715370][ T5959] capability: warning: `syz.0.11' uses 32-bit capabilities (legacy support in use) [ 84.771268][ T5941] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9'. [ 84.799862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.812816][ T5941] openvswitch: netlink: Actions may not be safe on all matching packets [ 84.901639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.902135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 85.003831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.004343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.071788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.106790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.364726][ T5941] capability: warning: `syz.2.9' uses deprecated v2 capabilities in a way that may be insecure [ 85.473234][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 85.561250][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 85.638468][ T24] [drm] Initialized udl on minor 2 [ 85.671060][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 85.697478][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 85.919570][ T5828] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 85.933350][ T5828] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 85.955961][ T24] usb 3-1: USB disconnect, device number 2 [ 87.412615][ T5976] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.696461][ T5979] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 90.291046][ T6025] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 92.064241][ T24] hid-generic C990:0003:0000.0001: unknown main item tag 0x0 [ 92.125054][ T24] hid-generic C990:0003:0000.0001: unknown main item tag 0x0 [ 92.136241][ T5828] Process accounting resumed [ 92.186031][ T24] hid-generic C990:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 92.199411][ T6037] dummy0: entered promiscuous mode [ 92.208077][ T6037] dummy0: left promiscuous mode [ 93.256871][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 93.383503][ T6052] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 93.459360][ T6052] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 93.641521][ T6058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.646677][ T6037] Process accounting resumed [ 94.661932][ T6063] misc userio: No port type given on /dev/userio [ 95.776913][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 98.162178][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.441814][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 98.458325][ T5828] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 98.567906][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.432325][ T5828] usb 2-1: config 0 has no interface number 0 [ 99.612580][ T5828] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 99.621664][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.656083][ T5828] usb 2-1: Product: syz [ 99.660369][ T5828] usb 2-1: Manufacturer: syz [ 99.666154][ T5828] usb 2-1: SerialNumber: syz [ 100.561479][ T5828] usb 2-1: config 0 descriptor?? [ 100.611270][ T5828] usb 2-1: can't set config #0, error -71 [ 100.752992][ T5828] usb 2-1: USB disconnect, device number 2 [ 100.813724][ T5826] udevd[5826]: setting mode of /dev/bus/usb/002/002 to 020664 failed: No such file or directory [ 100.864145][ T5826] udevd[5826]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory [ 102.187906][ T6175] loop2: detected capacity change from 0 to 7 [ 102.549120][ T6175] Dev loop2: unable to read RDB block 7 [ 102.557856][ T6175] loop2: AHDI p1 p2 [ 102.562242][ T6175] loop2: partition table partially beyond EOD, truncated [ 102.578242][ T6175] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 102.642420][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.682150][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.572636][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 104.613814][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 104.638826][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.685454][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.700308][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.759403][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 105.615091][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.805020][ T24] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 105.846811][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.872851][ T6223] vlan0: entered promiscuous mode [ 105.907971][ T24] usb 1-1: config 0 descriptor?? [ 105.987944][ T6223] team0: Port device vlan0 added [ 105.989582][ T24] usb 1-1: selecting invalid altsetting 1 [ 106.021776][ T24] flexcop_usb: set interface failed. [ 106.027162][ T24] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 106.251215][ T30] audit: type=1326 audit(1744103360.034:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 106.321829][ T30] audit: type=1326 audit(1744103360.034:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 106.385758][ T30] audit: type=1326 audit(1744103360.034:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 106.442101][ T30] audit: type=1326 audit(1744103360.034:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 106.485018][ T30] audit: type=1326 audit(1744103360.034:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 106.612447][ T30] audit: type=1326 audit(1744103360.034:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 106.634922][ T30] audit: type=1326 audit(1744103360.034:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 106.656188][ T30] audit: type=1326 audit(1744103360.034:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 106.677803][ T30] audit: type=1326 audit(1744103360.034:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 107.233303][ T30] audit: type=1326 audit(1744103360.034:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6229 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f10bb98d169 code=0x7ffc0000 [ 107.341188][ T24] usb 5-1: USB disconnect, device number 2 [ 107.649437][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 107.658463][ T6245] Zero length message leads to an empty skb [ 107.858583][ T6251] netlink: 244 bytes leftover after parsing attributes in process `syz.4.67'. [ 107.883099][ T5882] usb 1-1: USB disconnect, device number 2 [ 109.045242][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'. [ 109.497440][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.507435][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.516325][ T6272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.450652][ T6280] 9pnet_fd: Insufficient options for proto=fd [ 110.608493][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 110.617870][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 111.161804][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.392336][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 111.416925][ T24] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 111.459600][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.488414][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.502053][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.538447][ T24] usbtmc 1-1:16.0: bulk endpoints not found [ 111.601857][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.752168][ T5917] usb 5-1: device descriptor read/64, error -71 [ 112.003641][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.154459][ T5917] usb 5-1: device descriptor read/64, error -71 [ 112.292446][ T5917] usb usb5-port1: attempt power cycle [ 112.652672][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.692439][ T5917] usb 5-1: device descriptor read/8, error -71 [ 112.948112][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.016495][ T5917] usb 5-1: device descriptor read/8, error -71 [ 113.151865][ T5917] usb usb5-port1: unable to enumerate USB device [ 113.410890][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 113.427176][ T6071] syz.1.32 (6071) used greatest stack depth: 19048 bytes left [ 113.468774][ T6364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.541992][ T5917] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.594172][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 113.827799][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.897440][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 113.938679][ T5917] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 114.010198][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 114.033200][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.057279][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 114.079278][ T5917] usb 3-1: config 0 descriptor?? [ 114.088532][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 114.130755][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 114.149632][ T5917] option 3-1:0.0: GSM modem (1-port) converter detected [ 114.165654][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.196436][ T24] usb 2-1: Product: syz [ 114.200637][ T24] usb 2-1: Manufacturer: syz [ 114.226728][ T24] usb 2-1: SerialNumber: syz [ 114.252858][ T24] usb 2-1: config 0 descriptor?? [ 114.258744][ T53] usb 1-1: USB disconnect, device number 3 [ 114.270334][ T6359] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 114.301599][ T6359] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 114.306144][ T10] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 114.322320][ T24] usb 2-1: ucan: probing device on interface #0 [ 114.342933][ T10] usb 4-1: config 0 has no interface number 0 [ 114.343602][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 114.349156][ T10] usb 4-1: config 0 interface 131 has no altsetting 0 [ 114.365205][ T59] usb 3-1: USB disconnect, device number 3 [ 114.367460][ T59] option 3-1:0.0: device disconnected [ 114.404292][ T10] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=6c.e1 [ 114.426983][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.433100][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.442294][ T10] usb 4-1: Product: syz [ 114.464418][ T10] usb 4-1: Manufacturer: syz [ 114.471320][ T10] usb 4-1: SerialNumber: syz [ 114.497901][ T10] usb 4-1: config 0 descriptor?? [ 114.534832][ T6375] bridge_slave_1 (unregistering): left allmulticast mode [ 114.546733][ T6375] bridge_slave_1 (unregistering): left promiscuous mode [ 114.554556][ T24] usb 2-1: ucan: device protocol version 0 is not supported [ 114.560385][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.576531][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 114.828917][ T10] usb 4-1: bad CDC descriptors [ 114.880541][ T10] usb 4-1: USB disconnect, device number 2 [ 114.997225][ T6393] 9pnet_fd: Insufficient options for proto=fd [ 115.123089][ T6396] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 115.351088][ T6403] netlink: 'syz.0.101': attribute type 9 has an invalid length. [ 115.359986][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 115.375552][ T6403] hsr0: entered promiscuous mode [ 115.380919][ T6403] macvlan2: entered promiscuous mode [ 115.386452][ T6403] macvlan2: entered allmulticast mode [ 115.392007][ T6403] hsr0: entered allmulticast mode [ 115.397039][ T6403] hsr_slave_0: entered allmulticast mode [ 115.402699][ T6403] hsr_slave_1: entered allmulticast mode [ 115.630293][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 116.059185][ T6421] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 116.067146][ T6421] netlink: 244 bytes leftover after parsing attributes in process `syz.4.106'. [ 116.184404][ T6355] block nbd1: shutting down sockets [ 116.473878][ T9] usb 2-1: USB disconnect, device number 3 [ 119.812750][ T6468] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 120.059560][ T6475] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 120.145963][ T6482] FAULT_INJECTION: forcing a failure. [ 120.145963][ T6482] name failslab, interval 1, probability 0, space 0, times 1 [ 120.162066][ T6482] CPU: 1 UID: 0 PID: 6482 Comm: syz.4.123 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 120.162090][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.162103][ T6482] Call Trace: [ 120.162110][ T6482] [ 120.162117][ T6482] dump_stack_lvl+0x241/0x360 [ 120.162149][ T6482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.162170][ T6482] ? __pfx__printk+0x10/0x10 [ 120.162195][ T6482] ? __pfx___might_resched+0x10/0x10 [ 120.162218][ T6482] should_fail_ex+0x424/0x570 [ 120.162242][ T6482] should_failslab+0xac/0x100 [ 120.162261][ T6482] __kmalloc_noprof+0xdf/0x4d0 [ 120.162276][ T6482] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 120.162292][ T6482] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 120.162313][ T6482] tomoyo_realpath_from_path+0xcf/0x5e0 [ 120.162342][ T6482] tomoyo_path_perm+0x2be/0x640 [ 120.162367][ T6482] ? tomoyo_path_perm+0x28c/0x640 [ 120.162386][ T6482] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 120.162448][ T6482] ? strncpy_from_user+0x143/0x280 [ 120.162470][ T6482] security_inode_getattr+0x130/0x330 [ 120.162493][ T6482] vfs_stat+0x109/0x450 [ 120.162519][ T6482] ? __pfx_vfs_stat+0x10/0x10 [ 120.162535][ T6482] ? __mutex_unlock_slowpath+0x229/0x800 [ 120.162565][ T6482] __x64_sys_newstat+0xd9/0x160 [ 120.162583][ T6482] ? __pfx___x64_sys_newstat+0x10/0x10 [ 120.162631][ T6482] ? do_syscall_64+0xb6/0x230 [ 120.162660][ T6482] do_syscall_64+0xf3/0x230 [ 120.162678][ T6482] ? clear_bhb_loop+0x45/0xa0 [ 120.162698][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.162713][ T6482] RIP: 0033:0x7ff8ce58d169 [ 120.162732][ T6482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.162745][ T6482] RSP: 002b:00007ff8cf471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 120.162763][ T6482] RAX: ffffffffffffffda RBX: 00007ff8ce7a6080 RCX: 00007ff8ce58d169 [ 120.162776][ T6482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002a00 [ 120.162786][ T6482] RBP: 00007ff8cf471090 R08: 0000000000000000 R09: 0000000000000000 [ 120.162796][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.162805][ T6482] R13: 0000000000000001 R14: 00007ff8ce7a6080 R15: 00007ffd44d7a478 [ 120.162834][ T6482] [ 120.162841][ T6482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.479807][ T6487] tipc: Started in network mode [ 120.502128][ T6487] tipc: Node identity 4, cluster identity 4711 [ 120.508343][ T6487] tipc: Node number set to 4 [ 123.013249][ T6512] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 124.400646][ T6525] netlink: zone id is out of range [ 124.462562][ T6523] netlink: zone id is out of range [ 124.517612][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'. [ 125.288846][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.412053][ T5882] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.441950][ T10] usb 5-1: device descriptor read/64, error -71 [ 125.571793][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 125.581273][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 125.601772][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 125.631829][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 125.667038][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.685543][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.716669][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.770732][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.345670][ T10] usb 5-1: device descriptor read/64, error -71 [ 126.360320][ T5882] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 126.371488][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.381170][ T5882] usb 2-1: Product: syz [ 126.401875][ T5882] usb 2-1: Manufacturer: syz [ 126.406492][ T5882] usb 2-1: SerialNumber: syz [ 126.534044][ T5882] usb 2-1: config 0 descriptor?? [ 126.545235][ T10] usb usb5-port1: attempt power cycle [ 126.749683][ T5828] usb 2-1: USB disconnect, device number 4 [ 126.905875][ T5882] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.923607][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.955024][ T10] usb 5-1: device descriptor read/8, error -71 [ 127.111808][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 127.131388][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 127.145533][ T5882] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 127.155295][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.170097][ T5882] usb 3-1: config 0 descriptor?? [ 127.184567][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 127.216849][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.242556][ T10] usb 5-1: device descriptor read/8, error -71 [ 127.352522][ T10] usb usb5-port1: unable to enumerate USB device [ 127.387197][ T5188] bcm5974 3-1:0.0: could not read from device [ 127.400518][ T5188] bcm5974 3-1:0.0: could not read from device [ 127.415932][ T5882] usb 3-1: USB disconnect, device number 4 [ 127.453409][ T5880] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.631924][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 127.727435][ T5880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.739164][ T5880] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 127.749649][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.768022][ T5880] usb 1-1: config 0 descriptor?? [ 129.069822][ T5880] wacom 0003:056A:037A.0002: unbalanced collection at end of report description [ 129.095913][ T5880] wacom 0003:056A:037A.0002: parse failed [ 129.125261][ T5880] wacom 0003:056A:037A.0002: probe with driver wacom failed with error -22 [ 129.302752][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 129.313453][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.322205][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.350588][ T24] usb 1-1: USB disconnect, device number 4 [ 130.280511][ T6624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.848536][ T6633] : entered promiscuous mode [ 131.701392][ T6645] cgroup: Invalid name [ 132.429154][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 132.478498][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 132.745249][ T6651] batadv0: entered promiscuous mode [ 132.759900][ T6651] team0: entered promiscuous mode [ 132.765528][ T6651] team_slave_0: entered promiscuous mode [ 133.110031][ T6656] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 133.192555][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.212497][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.744603][ T6651] team_slave_1: entered promiscuous mode [ 133.857449][ T6651] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 133.896385][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 134.701623][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 134.701658][ T30] audit: type=1326 audit(1744103387.488:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6672 comm="syz.3.178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10bb98d169 code=0x0 [ 135.621113][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 135.631790][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 136.135358][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 136.175525][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 136.710487][ T6716] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 136.751832][ T5828] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.969359][ T6721] netlink: 'syz.3.193': attribute type 2 has an invalid length. [ 136.997656][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 137.092011][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 137.111608][ T5828] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.131816][ T5828] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 137.151895][ T5828] usb 2-1: config 7 has an invalid descriptor of length 55, skipping remainder of the config [ 137.162296][ T5828] usb 2-1: config 7 has no interface number 0 [ 137.168941][ T5828] usb 2-1: config 7 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.253899][ T5828] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 137.276459][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.372505][ T5828] usb 2-1: Product: syz [ 137.410034][ T5828] usb 2-1: Manufacturer: syz [ 137.456812][ T5828] usb 2-1: SerialNumber: syz [ 137.718848][ T6727] No control pipe specified [ 137.729006][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'. [ 137.836430][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.917556][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.070918][ T5828] usb 2-1: USB disconnect, device number 5 [ 140.898104][ T6786] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 141.057352][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 141.435296][ T6805] x_tables: duplicate entry at hook 2 [ 141.450425][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.156264][ T24] usb 2-1: device descriptor read/64, error -71 [ 142.168713][ T6801] vlan0: entered promiscuous mode [ 142.421784][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.820482][ T24] usb 2-1: device descriptor read/64, error -71 [ 142.821451][ T5880] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.951675][ T24] usb usb2-port1: attempt power cycle [ 143.081800][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 143.095159][ T5880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 143.121825][ T5880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 143.152026][ T5880] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.183545][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.235121][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.721490][ T5880] usb 3-1: SerialNumber: syz [ 143.736690][ T6807] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.761912][ T59] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.769559][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.796139][ T24] usb 2-1: device descriptor read/8, error -71 [ 143.967892][ T5880] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 143.981823][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 144.051873][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.379294][ T5880] usb 3-1: USB disconnect, device number 5 [ 145.075902][ T5881] hid-generic C990:0003:0000.0003: unknown main item tag 0x0 [ 145.136681][ T5881] hid-generic C990:0003:0000.0003: unknown main item tag 0x0 [ 145.291972][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 145.299227][ T24] usb 2-1: device descriptor read/8, error -32 [ 145.368070][ T5826] udevd[5826]: setting mode of /dev/bus/usb/003/005 to 020664 failed: No such file or directory [ 145.441054][ T24] usb usb2-port1: unable to enumerate USB device [ 145.543918][ T5826] udevd[5826]: setting owner of /dev/bus/usb/003/005 to uid=0, gid=0 failed: No such file or directory [ 145.682887][ T5881] hid-generic C990:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 146.124009][ T59] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 146.145126][ T59] usb 5-1: can't read configurations, error -71 [ 146.441442][ T6839] program syz.4.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.492320][ T6842] netlink: 76 bytes leftover after parsing attributes in process `syz.3.227'. [ 148.195772][ T5880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.201586][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 149.478248][ T5880] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 149.490976][ T6869] Unsupported ieee802154 address type: 0 [ 149.497545][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.545387][ T5880] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.630212][ T5880] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.751650][ T5880] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.763478][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.792372][ T5880] usbtmc 1-1:16.0: bulk endpoints not found [ 150.266314][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 150.275363][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 150.508284][ T6877] uprobe: syz.2.239:6877 failed to unregister, leaking uprobe [ 150.842681][ T6899] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 150.858266][ T6899] bridge1: entered promiscuous mode [ 150.871257][ T6899] bridge1: entered allmulticast mode [ 151.131896][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 152.154063][ T10] usb 1-1: USB disconnect, device number 5 [ 152.187987][ T9] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 152.212554][ T9] usb 2-1: config 0 has no interface number 0 [ 152.239117][ T9] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.322921][ T9] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.362879][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 152.389685][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.407531][ T6926] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 152.552852][ T9] usb 2-1: config 0 descriptor?? [ 152.589344][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.251'. [ 152.618465][ T30] audit: type=1326 audit(1744103405.378:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483eb8d169 code=0x7ffc0000 [ 153.054152][ T30] audit: type=1326 audit(1744103405.378:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483eb8d169 code=0x7ffc0000 [ 153.168783][ T30] audit: type=1326 audit(1744103405.378:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f483eb8d169 code=0x7ffc0000 [ 153.196217][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.247653][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.289245][ T30] audit: type=1326 audit(1744103405.378:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483eb8d169 code=0x7ffc0000 [ 153.342400][ T9] magicmouse 0003:05AC:0269.0004: unbalanced collection at end of report description [ 153.351995][ T30] audit: type=1326 audit(1744103405.378:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f483eb8d169 code=0x7ffc0000 [ 153.352040][ T30] audit: type=1326 audit(1744103405.378:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483eb8d169 code=0x7ffc0000 [ 153.352076][ T30] audit: type=1326 audit(1744103405.378:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483eb8d169 code=0x7ffc0000 [ 153.373425][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.448573][ T9] magicmouse 0003:05AC:0269.0004: magicmouse hid parse failed [ 153.457357][ T9] magicmouse 0003:05AC:0269.0004: probe with driver magicmouse failed with error -22 [ 153.527245][ T6943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.058181][ T59] usb 2-1: USB disconnect, device number 10 [ 154.472891][ T6952] FAULT_INJECTION: forcing a failure. [ 154.472891][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 154.524377][ T6954] usb usb8: usbfs: process 6954 (syz.3.261) did not claim interface 0 before use [ 154.545649][ T6952] CPU: 0 UID: 0 PID: 6952 Comm: syz.0.256 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 154.545664][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.545670][ T6952] Call Trace: [ 154.545674][ T6952] [ 154.545679][ T6952] dump_stack_lvl+0x241/0x360 [ 154.545699][ T6952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.545711][ T6952] ? __pfx__printk+0x10/0x10 [ 154.545726][ T6952] ? __pfx___might_resched+0x10/0x10 [ 154.545739][ T6952] should_fail_ex+0x424/0x570 [ 154.545752][ T6952] should_failslab+0xac/0x100 [ 154.545763][ T6952] __kmalloc_noprof+0xdf/0x4d0 [ 154.545772][ T6952] ? tomoyo_encode+0x26f/0x540 [ 154.545784][ T6952] tomoyo_encode+0x26f/0x540 [ 154.545793][ T6952] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 154.545806][ T6952] tomoyo_realpath_from_path+0x59e/0x5e0 [ 154.545822][ T6952] tomoyo_path_number_perm+0x245/0x790 [ 154.545840][ T6952] ? tomoyo_path_number_perm+0x215/0x790 [ 154.545855][ T6952] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.545872][ T6952] ? ksys_write+0x24e/0x2d0 [ 154.545888][ T6952] ? __lock_acquire+0xad5/0xd80 [ 154.545907][ T6952] ? __fget_files+0x2a/0x420 [ 154.545917][ T6952] ? __fget_files+0x2a/0x420 [ 154.545929][ T6952] ? __fget_files+0x2a/0x420 [ 154.545942][ T6952] security_file_ioctl+0xc6/0x2a0 [ 154.545957][ T6952] __se_sys_ioctl+0x46/0x160 [ 154.545971][ T6952] do_syscall_64+0xf3/0x230 [ 154.545983][ T6952] ? clear_bhb_loop+0x45/0xa0 [ 154.545994][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.546003][ T6952] RIP: 0033:0x7fe952b8d169 [ 154.546013][ T6952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.546020][ T6952] RSP: 002b:00007fe953943038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.546031][ T6952] RAX: ffffffffffffffda RBX: 00007fe952da6160 RCX: 00007fe952b8d169 [ 154.546038][ T6952] RDX: 0000200000000180 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 154.546043][ T6952] RBP: 00007fe953943090 R08: 0000000000000000 R09: 0000000000000000 [ 154.546049][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.546054][ T6952] R13: 0000000000000001 R14: 00007fe952da6160 R15: 00007fff53533e78 [ 154.546069][ T6952] [ 154.546081][ T6952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.801375][ T6954] overlayfs: missing 'lowerdir' [ 154.852537][ T6955] Illegal XDP return value 4294967274 on prog (id 50) dev N/A, expect packet loss! [ 154.891115][ T6957] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.525469][ T6975] loop2: detected capacity change from 0 to 7 [ 156.531781][ T59] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 156.532770][ T6975] Dev loop2: unable to read RDB block 7 [ 156.551921][ T6977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.269'. [ 156.585948][ T6975] loop2: AHDI p1 p2 [ 156.588438][ T6977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.269'. [ 156.596090][ T6975] loop2: partition table partially beyond EOD, truncated [ 156.610585][ T6975] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 156.671362][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 156.710386][ T6981] sctp: [Deprecated]: syz.1.271 (pid 6981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.710386][ T6981] Use struct sctp_sack_info instead [ 156.831800][ T59] usb 5-1: device descriptor read/64, error -71 [ 157.092095][ T59] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 157.301819][ T59] usb 5-1: device descriptor read/64, error -71 [ 262.421690][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 262.428761][ C1] rcu: 0-...!: (0 ticks this GP) idle=c6bc/1/0x4000000000000000 softirq=21083/21083 fqs=0 [ 262.439626][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5203/1:b..l [ 262.447564][ C1] rcu: (detected by 1, t=10502 jiffies, g=14217, q=180 ncpus=2) [ 262.455312][ C1] Sending NMI from CPU 1 to CPUs 0: [ 262.455343][ C0] NMI backtrace for cpu 0 [ 262.455367][ C0] CPU: 0 UID: 0 PID: 6981 Comm: syz.1.271 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 262.455384][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.455397][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x11/0x90 [ 262.455433][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 0c 25 08 70 65 93 <65> 8b 05 58 29 a2 11 25 00 01 ff 00 74 10 3d 00 01 00 00 75 57 83 [ 262.455446][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000046 [ 262.455460][ C0] RAX: 1ffff11006ab3428 RBX: ffff88803559b550 RCX: ffff888033611e00 [ 262.455471][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 183e53834c000000 [ 262.455482][ C0] RBP: 0000000000000000 R08: ffffffff8a1ecf00 R09: fffff52000000f7c [ 262.455492][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: 0000000000000002 [ 262.455503][ C0] R13: 183e53834c000000 R14: ffff88802991e330 R15: ffff88803559b400 [ 262.455514][ C0] FS: 00007f33bc1b86c0(0000) GS:ffff888124fc9000(0000) knlGS:0000000000000000 [ 262.455527][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.455537][ C0] CR2: 00007fe953984f98 CR3: 0000000078986000 CR4: 00000000003526f0 [ 262.455551][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.455560][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.455569][ C0] Call Trace: [ 262.455576][ C0] [ 262.455582][ C0] advance_sched+0x2a0/0xca0 [ 262.455612][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 262.455627][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.455645][ C0] ? __pfx_advance_sched+0x10/0x10 [ 262.455666][ C0] ? __pfx_advance_sched+0x10/0x10 [ 262.455686][ C0] __hrtimer_run_queues+0x5a6/0xd40 [ 262.455704][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 262.455733][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 262.455754][ C0] ? sched_clock_cpu+0x77/0x4d0 [ 262.455771][ C0] ? read_tsc+0x9/0x20 [ 262.455791][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 262.455816][ C0] hrtimer_interrupt+0x403/0xa40 [ 262.455844][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 262.455865][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 262.455882][ C0] [ 262.455887][ C0] [ 262.455893][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.455909][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 262.455923][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 262.455935][ C0] RSP: 0018:ffffc90003aae768 EFLAGS: 00000206 [ 262.455947][ C0] RAX: ebcd0f388a34e700 RBX: ffffffff8ed3dfe0 RCX: ebcd0f388a34e700 [ 262.455959][ C0] RDX: 0000000000000000 RSI: ffffffff8e4ea087 RDI: ffffffff8ca0e1e0 [ 262.455969][ C0] RBP: ffffffff93657020 R08: 0000000000000000 R09: 0000000000000000 [ 262.455978][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 262.455987][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 262.456006][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 262.456025][ C0] ? arch_stack_walk+0xe7/0x150 [ 262.456042][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 262.456058][ C0] unwind_next_frame+0xd5/0x23b0 [ 262.456075][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 262.456094][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 262.456112][ C0] ? arch_stack_walk+0xe7/0x150 [ 262.456132][ C0] __unwind_start+0x59a/0x740 [ 262.456151][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 262.456177][ C0] arch_stack_walk+0xe7/0x150 [ 262.456197][ C0] ? arch_stack_walk+0xe7/0x150 [ 262.456217][ C0] stack_trace_save+0x11a/0x1d0 [ 262.456237][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 262.456258][ C0] ? cgroup_rstat_updated+0x144/0xc40 [ 262.456279][ C0] save_stack+0xfc/0x1f0 [ 262.456301][ C0] ? __pfx_save_stack+0x10/0x10 [ 262.456327][ C0] ? page_ext_put+0x97/0xc0 [ 262.456350][ C0] __reset_page_owner+0x76/0x1e0 [ 262.456372][ C0] free_unref_folios+0xdfd/0x17e0 [ 262.456392][ C0] ? __page_cache_release+0x95f/0xb90 [ 262.456414][ C0] folios_put_refs+0x70a/0x800 [ 262.456439][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 262.456456][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 262.456471][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.456492][ C0] folio_batch_move_lru+0x3ae/0x430 [ 262.456511][ C0] ? __pfx_lru_add+0x10/0x10 [ 262.456528][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 262.456550][ C0] __folio_batch_add_and_move+0x5ce/0xdb0 [ 262.456570][ C0] ? __pfx_lru_add+0x10/0x10 [ 262.456586][ C0] ? __pfx___folio_batch_add_and_move+0x10/0x10 [ 262.456606][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.456626][ C0] ? folio_add_lru+0x187/0x230 [ 262.456644][ C0] shmem_alloc_and_add_folio+0xdc3/0x1070 [ 262.456667][ C0] ? shmem_huge_global_enabled+0x175/0x3b0 [ 262.456682][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 262.456702][ C0] ? shmem_allowable_huge_orders+0x41b/0x430 [ 262.456721][ C0] shmem_get_folio_gfp+0x655/0x1800 [ 262.456750][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 262.456771][ C0] shmem_fault+0x223/0x5c0 [ 262.456792][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 262.456817][ C0] __do_fault+0x135/0x390 [ 262.456836][ C0] handle_pte_fault+0x3f0c/0x61c0 [ 262.456856][ C0] ? handle_pte_fault+0x2b0a/0x61c0 [ 262.456879][ C0] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 262.456898][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 262.456923][ C0] ? __lock_acquire+0xad5/0xd80 [ 262.456943][ C0] ? __lock_acquire+0xad5/0xd80 [ 262.456959][ C0] ? do_raw_spin_lock+0x151/0x370 [ 262.456984][ C0] handle_mm_fault+0x1030/0x1aa0 [ 262.457011][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 262.457027][ C0] ? follow_page_pte+0x9ff/0x15e0 [ 262.457043][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 262.457064][ C0] ? vma_pgtable_walk_end+0x4b/0x80 [ 262.457080][ C0] ? vma_pgtable_walk_end+0x55/0x80 [ 262.457097][ C0] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 262.457121][ C0] __get_user_pages+0x1adc/0x4180 [ 262.457154][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 262.457171][ C0] ? __pfx_mt_find+0x10/0x10 [ 262.457197][ C0] populate_vma_page_range+0x266/0x340 [ 262.457215][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 262.457229][ C0] ? userfaultfd_unmap_complete+0x30e/0x360 [ 262.457253][ C0] ? vm_mmap_pgoff+0x340/0x530 [ 262.457269][ C0] __mm_populate+0x27d/0x460 [ 262.457287][ C0] ? __pfx___mm_populate+0x10/0x10 [ 262.457307][ C0] vm_mmap_pgoff+0x390/0x530 [ 262.457326][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 262.457344][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 262.457360][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 262.457377][ C0] do_syscall_64+0xf3/0x230 [ 262.457395][ C0] ? clear_bhb_loop+0x45/0xa0 [ 262.457411][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.457426][ C0] RIP: 0033:0x7f33bb38d169 [ 262.457446][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.457458][ C0] RSP: 002b:00007f33bc1b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 262.457472][ C0] RAX: ffffffffffffffda RBX: 00007f33bb5a5fa0 RCX: 00007f33bb38d169 [ 262.457483][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 262.457494][ C0] RBP: 00007f33bb40e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 262.457504][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 262.457513][ C0] R13: 0000000000000000 R14: 00007f33bb5a5fa0 R15: 00007ffeec7bbb88 [ 262.457531][ C0] [ 262.458336][ C1] task:udevd state:R running task stack:23176 pid:5203 tgid:5203 ppid:1 task_flags:0x400140 flags:0x00000002 [ 263.216263][ C1] Call Trace: [ 263.219553][ C1] [ 263.222513][ C1] __schedule+0x1b33/0x51f0 [ 263.227031][ C1] ? do_syscall_64+0xf3/0x230 [ 263.231717][ C1] ? stack_trace_save+0x121/0x1d0 [ 263.236756][ C1] ? preempt_schedule_notrace+0x103/0x140 [ 263.242568][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.248644][ C1] ? __pfx___schedule+0x10/0x10 [ 263.253509][ C1] ? __lock_acquire+0xad5/0xd80 [ 263.258371][ C1] preempt_schedule_notrace+0x103/0x140 [ 263.263918][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 263.269988][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 263.275200][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 263.281098][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.287261][ C1] rcu_is_watching+0x7e/0xb0 [ 263.291854][ C1] ? kasan_save_track+0x3f/0x80 [ 263.296712][ C1] lock_acquire+0x5e/0x2f0 [ 263.301132][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 263.306334][ C1] ? kasan_save_track+0x3f/0x80 [ 263.311187][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 263.316300][ C1] unwind_next_frame+0xd5/0x23b0 [ 263.321238][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 263.326358][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 263.331473][ C1] ? kasan_save_track+0x3f/0x80 [ 263.336333][ C1] ? kasan_save_track+0x3f/0x80 [ 263.341188][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.347345][ C1] arch_stack_walk+0x11e/0x150 [ 263.352118][ C1] ? kasan_save_track+0x3f/0x80 [ 263.356977][ C1] stack_trace_save+0x11a/0x1d0 [ 263.361833][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 263.367208][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 263.372672][ C1] ? stack_depot_save_flags+0x44/0x940 [ 263.378143][ C1] kasan_save_track+0x3f/0x80 [ 263.382824][ C1] ? kasan_save_track+0x3f/0x80 [ 263.387730][ C1] __kasan_slab_alloc+0x66/0x80 [ 263.392593][ C1] kmem_cache_alloc_noprof+0x1e1/0x390 [ 263.398054][ C1] ? alloc_empty_file+0x56/0x1d0 [ 263.403000][ C1] alloc_empty_file+0x56/0x1d0 [ 263.407770][ C1] path_openat+0x10d/0x35d0 [ 263.412284][ C1] ? stack_trace_save+0x11a/0x1d0 [ 263.417311][ C1] ? kernel_text_address+0xa7/0xe0 [ 263.422437][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 263.427821][ C1] ? stack_depot_save_flags+0x44/0x940 [ 263.433289][ C1] ? kasan_save_track+0x51/0x80 [ 263.438146][ C1] ? kasan_save_track+0x3f/0x80 [ 263.443000][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 263.448033][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 263.453667][ C1] ? getname_flags+0xb6/0x530 [ 263.458352][ C1] ? __pfx_path_openat+0x10/0x10 [ 263.463324][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.469411][ C1] do_filp_open+0x284/0x4e0 [ 263.473934][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 263.478961][ C1] ? do_raw_spin_lock+0x151/0x370 [ 263.484029][ C1] do_sys_openat2+0x12b/0x1d0 [ 263.488713][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.493908][ C1] ? do_readlinkat+0x375/0x380 [ 263.498680][ C1] ? kmem_cache_free+0x197/0x410 [ 263.503627][ C1] ? do_readlinkat+0x375/0x380 [ 263.508401][ C1] __x64_sys_openat+0x249/0x2a0 [ 263.513267][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.518650][ C1] ? do_syscall_64+0xb6/0x230 [ 263.523332][ C1] do_syscall_64+0xf3/0x230 [ 263.527839][ C1] ? clear_bhb_loop+0x45/0xa0 [ 263.532524][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.538416][ C1] RIP: 0033:0x7fe4fed169a4 [ 263.542834][ C1] RSP: 002b:00007ffee72cf200 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.551249][ C1] RAX: ffffffffffffffda RBX: 00005624353b51af RCX: 00007fe4fed169a4 [ 263.559222][ C1] RDX: 0000000000080141 RSI: 00005624353b50d8 RDI: 00000000ffffff9c [ 263.567194][ C1] RBP: 00005624353b50d8 R08: 00000000ffffffff R09: 0000000000000000 [ 263.575165][ C1] R10: 00000000000001a4 R11: 0000000000000246 R12: 0000000000080141 [ 263.583134][ C1] R13: ffffffffffffffff R14: 00000000ffffffff R15: 00000000ffffffff [ 263.591123][ C1] [ 263.594141][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g14217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 263.605330][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 263.615303][ C1] rcu: RCU grace-period kthread stack dump: [ 263.621183][ C1] task:rcu_preempt state:R running task stack:26952 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 263.634697][ C1] Call Trace: [ 263.637984][ C1] [ 263.640924][ C1] __schedule+0x1b33/0x51f0 [ 263.645456][ C1] ? schedule+0x163/0x360 [ 263.649793][ C1] ? __pfx___schedule+0x10/0x10 [ 263.654662][ C1] ? schedule+0x90/0x360 [ 263.658913][ C1] ? schedule+0x90/0x360 [ 263.663162][ C1] schedule+0x163/0x360 [ 263.667334][ C1] schedule_timeout+0x15b/0x2b0 [ 263.672197][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 263.677613][ C1] ? __pfx_process_timeout+0x10/0x10 [ 263.682908][ C1] ? prepare_to_swait_event+0x1e5/0x340 [ 263.688461][ C1] ? prepare_to_swait_event+0x308/0x340 [ 263.694014][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 263.699215][ C1] rcu_gp_fqs_loop+0x2e1/0x1340 [ 263.704071][ C1] ? rcu_gp_init+0x1279/0x1690 [ 263.708839][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 263.713787][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 263.719680][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 263.724965][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 263.730865][ C1] ? finish_swait+0xdb/0x200 [ 263.735460][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 263.740659][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 263.745252][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 263.750453][ C1] ? __kthread_parkme+0x1a8/0x200 [ 263.755570][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 263.760768][ C1] kthread+0x7b7/0x940 [ 263.764843][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 263.770042][ C1] ? __pfx_kthread+0x10/0x10 [ 263.774637][ C1] ? __pfx_kthread+0x10/0x10 [ 263.779231][ C1] ? __pfx_kthread+0x10/0x10 [ 263.783826][ C1] ? __pfx_kthread+0x10/0x10 [ 263.788417][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.793612][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 263.798810][ C1] ? __pfx_kthread+0x10/0x10 [ 263.803411][ C1] ret_from_fork+0x4b/0x80 [ 263.807828][ C1] ? __pfx_kthread+0x10/0x10 [ 263.812422][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.817229][ C1] [ 263.820254][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 263.826594][ C1] CPU: 1 UID: 0 PID: 6987 Comm: syz.2.272 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 263.836752][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.846808][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 263.852974][ C1] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 263.872582][ C1] RSP: 0018:ffffc90003437978 EFLAGS: 00000246 [ 263.878654][ C1] RAX: ffffffff81b7661d RBX: 1ffff110170c8219 RCX: ffff888062861e00 [ 263.886622][ C1] RDX: ffffc9000c479000 RSI: 000000000007ffff RDI: 0000000000080000 [ 263.894592][ C1] RBP: ffffc90003437b80 R08: ffffffff81b765e8 R09: 1ffffffff20bd6ce [ 263.902563][ C1] R10: dffffc0000000000 R11: fffffbfff20bd6cf R12: ffff8880b873ab88 [ 263.910533][ C1] R13: ffff8880b86410c8 R14: ffff8880b873ab80 R15: 0000000000000000 [ 263.918512][ C1] FS: 00007f483fa046c0(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000 [ 263.927446][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.934026][ C1] CR2: 000000110c32624c CR3: 000000002d554000 CR4: 00000000003526f0 [ 263.941998][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.949965][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.957936][ C1] Call Trace: [ 263.961215][ C1] [ 263.964142][ C1] smp_call_function_many_cond+0x1bcd/0x2d40 [ 263.970131][ C1] ? __text_poke+0xb83/0xe20 [ 263.974728][ C1] ? io_submit_sqes+0x387/0x1ce0 [ 263.979671][ C1] ? io_submit_sqes+0x387/0x1ce0 [ 263.984623][ C1] ? __pfx___text_poke+0x10/0x10 [ 263.989571][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 263.995904][ C1] ? __pfx___might_resched+0x10/0x10 [ 264.001199][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 264.006232][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 264.011441][ C1] text_poke_bp_batch+0x354/0xb30 [ 264.016474][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.022462][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 264.027495][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 264.033049][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 264.039301][ C1] ? __jump_label_update+0x387/0x3b0 [ 264.044620][ C1] text_poke_finish+0x30/0x50 [ 264.049303][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 264.055288][ C1] static_key_slow_inc_cpuslocked+0x80/0xf0 [ 264.061182][ C1] static_key_slow_inc+0x1a/0x30 [ 264.066118][ C1] io_uring_create+0x1da/0xc90 [ 264.070892][ C1] __se_sys_io_uring_setup+0x2e8/0x360 [ 264.076357][ C1] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 264.082348][ C1] ? __secure_computing+0xef/0x2f0 [ 264.087473][ C1] do_syscall_64+0xf3/0x230 [ 264.091982][ C1] ? clear_bhb_loop+0x45/0xa0 [ 264.096660][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.102553][ C1] RIP: 0033:0x7f483eb8d169 [ 264.106969][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.126572][ C1] RSP: 002b:00007f483fa04038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 264.134986][ C1] RAX: ffffffffffffffda RBX: 00007f483eda5fa0 RCX: 00007f483eb8d169 [ 264.142957][ C1] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000410d [ 264.150925][ C1] RBP: 00007f483ec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 264.158893][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.166859][ C1] R13: 0000000000000000 R14: 00007f483eda5fa0 R15: 00007ffdc7670728 [ 264.174867][ C1]