last executing test programs: 15.623744244s ago: executing program 3 (id=486): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="35c91537212a25284f9f4ed193a315649fb70834c16d942dfe3406198e1c35250ae6eb7fca781cd3dc5da818a0f50d1a35a3217eab524d9ebc4f79bec7273ea12b6a98a235214b1e76c6e031deeb4b462372b7e9e4c820fea1993519cfbb6cfc19a3b1da3a5773445b64da", @ANYRES64, @ANYRESOCT], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0xfe, "001bf1000000000000002000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x101) r1 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r2 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001200)={0x20000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000027a00003c000480200001800a00010071756f7461000000100002800c00014000000000000004011800018011000100666c6f775f6f66666c6f6164000000000900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x28}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) 11.243955062s ago: executing program 3 (id=507): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000280)={r0, r1, 0xfffe}) 11.164151854s ago: executing program 0 (id=508): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 10.843290431s ago: executing program 3 (id=511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xfffffe83, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) epoll_create(0x101) rename(0x0, &(0x7f0000002140)='./file0\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x0, 0x984a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) poll(0x0, 0x0, 0x6) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) epoll_create1(0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @cond=[{0x1ff, 0x5388, 0x3, 0x800, 0xca, 0x7}, {0xffff, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 9.782663168s ago: executing program 0 (id=519): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) lseek(r0, 0x7, 0x0) 9.476202083s ago: executing program 0 (id=521): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x23, 0x9, 0x6}, {0x3, 0x1, 0x9, 0xef17e523}]}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@mcast1, 0x1f, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 8.107229086s ago: executing program 3 (id=526): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 7.901102133s ago: executing program 3 (id=527): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) io_setup(0x2003, &(0x7f00000002c0)=0x0) r5 = memfd_create(&(0x7f0000000080)='$(}]#\\\x00', 0x7) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x8, 0x0, 0x2}]) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0x80084121, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x2, 0x1, 0xfdfdffff, 0x6}) syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 7.812157614s ago: executing program 1 (id=528): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x400}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 7.526916034s ago: executing program 1 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x2400c080) 6.639364966s ago: executing program 4 (id=531): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x0, 0x1, 0x0, &(0x7f00000007c0)=""/139, 0x0, 0x80a0000}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r5, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r5, &(0x7f000000e280), 0x58a, 0x42, 0x0) 6.138603603s ago: executing program 1 (id=532): r0 = gettid() r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) read(r2, &(0x7f0000001e80)=""/96, 0x60) 4.921371347s ago: executing program 0 (id=533): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000f060300000000000000000005000000050001"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000"], 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r10, 0x0, 0x0, 0x80000001, 0x0) 4.303434083s ago: executing program 2 (id=535): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 4.20118851s ago: executing program 4 (id=536): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000082c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000012400)={0x2020}, 0x2020) 4.181260242s ago: executing program 1 (id=537): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000eb009f000100000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) 4.048001767s ago: executing program 2 (id=538): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) socket$packet(0x11, 0xf8ee34745f88a816, 0x300) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x2b3}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r4, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 3.061156175s ago: executing program 4 (id=539): r0 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x400}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.935606092s ago: executing program 3 (id=540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close(r4) unshare(0x22020600) open_by_handle_at(0xffffffffffffffff, 0x0, 0x125000) socket(0x400000000010, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6c, 0xfffffffd}]}, 0x8) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) 2.559947186s ago: executing program 4 (id=541): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0xec72, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) read$dsp(r5, &(0x7f00000001c0)=""/95, 0x2) 1.531427241s ago: executing program 4 (id=542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb88a8400081"], 0x6e) 1.050216568s ago: executing program 4 (id=543): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x23, 0x9, 0x6}, {0x3, 0x1, 0x9, 0xef17e523}]}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@mcast1, 0x1f, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 864.268005ms ago: executing program 2 (id=544): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x200, @loopback={0x200000000000000}, 0x81}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4080) 764.890488ms ago: executing program 0 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) 641.464338ms ago: executing program 2 (id=546): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x0, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e22, @remote}}}, 0x104) 385.65268ms ago: executing program 1 (id=547): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) 265.970501ms ago: executing program 0 (id=548): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09e", 0xe}], 0x1) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000400)=0x40) io_uring_setup(0x902e34, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 265.791496ms ago: executing program 2 (id=549): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000082c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000012400)={0x2020}, 0x2020) 102.82949ms ago: executing program 2 (id=550): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)=@delchain={0x24, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 1 (id=551): r0 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x400}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. [ 86.229559][ T5836] cgroup: Unknown subsys name 'net' [ 86.347137][ T5836] cgroup: Unknown subsys name 'cpuset' [ 86.357771][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.190139][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.977104][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.985116][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.993811][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.995196][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.001674][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.010548][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.025533][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.025987][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.044740][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.064379][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.074509][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.084982][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.087079][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.093279][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.102348][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.108658][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.115971][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.120804][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.135714][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.143837][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.167476][ T5168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.194405][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.203062][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.214570][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.223156][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.950837][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 93.979066][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 94.076838][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 94.171155][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 94.237069][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 94.411554][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.419314][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.427255][ T5856] bridge_slave_0: entered allmulticast mode [ 94.435186][ T5856] bridge_slave_0: entered promiscuous mode [ 94.451450][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.458648][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.466160][ T5848] bridge_slave_0: entered allmulticast mode [ 94.474206][ T5848] bridge_slave_0: entered promiscuous mode [ 94.487998][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.495568][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.502778][ T5849] bridge_slave_0: entered allmulticast mode [ 94.511273][ T5849] bridge_slave_0: entered promiscuous mode [ 94.519840][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.527294][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.535298][ T5856] bridge_slave_1: entered allmulticast mode [ 94.542554][ T5856] bridge_slave_1: entered promiscuous mode [ 94.571328][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.578551][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.586102][ T5848] bridge_slave_1: entered allmulticast mode [ 94.593462][ T5848] bridge_slave_1: entered promiscuous mode [ 94.608862][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.616076][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.623579][ T5849] bridge_slave_1: entered allmulticast mode [ 94.630866][ T5849] bridge_slave_1: entered promiscuous mode [ 94.714673][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.740244][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.747526][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.754878][ T5864] bridge_slave_0: entered allmulticast mode [ 94.762243][ T5864] bridge_slave_0: entered promiscuous mode [ 94.800243][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.814189][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.825752][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.852373][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.859640][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.868003][ T5864] bridge_slave_1: entered allmulticast mode [ 94.875687][ T5864] bridge_slave_1: entered promiscuous mode [ 94.885368][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.981761][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.008852][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.016619][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.024356][ T5846] bridge_slave_0: entered allmulticast mode [ 95.031644][ T5846] bridge_slave_0: entered promiscuous mode [ 95.042220][ T5849] team0: Port device team_slave_0 added [ 95.049885][ T5856] team0: Port device team_slave_0 added [ 95.059147][ T5856] team0: Port device team_slave_1 added [ 95.067896][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.080981][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.105255][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.112410][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.121290][ T5846] bridge_slave_1: entered allmulticast mode [ 95.128707][ T5846] bridge_slave_1: entered promiscuous mode [ 95.137516][ T5849] team0: Port device team_slave_1 added [ 95.164060][ T5854] Bluetooth: hci2: command tx timeout [ 95.169758][ T5854] Bluetooth: hci1: command tx timeout [ 95.170842][ T5168] Bluetooth: hci3: command tx timeout [ 95.180930][ T5863] Bluetooth: hci0: command tx timeout [ 95.233154][ T5848] team0: Port device team_slave_0 added [ 95.267689][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.275347][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.301690][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.316024][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.323230][ T5863] Bluetooth: hci4: command tx timeout [ 95.324017][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.355951][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.369135][ T5864] team0: Port device team_slave_0 added [ 95.377889][ T5848] team0: Port device team_slave_1 added [ 95.411409][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.418724][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.445176][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.468975][ T5864] team0: Port device team_slave_1 added [ 95.492197][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.502768][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.510186][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.536549][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.599522][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.606725][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.632739][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.646553][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.654049][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.680479][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.694056][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.736972][ T5846] team0: Port device team_slave_0 added [ 95.757591][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.765109][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.791552][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.827053][ T5846] team0: Port device team_slave_1 added [ 95.855798][ T5856] hsr_slave_0: entered promiscuous mode [ 95.862598][ T5856] hsr_slave_1: entered promiscuous mode [ 95.873696][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.880684][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.907582][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.998721][ T5849] hsr_slave_0: entered promiscuous mode [ 96.005337][ T5849] hsr_slave_1: entered promiscuous mode [ 96.011770][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 96.018537][ T5849] Cannot create hsr debugfs directory [ 96.025370][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.032353][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.060167][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.124235][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.131225][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.157877][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.175917][ T5848] hsr_slave_0: entered promiscuous mode [ 96.182495][ T5848] hsr_slave_1: entered promiscuous mode [ 96.188868][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 96.194661][ T5848] Cannot create hsr debugfs directory [ 96.229709][ T5864] hsr_slave_0: entered promiscuous mode [ 96.237123][ T5864] hsr_slave_1: entered promiscuous mode [ 96.243581][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 96.249353][ T5864] Cannot create hsr debugfs directory [ 96.452597][ T5846] hsr_slave_0: entered promiscuous mode [ 96.459264][ T5846] hsr_slave_1: entered promiscuous mode [ 96.466420][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 96.472183][ T5846] Cannot create hsr debugfs directory [ 96.888797][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.927302][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.938908][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.981182][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.085040][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.098226][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.110969][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.135294][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.168365][ T1209] cfg80211: failed to load regulatory.db [ 97.231471][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.243174][ T51] Bluetooth: hci3: command tx timeout [ 97.248651][ T51] Bluetooth: hci1: command tx timeout [ 97.254373][ T5168] Bluetooth: hci2: command tx timeout [ 97.259931][ T5863] Bluetooth: hci0: command tx timeout [ 97.275819][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.288402][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.300565][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.398855][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.413943][ T5863] Bluetooth: hci4: command tx timeout [ 97.425284][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.439134][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.450568][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.571139][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.595546][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.624437][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.650253][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.681623][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.698824][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.735552][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.775619][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.789466][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.796784][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.839724][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.846938][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.859251][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.866430][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.900725][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.907945][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.977085][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.013473][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.108381][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.122300][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.154934][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.162093][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.190353][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.197563][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.241586][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.248786][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.327251][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.334537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.361517][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.457359][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.490283][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.497575][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.566766][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.574003][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.678470][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.724493][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.024761][ T5856] veth0_vlan: entered promiscuous mode [ 99.110900][ T5856] veth1_vlan: entered promiscuous mode [ 99.242735][ T5856] veth0_macvtap: entered promiscuous mode [ 99.319348][ T5856] veth1_macvtap: entered promiscuous mode [ 99.325628][ T5863] Bluetooth: hci3: command tx timeout [ 99.339387][ T5863] Bluetooth: hci0: command tx timeout [ 99.345245][ T51] Bluetooth: hci1: command tx timeout [ 99.350692][ T51] Bluetooth: hci2: command tx timeout [ 99.352125][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.398268][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.424828][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.480284][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.493402][ T51] Bluetooth: hci4: command tx timeout [ 99.502314][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.549089][ T3563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.559717][ T3563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.591121][ T3563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.604503][ T3563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.682635][ T5846] veth0_vlan: entered promiscuous mode [ 99.710826][ T5849] veth0_vlan: entered promiscuous mode [ 99.725038][ T5864] veth0_vlan: entered promiscuous mode [ 99.766563][ T5848] veth0_vlan: entered promiscuous mode [ 99.779465][ T5846] veth1_vlan: entered promiscuous mode [ 99.807524][ T5864] veth1_vlan: entered promiscuous mode [ 99.840569][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.848520][ T5848] veth1_vlan: entered promiscuous mode [ 99.859791][ T5849] veth1_vlan: entered promiscuous mode [ 99.864139][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.965765][ T5848] veth0_macvtap: entered promiscuous mode [ 99.990166][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.997057][ T5848] veth1_macvtap: entered promiscuous mode [ 100.011269][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.016729][ T5846] veth0_macvtap: entered promiscuous mode [ 100.057962][ T5864] veth0_macvtap: entered promiscuous mode [ 100.072089][ T5846] veth1_macvtap: entered promiscuous mode [ 100.092718][ T5864] veth1_macvtap: entered promiscuous mode [ 100.131355][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.156951][ T5849] veth0_macvtap: entered promiscuous mode [ 100.178645][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.191725][ T5849] veth1_macvtap: entered promiscuous mode [ 100.202828][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.245210][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.292743][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.306115][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.318344][ T5969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.318540][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.341748][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.355409][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.372801][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.440387][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.493301][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.521685][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.531209][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.708262][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.727784][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.851240][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.873500][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.063167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.099729][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.123477][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.243677][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.254148][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.271095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.280433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.336499][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.349098][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.390506][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.412940][ T51] Bluetooth: hci2: command tx timeout [ 101.418412][ T51] Bluetooth: hci0: command tx timeout [ 101.423921][ T5863] Bluetooth: hci1: command tx timeout [ 101.429360][ T5863] Bluetooth: hci3: command tx timeout [ 101.512129][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.522705][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.563368][ T51] Bluetooth: hci4: command tx timeout [ 101.755084][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.783282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.789451][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.147380][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.171311][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.226350][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.247343][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.435983][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.476211][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.960376][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.009486][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.068370][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.090558][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.319368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.524157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.658202][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.720469][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.744537][ T5984] fuse: Unknown parameter 'grou00000000000000000000' [ 103.943268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.951675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.961031][ T5988] Invalid ELF header magic: != ELF [ 103.989301][ T5988] Zero length message leads to an empty skb [ 104.036697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.046455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.786234][ T5991] Bluetooth: MGMT ver 1.23 [ 105.033727][ T5998] fuse: Unknown parameter 'fd0x0000000000000004' [ 105.191943][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.529560][ T6032] fuse: Unknown parameter 'grou00000000000000000000' [ 109.604666][ T6050] fuse: Unknown parameter 'fd0x0000000000000004' [ 112.675748][ T6081] Device name cannot be null; rc = [-22] [ 113.789210][ T6088] netlink: 'syz.2.36': attribute type 4 has an invalid length. [ 115.307995][ T6099] lo speed is unknown, defaulting to 1000 [ 115.314445][ T6099] lo speed is unknown, defaulting to 1000 [ 115.323170][ T6099] lo speed is unknown, defaulting to 1000 [ 115.333857][ T6099] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.347996][ T6099] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 115.758919][ T6099] lo speed is unknown, defaulting to 1000 [ 115.767842][ T6099] lo speed is unknown, defaulting to 1000 [ 115.775697][ T6099] lo speed is unknown, defaulting to 1000 [ 115.783454][ T6099] lo speed is unknown, defaulting to 1000 [ 115.791486][ T6099] lo speed is unknown, defaulting to 1000 [ 121.706386][ T6141] fuse: Bad value for 'user_id' [ 121.711453][ T6141] fuse: Bad value for 'user_id' [ 122.383343][ T1209] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.833420][ T1209] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 122.848053][ T1209] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.859274][ T1209] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.047216][ T1209] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.193024][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.692150][ T1209] usb 1-1: can't set config #27, error -71 [ 124.705124][ T1209] usb 1-1: USB disconnect, device number 2 [ 129.727347][ T6211] netlink: 92 bytes leftover after parsing attributes in process `syz.2.66'. [ 129.736553][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.66'. [ 130.308376][ T6217] Unknown options in mask 5 [ 132.705196][ T6233] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 135.131172][ T6250] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 138.168276][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.186127][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.471178][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 141.998903][ T6304] lo speed is unknown, defaulting to 1000 [ 142.162747][ T6309] Device name cannot be null; rc = [-22] [ 142.706186][ T6314] Device name cannot be null; rc = [-22] [ 146.466191][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 148.760677][ T6341] lo speed is unknown, defaulting to 1000 [ 150.632403][ T6358] lo speed is unknown, defaulting to 1000 [ 154.210794][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.252904][ T5940] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.484592][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 156.589520][ T5940] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.599800][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.653427][ T5940] usb 1-1: Product: syz [ 156.662794][ T5940] usb 1-1: Manufacturer: syz [ 156.668229][ T5940] usb 1-1: SerialNumber: syz [ 157.115231][ T5940] usb 1-1: config 0 descriptor?? [ 157.585885][ T5940] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 158.728375][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 158.867311][ T6430] lo speed is unknown, defaulting to 1000 [ 159.813892][ T5940] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 160.425995][ T5940] usb 1-1: USB disconnect, device number 3 [ 165.806815][ T6488] Device name cannot be null; rc = [-22] [ 171.645564][ T6531] dlm: no local IP address has been set [ 171.677772][ T6531] dlm: cannot start dlm midcomms -107 [ 174.428798][ T6561] process 'syz.0.160' launched './file0' with NULL argv: empty string added [ 175.182905][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 175.412996][ T5917] usb 1-1: device descriptor read/64, error -71 [ 175.813327][ T5917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.752333][ T5917] usb 1-1: device descriptor read/64, error -71 [ 176.978504][ T5917] usb usb1-port1: attempt power cycle [ 177.165533][ T6579] netdevsim netdevsim3: Direct firmware load for . [ 177.165533][ T6579] failed with error -2 [ 177.221322][ T6579] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 177.221322][ T6579] [ 179.416993][ T6595] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.134640][ T6583] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 181.649608][ T6616] Device name cannot be null; rc = [-22] [ 185.422767][ T6646] overlayfs: failed to resolve './file0': -2 [ 185.957082][ T6652] Device name cannot be null; rc = [-22] [ 191.594368][ T6682] fuse: Unknown parameter 'user_i00000000000000000000' [ 197.664244][ T5933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.893260][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 197.993789][ T5933] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 198.002032][ T5933] usb 2-1: config 0 has no interface number 0 [ 198.051870][ T5933] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 198.096951][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.204598][ T5933] usb 2-1: config 0 descriptor?? [ 198.269483][ T6750] fuse: Unknown parameter 'user_i00000000000000000000' [ 198.323614][ T5933] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 198.442238][ T5933] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 198.518139][ T5933] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 198.792037][ T5933] usb 2-1: USB disconnect, device number 2 [ 199.183473][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.217'. [ 199.443962][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 199.579882][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.591162][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.815240][ T6784] lo speed is unknown, defaulting to 1000 [ 200.282873][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 200.846893][ T6790] lo speed is unknown, defaulting to 1000 [ 204.170838][ T6834] fuse: Unknown parameter 'user_id00000000000000000000' [ 204.213356][ T5917] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 204.417692][ T5917] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 204.435092][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.451572][ T5917] usb 3-1: config 0 descriptor?? [ 204.562983][ T5933] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.625452][ T6850] vxcan1: entered allmulticast mode [ 204.768780][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 204.789227][ T5933] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 204.821981][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.823006][ T5917] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 204.838096][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 204.871064][ T5917] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 204.877952][ T5933] usb 1-1: Product: syz [ 204.877987][ T5933] usb 1-1: Manufacturer: syz [ 204.878003][ T5933] usb 1-1: SerialNumber: syz [ 204.897681][ T5933] usb 1-1: config 0 descriptor?? [ 204.968741][ T5917] [drm] Initialized udl on minor 2 [ 204.973203][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.979431][ T5917] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.051777][ T5917] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 205.076260][ T5916] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.087708][ T6858] binder: BINDER_SET_CONTEXT_MGR already set [ 205.102479][ T5917] usb 3-1: USB disconnect, device number 2 [ 205.113835][ T6858] binder: 6857:6858 ioctl 4018620d 200000000040 returned -16 [ 205.121055][ T5916] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 205.185501][ T43] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 205.229922][ T43] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 205.283341][ T43] usb 2-1: config 220 has no interface number 2 [ 205.300301][ T43] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 205.338504][ T43] usb 2-1: config 220 interface 0 has no altsetting 0 [ 205.352929][ T43] usb 2-1: config 220 interface 76 has no altsetting 0 [ 205.360014][ T43] usb 2-1: config 220 interface 1 has no altsetting 0 [ 205.370258][ T43] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 205.381127][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.389329][ T43] usb 2-1: Product: syz [ 205.393743][ T43] usb 2-1: Manufacturer: syz [ 205.398409][ T43] usb 2-1: SerialNumber: syz [ 205.539351][ T5933] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 205.565506][ T5933] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 205.628013][ T6852] capability: warning: `syz.1.244' uses deprecated v2 capabilities in a way that may be insecure [ 205.677892][ T43] usb 2-1: selecting invalid altsetting 0 [ 205.686129][ T5933] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 205.714698][ T43] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 205.725158][ T43] usb 2-1: No valid video chain found. [ 205.731883][ T5933] usb 1-1: USB disconnect, device number 7 [ 205.752697][ T43] usb 2-1: selecting invalid altsetting 0 [ 205.790777][ T43] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 205.834607][ T43] usb 2-1: USB disconnect, device number 3 [ 206.446756][ T30] audit: type=1326 audit(1751724880.786:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb278e929 code=0x7ffc0000 [ 206.583204][ T30] audit: type=1326 audit(1751724880.786:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb278e929 code=0x7ffc0000 [ 206.674525][ T30] audit: type=1326 audit(1751724880.796:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7cb278e929 code=0x7ffc0000 [ 206.732928][ T30] audit: type=1326 audit(1751724880.796:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb278e929 code=0x7ffc0000 [ 206.835424][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 208.292205][ T5917] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 208.467782][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.484679][ T5917] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 208.499544][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.508154][ T5917] usb 1-1: Product: syz [ 208.512335][ T5917] usb 1-1: Manufacturer: syz [ 208.542194][ T5917] usb 1-1: SerialNumber: syz [ 208.572082][ T5917] usb 1-1: config 0 descriptor?? [ 209.141454][ T6924] batadv0: entered promiscuous mode [ 209.438385][ T6924] macsec1: entered promiscuous mode [ 209.515955][ T6924] macsec1: entered allmulticast mode [ 209.531915][ T6924] batadv0: entered allmulticast mode [ 209.636257][ T6924] batadv0: left allmulticast mode [ 209.683267][ T6924] batadv0: left promiscuous mode [ 210.562900][ T5916] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 210.803044][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 210.830522][ T5916] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 210.880304][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.920539][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.971823][ T5916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.989515][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.018024][ T5916] usb 5-1: Product: syz [ 211.022255][ T5916] usb 5-1: Manufacturer: syz [ 211.032863][ T5916] usb 5-1: SerialNumber: syz [ 211.095046][ T6936] netlink: 80 bytes leftover after parsing attributes in process `syz.3.273'. [ 211.202270][ T5917] usb 1-1: USB disconnect, device number 8 [ 211.281899][ T5916] usb 5-1: 0:2 : does not exist [ 211.353676][ T5916] usb 5-1: USB disconnect, device number 2 [ 211.429167][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 212.292203][ T6959] usb usb8: usbfs: process 6959 (syz.4.280) did not claim interface 0 before use [ 213.013102][ T5916] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 213.163098][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 213.166364][ T6963] lo speed is unknown, defaulting to 1000 [ 213.175944][ T5916] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 213.240968][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.298022][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.349575][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.392074][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.441636][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.550627][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.893115][ T5916] usb 4-1: GET_CAPABILITIES returned 0 [ 213.898688][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 214.090654][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 214.531903][ T6973] geneve2: entered promiscuous mode [ 214.677282][ T5917] usb 4-1: USB disconnect, device number 2 [ 214.903016][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 215.063085][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 215.075267][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.089699][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.101975][ T5933] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 215.116280][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.148969][ T5933] usb 5-1: config 0 descriptor?? [ 215.150409][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.213260][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.237598][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.264995][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.284276][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.301902][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.320387][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.328449][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.337036][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.348556][ T5916] hid-generic 6B95:0005:0001.0001: unknown main item tag 0x0 [ 215.380095][ T5916] hid-generic 6B95:0005:0001.0001: hidraw0: HID v0.0b Device [syz0] on syz1 [ 215.658091][ T5933] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 215.829526][ T5916] usb 5-1: USB disconnect, device number 3 [ 215.855772][ T6988] fido_id[6988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.550807][ T6978] lo speed is unknown, defaulting to 1000 [ 216.733311][ T6994] fido_id[6994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 217.003127][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 217.010175][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 217.016605][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 217.018804][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 220.240045][ T7054] usb usb1: usbfs: process 7054 (syz.1.310) did not claim interface 42 before use [ 222.137648][ T7075] lo speed is unknown, defaulting to 1000 [ 223.798026][ T7097] netlink: 80 bytes leftover after parsing attributes in process `syz.3.325'. [ 225.091732][ T7104] tipc: Started in network mode [ 225.153139][ T7104] tipc: Node identity 2, cluster identity 4711 [ 225.159412][ T7104] tipc: Node number set to 2 [ 225.321053][ T7111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 225.478880][ T7104] tipc: Cannot configure node identity twice [ 226.023319][ T7111] ip6gre1: entered promiscuous mode [ 226.028752][ T7111] ip6gre1: entered allmulticast mode [ 226.323666][ T7117] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 226.331456][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.332'. [ 226.537243][ T7117] team0: Port device geneve0 added [ 226.648488][ T7123] netlink: 156 bytes leftover after parsing attributes in process `syz.0.334'. [ 227.301572][ T7128] mmap: syz.1.336 (7128) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.442997][ T5916] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 227.603869][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 227.614291][ T7138] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 227.666456][ T5916] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 227.713518][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.752041][ T5916] usb 1-1: config 0 has no interface number 0 [ 227.758283][ T5916] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 227.802855][ T5916] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 227.838139][ T5916] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 227.903135][ T5916] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 227.912496][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.998707][ T5916] usb 1-1: Product: syz [ 228.022903][ T5916] usb 1-1: Manufacturer: syz [ 228.029189][ T5916] usb 1-1: SerialNumber: syz [ 228.059212][ T5916] usb 1-1: config 0 descriptor?? [ 228.084367][ T7134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.884319][ T5916] usb 1-1: NFC: intf ffff888077287000 id ffffffff8eb55e80 [ 229.049379][ T5916] usb 1-1: USB disconnect, device number 9 [ 231.397929][ T7179] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 232.217596][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 232.309913][ T7182] veth3: entered promiscuous mode [ 232.417012][ T7182] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 232.429056][ T7169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.450998][ T7169] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.522991][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 232.602366][ T7169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.609951][ T7169] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 232.624633][ T7169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.635391][ T7169] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 232.671726][ T7169] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.684233][ T7169] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.018571][ T7189] nvme_fabrics: missing parameter 'transport=%s' [ 233.025369][ T7189] nvme_fabrics: missing parameter 'nqn=%s' [ 233.184673][ T7197] binder_alloc: binder_alloc_mmap_handler: 7196 200000ff9000-200000ffd000 already mapped failed -16 [ 233.576031][ T7213] input: syz1 as /devices/virtual/input/input6 [ 233.811309][ T7224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'. [ 234.603167][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 234.603257][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 234.688357][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 234.688386][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 235.253802][ T7235] nvme_fabrics: missing parameter 'transport=%s' [ 235.273515][ T7235] nvme_fabrics: missing parameter 'nqn=%s' [ 236.139341][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 236.683552][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 236.762940][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 236.762969][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 236.778280][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 237.667239][ T5916] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 237.914924][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.933053][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.971672][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.138923][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.242955][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 238.446352][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 238.525463][ T5916] usb 4-1: usb_control_msg returned -32 [ 238.593593][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.643563][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 238.698254][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 238.779310][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 238.823335][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.858531][ T5853] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 238.874015][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.886445][ T5853] usb 5-1: Product: syz [ 238.894391][ T5853] usb 5-1: Manufacturer: syz [ 238.903152][ T5853] usb 5-1: SerialNumber: syz [ 238.916189][ T5853] usb 5-1: config 0 descriptor?? [ 239.035780][ T5916] usb 4-1: USB disconnect, device number 3 [ 239.123113][ T5853] rc_core: IR keymap rc-xbox-dvd not found [ 239.135836][ T5853] Registered IR keymap rc-empty [ 239.164703][ T5853] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 239.196438][ T5853] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 239.217347][ T7285] netlink: 388 bytes leftover after parsing attributes in process `syz.1.389'. [ 241.813129][ T5940] usb 5-1: USB disconnect, device number 4 [ 241.813194][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 243.572097][ T30] audit: type=1326 audit(1751724917.916:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe514b8e929 code=0x0 [ 243.698202][ T7350] bridge_slave_0: left allmulticast mode [ 243.704508][ T7350] bridge_slave_0: left promiscuous mode [ 243.714116][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.755079][ T7350] bridge_slave_1: left allmulticast mode [ 243.773012][ T7350] bridge_slave_1: left promiscuous mode [ 243.778832][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.844303][ T7350] bond0: (slave bond_slave_0): Releasing backup interface [ 243.893485][ T7350] bond0: (slave bond_slave_1): Releasing backup interface [ 243.990628][ T7350] team0: Port device team_slave_0 removed [ 244.012403][ T7350] team0: Port device team_slave_1 removed [ 244.026163][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.064246][ T7350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.129969][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.149073][ T7350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.424609][ T7361] netlink: 104 bytes leftover after parsing attributes in process `syz.1.415'. [ 244.439395][ T7352] lo speed is unknown, defaulting to 1000 [ 245.202913][ T1209] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 245.425917][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 245.446525][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.478826][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.497071][ T5916] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 245.514962][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 245.562869][ T1209] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 245.588411][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.628550][ T7350] netlink: 60 bytes leftover after parsing attributes in process `syz.4.413'. [ 245.660389][ T1209] usb 1-1: config 0 descriptor?? [ 245.702995][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 245.724524][ T5916] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 245.733591][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.748375][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.762367][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.773682][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.788145][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.797716][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.834400][ T7350] syz.4.413 (7350) used greatest stack depth: 19928 bytes left [ 246.093935][ T1209] hid_parser_main: 68 callbacks suppressed [ 246.093955][ T1209] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 246.127679][ T5916] usb 3-1: GET_CAPABILITIES returned 0 [ 246.152965][ T5916] usbtmc 3-1:16.0: can't read capabilities [ 246.227250][ T1209] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 246.280601][ T7371] random: crng reseeded on system resumption [ 246.293336][ T1209] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 246.308506][ T1209] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 246.348542][ T1209] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 246.384805][ T1209] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 246.554751][ T1209] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 246.574176][ T1209] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 246.660909][ T5917] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 246.687220][ T1209] usb 1-1: USB disconnect, device number 10 [ 246.707516][ T5917] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 246.761263][ T5917] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 246.807821][ T5917] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 246.814980][ T43] usb 3-1: USB disconnect, device number 3 [ 248.809425][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 248.985380][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 249.023129][ T5917] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 249.050312][ T5917] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.080975][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.111667][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.133300][ T5917] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.225206][ T5917] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.261654][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.537840][ T5917] usb 2-1: GET_CAPABILITIES returned 0 [ 249.543597][ T5917] usbtmc 2-1:16.0: can't read capabilities [ 250.283318][ T5917] usb 2-1: USB disconnect, device number 4 [ 254.182174][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 257.684505][ T7541] block device autoloading is deprecated and will be removed. [ 259.193100][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 259.413078][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 259.430627][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.459440][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 259.483857][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 259.496144][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.512714][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 259.522070][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.530361][ T43] usb 4-1: Product: syz [ 259.607143][ T7566] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.614389][ T7566] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.621300][ T7566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.634411][ T7566] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.641224][ T43] usb 4-1: Manufacturer: syz [ 259.651041][ T43] usb 4-1: SerialNumber: syz [ 259.660103][ T43] usb 4-1: config 0 descriptor?? [ 259.787283][ T43] rc_core: IR keymap rc-xbox-dvd not found [ 259.807459][ T43] Registered IR keymap rc-empty [ 259.826871][ T43] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 259.891926][ T43] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 261.056942][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.064909][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.492987][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 261.643149][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 261.649365][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 261.655528][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 262.516500][ T7603] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[7603] [ 262.531366][ T7603] dns_resolver: Unsupported server list version (0) [ 262.844087][ T43] usb 4-1: USB disconnect, device number 4 [ 262.850002][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 263.387887][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 263.953378][ T7625] input: syz1 as /devices/virtual/input/input10 [ 264.866026][ T5917] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 265.058818][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 265.154203][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.289997][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 265.482756][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 265.671810][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.940737][ T5917] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 266.018589][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.062857][ T5917] usb 3-1: Product: syz [ 266.087807][ T5917] usb 3-1: Manufacturer: syz [ 266.122834][ T5917] usb 3-1: SerialNumber: syz [ 266.146071][ T5917] usb 3-1: config 0 descriptor?? [ 266.412880][ T5917] rc_core: IR keymap rc-xbox-dvd not found [ 266.440983][ T5917] Registered IR keymap rc-empty [ 266.485978][ T5917] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 266.529212][ T5917] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 266.928042][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 268.028475][ T7667] geneve2: entered promiscuous mode [ 269.164412][ T7681] vivid-003: ================= START STATUS ================= [ 269.183252][ T7681] vivid-003: Radio HW Seek Mode: Bounded [ 269.197121][ T7681] vivid-003: Radio Programmable HW Seek: false [ 269.222551][ T7681] vivid-003: RDS Rx I/O Mode: Block I/O [ 269.381496][ T5917] usb 3-1: USB disconnect, device number 4 [ 269.387612][ C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 269.429856][ T7681] vivid-003: Generate RBDS Instead of RDS: false [ 269.474080][ T7681] vivid-003: RDS Reception: true [ 269.493745][ T7681] vivid-003: RDS Program Type: 0 inactive [ 269.541393][ T7681] vivid-003: RDS PS Name: inactive [ 269.563783][ T7681] vivid-003: RDS Radio Text: inactive [ 269.588542][ T7681] vivid-003: RDS Traffic Announcement: false inactive [ 269.620006][ T7681] vivid-003: RDS Traffic Program: false inactive [ 269.658429][ T7681] vivid-003: RDS Music: false inactive [ 269.689939][ T7681] vivid-003: ================== END STATUS ================== [ 269.956073][ T7688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.533'. [ 270.222918][ T5967] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 270.393376][ T5967] usb 1-1: Using ep0 maxpacket: 8 [ 271.145391][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.157279][ T5967] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.208490][ T5967] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 271.218283][ T5967] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 271.431126][ T5967] usb 1-1: Product: syz [ 271.452038][ T5967] usb 1-1: Manufacturer: syz [ 271.457114][ T5967] usb 1-1: SerialNumber: syz [ 271.493816][ T5967] usb 1-1: config 0 descriptor?? [ 273.559168][ T5940] usb 1-1: USB disconnect, device number 11 [ 274.385161][ T7742] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 274.395394][ T7742] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 7742, name: syz.0.548 [ 274.442227][ T7742] preempt_count: 0, expected: 0 [ 274.477167][ T7742] RCU nest depth: 1, expected: 0 [ 274.482514][ T7742] 2 locks held by syz.0.548/7742: [ 274.488193][ T7742] #0: ffffffff8e13bf60 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 274.503536][ T7742] #1: ffff88807b106588 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 274.515410][ T7742] CPU: 1 UID: 0 PID: 7742 Comm: syz.0.548 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 274.515441][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.515460][ T7742] Call Trace: [ 274.515470][ T7742] [ 274.515480][ T7742] dump_stack_lvl+0x189/0x250 [ 274.515517][ T7742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.515552][ T7742] ? print_lock_name+0xde/0x100 [ 274.515590][ T7742] __might_resched+0x495/0x610 [ 274.515623][ T7742] ? __pfx___might_resched+0x10/0x10 [ 274.515651][ T7742] ? vma_start_read+0x218/0x3b0 [ 274.515679][ T7742] ? vma_start_read+0x259/0x3b0 [ 274.515711][ T7742] ? __filemap_get_folio+0x9a6/0xaf0 [ 274.515748][ T7742] down_read+0x22/0x2e0 [ 274.515786][ T7742] freader_get_folio+0x38b/0x830 [ 274.515822][ T7742] freader_fetch+0xa3/0x5d0 [ 274.515865][ T7742] __build_id_parse+0x133/0x7d0 [ 274.515898][ T7742] ? __pfx___build_id_parse+0x10/0x10 [ 274.515933][ T7742] ? query_matching_vma+0x494/0x4b0 [ 274.515988][ T7742] procfs_procmap_ioctl+0x7dd/0xce0 [ 274.516057][ T7742] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 274.516102][ T7742] ? __fget_files+0x2a/0x420 [ 274.516135][ T7742] ? __fget_files+0x2a/0x420 [ 274.516164][ T7742] ? __fget_files+0x3a0/0x420 [ 274.516194][ T7742] ? __fget_files+0x2a/0x420 [ 274.516226][ T7742] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.516251][ T7742] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 274.516280][ T7742] __se_sys_ioctl+0xf9/0x170 [ 274.516307][ T7742] do_syscall_64+0xfa/0x3b0 [ 274.516334][ T7742] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.516362][ T7742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.516383][ T7742] ? clear_bhb_loop+0x60/0xb0 [ 274.516411][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.516432][ T7742] RIP: 0033:0x7f5d9878e929 [ 274.516460][ T7742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.516479][ T7742] RSP: 002b:00007f5d9965d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.516502][ T7742] RAX: ffffffffffffffda RBX: 00007f5d989b6080 RCX: 00007f5d9878e929 [ 274.516519][ T7742] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 274.516534][ T7742] RBP: 00007f5d98810b39 R08: 0000000000000000 R09: 0000000000000000 [ 274.516547][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.516559][ T7742] R13: 0000000000000000 R14: 00007f5d989b6080 R15: 00007fff8ef41b78 [ 274.516594][ T7742] [ 274.519040][ T7742] [ 274.763605][ T7742] ============================= [ 274.768449][ T7742] [ BUG: Invalid wait context ] [ 274.773291][ T7742] 6.16.0-rc4-next-20250704-syzkaller #0 Tainted: G W [ 274.781432][ T7742] ----------------------------- [ 274.786278][ T7742] syz.0.548/7742 is trying to lock: [ 274.791477][ T7742] ffff888148d7a040 (mapping.invalidate_lock){++++}-{4:4}, at: freader_get_folio+0x38b/0x830 [ 274.801570][ T7742] other info that might help us debug this: [ 274.807467][ T7742] context-{5:5} [ 274.810916][ T7742] 2 locks held by syz.0.548/7742: [ 274.815943][ T7742] #0: ffffffff8e13bf60 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 274.825383][ T7742] #1: ffff88807b106588 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 274.834184][ T7742] stack backtrace: [ 274.837907][ T7742] CPU: 1 UID: 0 PID: 7742 Comm: syz.0.548 Tainted: G W 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 274.837931][ T7742] Tainted: [W]=WARN [ 274.837936][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.837946][ T7742] Call Trace: [ 274.837954][ T7742] [ 274.837962][ T7742] dump_stack_lvl+0x189/0x250 [ 274.837984][ T7742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.838016][ T7742] ? __pfx__printk+0x10/0x10 [ 274.838047][ T7742] __lock_acquire+0xbcb/0xd20 [ 274.838074][ T7742] ? freader_get_folio+0x38b/0x830 [ 274.838094][ T7742] lock_acquire+0x120/0x360 [ 274.838117][ T7742] ? freader_get_folio+0x38b/0x830 [ 274.838137][ T7742] ? vma_start_read+0x218/0x3b0 [ 274.838156][ T7742] ? vma_start_read+0x259/0x3b0 [ 274.838179][ T7742] down_read+0x46/0x2e0 [ 274.838201][ T7742] ? freader_get_folio+0x38b/0x830 [ 274.838222][ T7742] freader_get_folio+0x38b/0x830 [ 274.838244][ T7742] freader_fetch+0xa3/0x5d0 [ 274.838267][ T7742] __build_id_parse+0x133/0x7d0 [ 274.838287][ T7742] ? __pfx___build_id_parse+0x10/0x10 [ 274.838309][ T7742] ? query_matching_vma+0x494/0x4b0 [ 274.838337][ T7742] procfs_procmap_ioctl+0x7dd/0xce0 [ 274.838362][ T7742] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 274.838386][ T7742] ? __fget_files+0x2a/0x420 [ 274.838408][ T7742] ? __fget_files+0x2a/0x420 [ 274.838428][ T7742] ? __fget_files+0x3a0/0x420 [ 274.838447][ T7742] ? __fget_files+0x2a/0x420 [ 274.838469][ T7742] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.838485][ T7742] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 274.838505][ T7742] __se_sys_ioctl+0xf9/0x170 [ 274.838522][ T7742] do_syscall_64+0xfa/0x3b0 [ 274.838543][ T7742] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.838562][ T7742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.838577][ T7742] ? clear_bhb_loop+0x60/0xb0 [ 274.838594][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.838609][ T7742] RIP: 0033:0x7f5d9878e929 [ 274.838624][ T7742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.838637][ T7742] RSP: 002b:00007f5d9965d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.838653][ T7742] RAX: ffffffffffffffda RBX: 00007f5d989b6080 RCX: 00007f5d9878e929 [ 274.838665][ T7742] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 274.838675][ T7742] RBP: 00007f5d98810b39 R08: 0000000000000000 R09: 0000000000000000 [ 274.838684][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.838693][ T7742] R13: 0000000000000000 R14: 00007f5d989b6080 R15: 00007fff8ef41b78 [ 274.838710][ T7742]