last executing test programs: 14m40.711892025s ago: executing program 4 (id=183): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) umount2(&(0x7f0000000540)='.\x00', 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x1, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES8=0x0], &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffff09, 0x0, 0x41}) 14m36.488008527s ago: executing program 4 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYBLOB="0000000000000000b708"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14m35.628035771s ago: executing program 4 (id=201): r0 = syz_open_procfs(0x0, &(0x7f0000002700)='net/ip_mr_cache\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008030}, 0x2000000) pread64(r0, &(0x7f0000000000)=""/12, 0xfffffc64, 0x36) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000200000040f3045507400001020301090224000101028005b4000000020301020f092105000401221e0009058103ff03067f05"], 0x0) 14m33.61952239s ago: executing program 4 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\"\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYBLOB="0000000000000000b708"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x108000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 14m31.499711045s ago: executing program 4 (id=219): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0xf, &(0x7f00000001c0)={0xf, 0x6}, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14m31.254810108s ago: executing program 4 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYBLOB="0000000000000000b708"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff1f}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14m30.515327616s ago: executing program 32 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYBLOB="0000000000000000b708"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff1f}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12m22.940110783s ago: executing program 3 (id=664): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r2, &(0x7f00000029c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_dest={0x18, 0x10c}, @zcopy_cookie={0x11}], 0x30}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) r3 = syz_open_dev$usbfs(0x0, 0x3, 0x40000) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x6fd}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f000001b700)=ANY=[@ANYBLOB="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"], 0x25f0}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) 12m21.366292057s ago: executing program 3 (id=669): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) fanotify_mark(0xffffffffffffffff, 0x510, 0x48001051, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x412c, 0x0, 0x5, 0x9}]}, 0x10) r1 = fanotify_init(0x54, 0x101000) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x10000, 0x40, 0xfdfffffd, 0x1}) io_uring_register$IORING_REGISTER_FILES2(r5, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)=0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"]) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x101, &(0x7f00000000c0)=0x4) 12m20.20825011s ago: executing program 3 (id=672): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) close(r1) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x8}) 12m19.800942699s ago: executing program 3 (id=673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket(0x1d, 0x2, 0x6) (async) r6 = syz_io_uring_setup(0x52, &(0x7f0000000240)={0x0, 0xb642, 0x1000, 0x3, 0xc6}, &(0x7f0000000180), &(0x7f00000002c0)) syz_io_uring_setup(0x50d9, &(0x7f0000000300)={0x0, 0x1381, 0x80, 0x1, 0x35b, 0x0, r6}, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRES32, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000084) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) close_range(r2, 0xffffffffffffffff, 0x0) 12m19.55114758s ago: executing program 3 (id=678): openat$dir(0xffffffffffffff9c, 0x0, 0xa8c0, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x111, &(0x7f0000000440)={0x0, 0x3fa9, 0x0, 0x2, 0x84}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r4) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000380)={@val={0x0, 0x800}, @void, @eth={@empty, @random="1f00", @val, {@mpls_mc={0x88ca, {[], @llc={@llc={0x8e, 0xf8, "f0"}}}}}}}, 0x1d) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'ipvlan1\x00', 0x400}) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, 0x0) r11 = fsopen(&(0x7f00000000c0)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 12m19.19539415s ago: executing program 3 (id=679): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xeb}}}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x32}, @in6=@mcast2, {0x0, 0x2000, 0xfffffffffffeffff, 0x0, 0x4, 0x6}, {0xfffffffffffff461, 0x0, 0x0, 0x10000}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 12m18.712848136s ago: executing program 33 (id=679): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xeb}}}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x32}, @in6=@mcast2, {0x0, 0x2000, 0xfffffffffffeffff, 0x0, 0x4, 0x6}, {0xfffffffffffff461, 0x0, 0x0, 0x10000}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 4m9.895437078s ago: executing program 2 (id=2644): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xc, 0xfe, 0x0, @SEQ_NOTEON=@special}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0xfffffffffffff001, 0x5e4e, 0x6, 0xc, 0x7, 0xfff, 0x3848, 0xd2, 0x7ff, 0x100, 0x7, 0x0, 0x0, 0x1, 0x4336, 0x1], 0xffff1000, 0x1000}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) (async) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 4m9.120058253s ago: executing program 2 (id=2648): r0 = socket$alg(0x26, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x10001, r1}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r3, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4m8.999498214s ago: executing program 2 (id=2651): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d40)={0x34, 0x39, 0x800, 0x70bd25, 0x25dfdbfe, "", [@nested={0x8, 0x135, 0x0, 0x1, [@typed={0x4, 0xc2}]}, @typed={0x14, 0xb5, 0x0, 0x0, @str='smackf3tran\b\x00\x00\x00e'}, @typed={0x4, 0x6f, 0x0, 0x0, @binary}, @nested={0x4, 0x81}]}, 0x34}], 0x1}, 0x4080000) 4m8.680312468s ago: executing program 2 (id=2653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000001010400008f00000000000a00"], 0x14}, 0x1, 0xfffff000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo(r1, r1, 0xa, &(0x7f0000000400)={0x2b, 0x8, 0x5}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48040) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) syz_io_uring_setup(0x4f5a, &(0x7f0000000280)={0x0, 0x57c7, 0x86ce1a54f7c65264, 0x1, 0x28c, 0x0, r9}, &(0x7f0000000300), &(0x7f00000003c0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, &(0x7f0000000180)=0x80) 4m6.381454727s ago: executing program 2 (id=2660): mkdir(&(0x7f00000000c0)='./file1\x00', 0x107) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 4m6.287526119s ago: executing program 2 (id=2662): syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 2m59.981058483s ago: executing program 34 (id=2662): syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 10.236420852s ago: executing program 6 (id=3298): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006300000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, @void, @value}, 0x94) 10.114044912s ago: executing program 6 (id=3301): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc53a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x8, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '~'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfeff, 0x7, 0x97}, {0x6, 0x24, 0x1a, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @country_functional={0x8, 0x24, 0x7, 0xff, 0x3, [0x6]}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x81, 0x80, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x7, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0xf8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x7}}}}}}}]}}, &(0x7f0000001240)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0xa, 0x0, 0x6, 0x8, 0xe}, 0x41, &(0x7f0000000400)={0x5, 0xf, 0x41, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xde, "25e7cd996aeaa1c715a1cc750c5f0dfd"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "aef2eaf1a614bfc83470ebf075513403"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "70f5898f685e8d6c8d223d3e07e5340a"}]}, 0xa, [{0xf2, &(0x7f0000000480)=@string={0xf2, 0x3, "7d1e195164c1c522a6357fba79a3b3a9fbe6d8f57bc3feef3ee613916cb329ccb8503f9907b4cb1983d08fdc79f0de542bdff9b74b4048575301055d8a3d822ce8aca30bddae8f26989f7736ef57806c337a308106aaee10744b700ed3f405ab406e4ffdff1254bb18929af30397d738077a955d8ce6e1e0bb3361cbe42f839706c8fb0485e9f634069671ad2524372764f897f323202365ae1c69b9020dd11ef23fed071c4413261d704f257d234fba8fbceb4c8474a4a82697d750aacca8f6a0f374031685007043192c6a51c1c1f0677b4a0403003b0fa06ecad7ac5826b3dc48b9bccf22adb2c45b2ff792b9f0fb"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x180c}}, {0x7a, &(0x7f00000005c0)=@string={0x7a, 0x3, "bc81c4b62d4f7bc243069470a06545473059ffdd090cec2af03b8da7b564449395d1a624d09b4b8a664fc0c951b4bbd5baadb58266ec8c46da082a05c0d7c982e316d0b339ecaef5064a7709e77bbd8e03c8850fa656e0fb1042a166c49973ff2777945b172e16667bf853f95d52c2adae20c86237c913a3"}}, {0x75, &(0x7f0000000640)=@string={0x75, 0x3, "f09c953060bc18028c4b011e668d763628cdfad3695e5a3191cab788d4db019ed0669e3b3c1f4f3131032849dcf71cae06d52668accb18e4fe343f75553ffb18915b3fd79cdaf8c3b31c20766465946a77b8c97aa9c3305c3cc8ee1009d4c68e414aaa7070450b8266aa4f0f1ca03a777ae33b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1009}}, {0x86, &(0x7f0000000740)=@string={0x86, 0x3, "a1e578b695a4b23051708d1f07ae16cbfe84bbbb03f51f439752743ab6c450a3c64d13e09a44a0a51fadb9a0fd9b9aa4322b54c8a43606b0fae7fa7d514166de117cef46a69e2ad49aef346b4e331761eb605a4a540c5943a14b3c62946cb447ee61f1981bb8676a51d4fe1562a6632be740a97fe2f1380fc129fc3e707317f84d91a9c1"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x43e}}, {0x23, &(0x7f00000011c0)=@string={0x23, 0x3, "6a1e1445a702cf4d03cdfcf0e3789eadb0b541bbce214f573c362ff1af3932b42d"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x407}}]}) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000844) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x80) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x131, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8050) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, &(0x7f0000000ac0)={0x20, 0xe, 0x2f, {0x2f, 0x21, "ecc622a2722ca0eeeb4b0c8cf0ea363ca12097529369eca4bc4fb17cf62459f739eb25df95204f7fb6c95e87ac"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000b40)={0x0, 0xf, 0x14, {0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0xd391, 0xf, 0x401}, @ptm_cap={0x3}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x4b, 0x6, "2c8117a2", "6432a43f"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x8, 0x8b, 0x3, 0x2, 0x10, 0x4}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x40, 0x0, 0xb3, "1f2d6c2fb61914911b4c6e5d11922f09f1fcd5706b8fd1a8ab29b88ce471dfe6ee5a3c65b27060849fd9c2b99775b645dac995c51d29f3e2226b11d4fbb0d1edb0a765e93694f9b1415d6a0bf05def35bb0d07d1ef3f4651d7ea5cdd459a46c15615ae2168425dc6c6763a2610ab15a97d8b77353f5d93d4523fa8502ec1ad014636a35e817ebf9aa06d2ca4693b5187acf024f7cc07526d9e86e48143ed05e29088e22732e840014c9d6d72068d1301e38211"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x29}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "53da"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0xbb}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @random="0ef4ebd02706"}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, 'u='}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0xab00}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0xe1}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) sendmsg$NFT_BATCH(r8, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004011) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xb, "bd29"}, @local=@item_4={0x3, 0x2, 0x8, "c6340c94"}]}}, 0x0}, 0x0) 10.086566993s ago: executing program 0 (id=3302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0xdddd1000, 0x1, 0x4, 0x2, 0x0, [{0xe, 0x6, 0x2, '\x00', 0xa8}, {0x9a, 0xc, 0xfa, '\x00', 0xff}, {0x2, 0x73, 0xe, '\x00', 0x6}, {0x10, 0x9, 0x3, '\x00', 0xfb}, {0x6, 0x2, 0x4, '\x00', 0xbe}, {0x7, 0x40, 0xa8, '\x00', 0xb3}, {0xae, 0x0, 0x20, '\x00', 0x32}, {0x79, 0x10, 0x9, '\x00', 0x27}, {0x9, 0x1, 0xff, '\x00', 0xdc}, {0x9, 0xfe, 0x40, '\x00', 0x6}, {0x9, 0x81, 0x7f, '\x00', 0x80}, {0x5, 0x1, 0xe, '\x00', 0x6}, {0x2, 0x2, 0x9, '\x00', 0x4}, {0x81, 0x1a, 0xff, '\x00', 0x7}, {0x3, 0xb5, 0x4, '\x00', 0x80}, {0x6, 0x0, 0x1, '\x00', 0xd}, {0xf, 0x8, 0x3, '\x00', 0x7}, {0x9, 0xe0, 0x8, '\x00', 0x8}, {0x7, 0x7f, 0x10, '\x00', 0x8}, {0x2, 0x2, 0xc4, '\x00', 0x7}, {0x6, 0xe, 0x0, '\x00', 0x3}, {0xc, 0x3, 0x7, '\x00', 0x9}, {0x3, 0x5, 0x2, '\x00', 0x8}, {0xf, 0xee, 0x3, '\x00', 0xc8}]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r3], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8.867606751s ago: executing program 0 (id=3306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x100000001, &(0x7f0000000400)=""/174) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @local, 0x4e21, 0xfffffffe, 'lc\x00', 0x4, 0x8, 0x77}, {@loopback, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x4}}, 0x44) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000"], 0x48) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r10, 0x6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xeb}}}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x6}, {0xfffffffffffff461, 0x0, 0x0, 0x10000}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 7.941098226s ago: executing program 0 (id=3309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d40)={0x2c, 0x39, 0x800, 0x70bd25, 0x25dfdbfe, "", [@typed={0x14, 0xb5, 0x0, 0x0, @str='smackf3tran\b\x00\x00\x00e'}, @typed={0x4, 0x6f, 0x0, 0x0, @binary}, @nested={0x4, 0x81}]}, 0x2c}], 0x1}, 0x4080000) 6.618205225s ago: executing program 0 (id=3313): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000079c0)=ANY=[@ANYBLOB="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"], 0x2204}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000003d000900000000000000000001000000040000001c000180180010800c000f00090000000000000008000100e000000108000200e0829a7f54a63c11e8fb2281ad2e719fc1268d8c463727ed457d40a903c809e6d7e12dfe1b3a9dcb511ab0eb206dbf15b330f190b2759a51e8601295ddbbf2813dd66292366b0c44f82a242239541b5a2f5de527c93fd6e316b25b9837576c3e540a6054176bce0529636a3c2de5915ca4d97423f604d9d010409d2cdef471a272a9373e392382450833e3aa402f80591812c00bb2e02292a9205c145a35df53115b79ef40d4bc70e75fa6d225de49bf5da25485d28ac6f9bcde5f26b9412a968c47e4dcd7b9f3eeae576c7958b69d7322320b86b3f8c0aa37b26430750ccc2d9bdcbf6695317583dae23d537f96e2456b334256d987eec8562cd5f83a96a19e905e", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) io_submit(r4, 0x2000007b, &(0x7f0000000000)) io_getevents(r4, 0x5, 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f00000003c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) timer_delete(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x2, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) r9 = getpgid(0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000440012800e0001006970366772657461700000063000028014000700ff0100000000000000000002000000010500170000e8ff0006000f0001000000050016000200000008001300", @ANYRES32=r9, @ANYBLOB], 0xe8}}, 0x0) r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="2014de00"], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000240), 0x9, 0xa000) fcntl$setownex(r5, 0xf, &(0x7f00000000c0)={0x1, r9}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 6.583661151s ago: executing program 5 (id=3314): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)) r1 = socket(0x2b, 0x80801, 0x1) syz_genetlink_get_family_id$tipc2(0x0, r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) sendmsg$kcm(r2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) fsopen(0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd08b781fc43527af}, 0x60008010) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x109b70819ce8d017, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_1\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40448d0}, 0x8000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x5f, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="008d7acda0", 0x0, 0x0, 0x0, 0x3, 0x0}) 6.470554056s ago: executing program 7 (id=3315): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='dyn,smackfsroot=m']) 6.470355542s ago: executing program 1 (id=3316): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 5.851579887s ago: executing program 1 (id=3317): socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 5.381361982s ago: executing program 5 (id=3318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000003c0), 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x4b8, 0x30, 0x1, 0x5000000, 0x0, {}, [{0x4a4, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0x3ff, 0xffff, 0x4, 0x1, 0x4, 0x8e57, 0x9, 0x2, 0x4, 0x8, 0x48, 0x3, 0xa, 0xd8d, 0x4, 0x1, 0x9, 0x7, 0x9, 0x2, 0x2, 0x4, 0x7fff, 0xe, 0x1, 0xff, 0xffffffff, 0x6, 0x2, 0xc, 0x1000, 0x8, 0x3, 0x1, 0x1, 0xffffffff, 0x9, 0x6, 0x46a, 0x81, 0x4, 0x6, 0x6, 0x5, 0x5, 0x8, 0x4, 0xe68, 0x10001, 0xa1, 0x0, 0xa, 0x2c5, 0x4, 0xf97, 0x8, 0xffffff81, 0xfffffff7, 0x0, 0xffffffff, 0xc458, 0x7, 0x800, 0x9, 0xf2, 0x100, 0x2, 0x6, 0x29c, 0x4, 0x8, 0x6, 0x7, 0x4, 0x5, 0x401, 0x5f, 0x400, 0x6, 0x401, 0x80, 0x7, 0xfffffff8, 0xf20, 0x9, 0x3, 0x1, 0x142, 0x5, 0x7fff, 0x6, 0x3ff, 0xfffffff9, 0x7, 0x1, 0x80000001, 0x8, 0x3ff, 0x8000, 0x9, 0x9, 0xfffffffb, 0x8, 0x1, 0xf42, 0x22, 0x1, 0x3, 0x7, 0x2, 0x81, 0xc, 0x5, 0xffffffff, 0x2, 0x4, 0x2, 0x90000000, 0x3af3800, 0x2, 0x2, 0xfffffff7, 0x3, 0x7fffffff, 0x6, 0x0, 0x10001, 0xfffff590, 0x3, 0x39, 0x8, 0x7, 0x8, 0x10, 0xa, 0x1ff, 0xca, 0x94, 0x4, 0x9, 0x4, 0x81, 0x39a, 0x7f, 0x1, 0x1, 0x72, 0xffffffff, 0xffffff1a, 0x9a, 0x6295, 0x8c8, 0x6, 0xf9d1, 0xac, 0x6, 0x2, 0x5, 0x1ff, 0x8001, 0x8, 0x10, 0x5, 0x4, 0x4, 0x9d, 0x8, 0x9, 0x9, 0x8, 0x0, 0x688a, 0x3, 0xffffffff, 0x9, 0x0, 0x6, 0x7, 0x2, 0x8, 0x2, 0xffffffff, 0x200, 0xb5, 0x8, 0x42, 0x10001, 0x1, 0x200, 0x4, 0x2, 0xc, 0x8, 0x1, 0x6, 0x1000, 0x10000, 0x8, 0xf5, 0x8, 0x81, 0x1, 0x68, 0x100, 0x4, 0xfffffe00, 0x81, 0x400, 0x7fff, 0x3, 0xe, 0x1, 0x1, 0x7f, 0x0, 0x80000001, 0x6, 0x8000, 0x7ff, 0x0, 0x3, 0x1ff, 0x7fffffff, 0x7f, 0x424, 0x7fff, 0x20000000, 0x9, 0x0, 0x0, 0x9, 0x6, 0x4, 0xffffffff, 0x4b0a4fc, 0x4, 0x3, 0x5, 0x9, 0xffffff80, 0x7, 0x9, 0x7fffffff, 0xffffffff, 0x9, 0x20, 0x8, 0x9, 0x2dd2636e, 0x6, 0x200, 0xd0bc, 0xa2, 0xf]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {}, {0x10, 0x1, 0x0, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4b8}}, 0x20000004) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100076"], 0x1c}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x10000}, 0x20) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xb, 0x8000}, 0x20) getpeername$l2tp6(r5, 0x0, &(0x7f00000001c0)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5.30343368s ago: executing program 7 (id=3319): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x6) r1 = signalfd(r0, &(0x7f0000000080)={[0x6]}, 0x8) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0x7, {0xc, 0x0, 0xfffffff7, 0x10000}, {0x6, 0x401, 0x6, 0x2}, {0x6, 0xffffffff}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r3 = epoll_create(0xfffffff7) r4 = openat$cgroup_ro(r2, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$int_in(r2, 0xab4e9b9f56e07dd8, &(0x7f00000001c0)=0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)={0x3, 0x0, [{0x11101000, 0x2d, &(0x7f0000000280)=""/45}, {0xeeef0000, 0x82, &(0x7f00000002c0)=""/130}, {0x11101006, 0xe8, &(0x7f0000000380)=""/232}]}) syz_clone(0x200400, &(0x7f0000000500)="118f4fe7665bc1b9b09c0dcad791dd7d15a9fff2264132d4", 0x18, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="9596d57ab2fdf643bdec2f3d6331373f5514424c4061a98a1bacf1cadfc2ec69c3f696b0ffabaa0bb4dfc69c5a12f46f042a723e0bbf51f0f85da63d8eb27fc068fa0d164f4c0f0ff50423225658cdcf0018c1f8747d64078036a63d68bd91b4c349ae72b2ad61c797c2ac5f20aab0764cfdd1c2cbca17ed221a68d3e7813811c3958d6dd3afec790851ec50c4736bbe55dc482154b86396989c421498808a307879221701e1dcf65831da") ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000680)=0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000006c0)='syz_tun\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x85}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '{&*\']'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'syz_tun\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x8004) socket$alg(0x26, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000900)={0x10200, 0x0, &(0x7f0000ffb000/0x3000)=nil}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x5065000) eventfd2(0x200, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@getaddr={0x14, 0x16, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$UHID_CREATE2(r4, &(0x7f0000000a40)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x99, 0x9, 0xeb7, 0x6, 0x1, 0x198c, "73c29882408a1912e6f63da706f2f8666ebac54165b236836b7ee2321ba4f76b868c0c61cd6ce6510ca3083a09d4f5a50fdd7e5752871161cc913665b822708b22f34b6a1df881d117f81cf3ef982923a73694a2340ff8748440b8cd2c40d5441511abf47239bb6e359e6a7ec4e3e3d24170e9afe8b092614a0d82e7a93ed3ad5a0500824abdf97e2ad5c8d47dfd4542dafb742d1b3cbb0a97"}}, 0x1b1) epoll_wait(r2, &(0x7f0000000c00)=[{}, {}, {}, {}, {}], 0x5, 0xfc7d) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) openat$cgroup_freezer_state(r2, &(0x7f0000000d40), 0x2, 0x0) 4.847108314s ago: executing program 6 (id=3320): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x18) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='dyn,smackfsroot=m']) 4.022969998s ago: executing program 5 (id=3321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}], 0x1, 0x4) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d40)={0x30, 0x39, 0x800, 0x70bd25, 0x25dfdbfe, "", [@nested={0x8, 0x135, 0x0, 0x1, [@typed={0x4, 0xc2}]}, @typed={0x14, 0xb5, 0x0, 0x0, @str='smackf3tran\b\x00\x00\x00e'}, @nested={0x4, 0x81}]}, 0x30}], 0x1}, 0x4080000) 3.93596594s ago: executing program 1 (id=3322): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0xd0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x110, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0xffffffff, 'dummy0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2, 0x0, 0x4}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x11, ' k'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0xffffffff, 'ip6tnl0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2f, 0x1, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "d5d0", 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0xf60, 0x214, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r2, 0x3, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_sco(0x9, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000001000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000e11794e3c63f74b64542f519983d7c7f435e6a5c70f65807b9ac3b007bbfe7af000d", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000030000000400"/28], 0x50) 3.769976936s ago: executing program 7 (id=3323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d40)={0x2c, 0x39, 0x800, 0x70bd25, 0x25dfdbfe, "", [@typed={0x14, 0xb5, 0x0, 0x0, @str='smackf3tran\b\x00\x00\x00e'}, @typed={0x4, 0x6f, 0x0, 0x0, @binary}, @nested={0x4, 0x81}]}, 0x2c}], 0x1}, 0x4080000) 2.973003946s ago: executing program 6 (id=3324): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x52, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.944380343s ago: executing program 5 (id=3325): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, @void, @value}, 0x94) 2.900207064s ago: executing program 1 (id=3326): socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0xa810, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x3, 0x8}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.711937614s ago: executing program 1 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000001010400008f00000000000a000000"], 0x14}, 0x1, 0xfffff000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo(r1, r1, 0xa, &(0x7f0000000400)={0x2b, 0x8, 0x5}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x3c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x3c}}, 0x48040) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) syz_io_uring_setup(0x4f5a, &(0x7f0000000280)={0x0, 0x57c7, 0x86ce1a54f7c65264, 0x1, 0x28c, 0x0, r9}, &(0x7f0000000300), &(0x7f00000003c0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) accept(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, &(0x7f0000000180)=0x80) 2.705199119s ago: executing program 5 (id=3328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000001010400008f00000000000a00"], 0x14}, 0x1, 0xfffff000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo(r1, r1, 0xa, &(0x7f0000000400)={0x2b, 0x8, 0x5}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48040) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) syz_io_uring_setup(0x4f5a, &(0x7f0000000280)={0x0, 0x57c7, 0x86ce1a54f7c65264, 0x1, 0x28c, 0x0, r9}, 0x0, &(0x7f00000003c0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r11, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, &(0x7f0000000180)=0x80) 1.81554862s ago: executing program 0 (id=3329): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='dyn,smackfsroot=m']) 1.761428822s ago: executing program 5 (id=3330): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="54baed11c86359292f120100005f2ab420720c0d009b27010203010902120001000000000904000000dba29200"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.734609505s ago: executing program 7 (id=3331): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x18, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) r3 = io_uring_setup(0x652, &(0x7f00000000c0)={0x0, 0x0, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xd) 1.660195781s ago: executing program 6 (id=3332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d733459a7a2800018008000100000000001c00038006000300a0aa800006000100000000000800020002000000050002"], 0x64}}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000040) read$msr(r0, &(0x7f0000019680)=""/102363, 0x18fdb) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000200)=0x9) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_STATUS(0x1e, r7, &(0x7f0000000240), 0x5005) r8 = syz_open_procfs(0x0, &(0x7f0000001040)='smaps_rollup\x00') lseek(r8, 0xae7d, 0x0) 1.65952172s ago: executing program 1 (id=3333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x18) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='dyn,smackfsroot=m']) 705.392499ms ago: executing program 0 (id=3335): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x56555958}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) setresuid(0xee00, 0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYRESHEX=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_pgetevents(r4, 0x1, 0x1, &(0x7f00000023c0)=[{}], 0x0, 0x0) r5 = eventfd2(0x2000fff, 0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) 645.308956ms ago: executing program 6 (id=3336): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0xe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) ftruncate(r8, 0x51a9497) sendmmsg(r7, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [0x0, 0x0, 0x0, 0xff000000], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0x4, 0x1, 0x5, 'snmp\x00', 'syz1\x00', {0x3d8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 0s ago: executing program 7 (id=3337): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x11080, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x276) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000280), 0x10120, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRES32=r0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002180), 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0xfffffeffffff7ffe, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae8000000000a01010000000000000000050000000900010073797a3000000000ba000600e9eec003775c64e64f439fc0b5fb34bcd039590bba579a25436e11f718b64e3e01796b9e930a3d8eefa0bccf8429a311f3ce5ec5a0a7bb9e08c60e03cbcdd726725fb9b1bd1000cf2a77ab6ab91f2294632773ea59b8de2361cdd8045c5fdb81611e843cb814e4cfe672542287ebd3b2ed48dca1a08690b05bb9bbbcc05551bd05e4c6e0625fcae04323e0f29dbad3c57456d2ca020462188e1236ebe6da1442c71ab0a8ebfaacef2710111417370a0f8cd19c5f9e1a00000900010073797a300000000014010000030a01030000000000000000050000000900010073797a30000000000800054000000000af000c008451bef8928cf9ec5c3c0fca5cedf6b9ae811484cd4abbaec9eba3118a64f7b105ab0e5c8e377ddaf98490703415da6a50c72a1434c93ef4daa32cd2b643c4ab99e8adc29f67b58cd27b71b30213e6acd60b8fa2190c3fd64f382e41b97f4b12379ce9470cbfdb02cc2a2d8e0e7aec144e2df705b37b99cafc9b141b0f3176897eba9802e14cc423ecff994b4ff320f5786bd4fba343449446d922b94ac3f8621197db4c2dc061e9278f5a000900030073797a32000000000b00070066"], 0x238}}, 0x0) kernel console output (not intermixed with test programs): ll be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.934921][T15931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.948462][T15931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.958420][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.986057][T15931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.032958][T15931] hsr_slave_0: entered promiscuous mode [ 833.039534][T15931] hsr_slave_1: entered promiscuous mode [ 833.045887][T15931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.055523][T15931] Cannot create hsr debugfs directory [ 833.070494][ T977] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 833.188431][T13486] Bluetooth: hci4: command tx timeout [ 833.243878][ T977] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 833.252966][ T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 833.265492][ T977] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 833.274753][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.283016][ T977] usb 8-1: Product: syz [ 833.288002][ T977] usb 8-1: Manufacturer: syz [ 833.292646][ T977] usb 8-1: SerialNumber: syz [ 833.298819][ T977] usb 8-1: config 0 descriptor?? [ 833.370595][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 833.429452][T15931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 833.450276][T15931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 833.460100][T15931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 833.471269][T15931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 833.523613][ T977] mos7840 8-1:0.0: required endpoints missing [ 833.538346][T15931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.540784][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 833.556554][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.561290][T15931] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.568956][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.585714][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 833.600058][ T24] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 833.610056][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.621912][ T24] usb 7-1: config 0 descriptor?? [ 833.628974][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.636145][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.645967][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.653096][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.886753][T15757] usb 2-1: USB disconnect, device number 47 [ 833.913752][T15931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.137525][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2766'. [ 834.611966][T16020] input: syz1 as /devices/virtual/input/input84 [ 835.028147][ T24] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 835.035217][ T24] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 835.077848][ T5903] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 835.101474][ T5903] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 835.111510][ T24] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 835.129289][ T24] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 835.138627][ T24] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 835.156464][ T5903] usb 1-1: USB disconnect, device number 38 [ 835.163643][T16029] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 835.177731][ T5903] f81232 1-1:0.0: device disconnected [ 835.196706][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input85 [ 835.258120][ T24] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 835.270639][ T24] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 835.365077][ T24] usb 7-1: USB disconnect, device number 38 [ 835.369783][ T5905] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 835.369863][ T5905] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 835.369905][ T5905] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 835.369946][ T5905] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 835.421510][T13486] Bluetooth: hci4: command tx timeout [ 835.422008][T16044] ubi: mtd0 is already attached to ubi31 [ 835.435489][T15931] veth0_vlan: entered promiscuous mode [ 835.464361][T16040] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2776'. [ 835.479971][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2776'. [ 835.491840][T16040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2776'. [ 835.653426][T15931] veth1_vlan: entered promiscuous mode [ 835.708869][T15931] veth0_macvtap: entered promiscuous mode [ 835.881788][ T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 836.283682][T15931] veth1_macvtap: entered promiscuous mode [ 836.348885][T15757] usb 8-1: USB disconnect, device number 3 [ 836.465789][T15931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.509301][T15931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.519970][T15931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.530873][T15931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.544948][T15931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.643021][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 836.684580][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 836.749790][ T24] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 836.871481][T15931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.915005][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.002793][ T24] usb 7-1: Product: ࡠ [ 837.016188][T15931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.031148][ T24] usb 7-1: Manufacturer: ࠓ [ 837.035824][ T24] usb 7-1: SerialNumber: Ѱ퇶䐿믤ᾱ䑹讒Ͽ댑᡻窬⯈듔袔녪媳꜎ࡧ睩㢔淮䝬䕣핝鰢䠆郂‚ꬨ谍㌸㡂 [ 837.051285][T15931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.065806][T15931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.085736][T15931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.103240][T15931] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.132221][T15931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.141075][T15931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.155059][T15931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.315243][ T6820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.323147][ T6820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.323622][T14583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.375196][T14583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.629399][T13486] Bluetooth: hci4: command tx timeout [ 837.909984][ T24] usbhid 7-1:1.0: can't add hid device: -71 [ 837.929222][ T24] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 838.702692][ T24] usb 7-1: USB disconnect, device number 39 [ 839.140636][T16084] (syz.7.2784,16084,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 839.169099][ T5136] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 839.214729][T16084] (syz.7.2784,16084,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 839.284270][T16093] FAULT_INJECTION: forcing a failure. [ 839.284270][T16093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.297900][T16095] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2741'. [ 839.297925][T16095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2741'. [ 839.297941][T16095] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2741'. [ 839.338228][T16093] CPU: 0 UID: 0 PID: 16093 Comm: syz.0.2787 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 839.338256][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 839.338267][T16093] Call Trace: [ 839.338275][T16093] [ 839.338283][T16093] dump_stack_lvl+0x241/0x360 [ 839.338310][T16093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.338331][T16093] ? __pfx__printk+0x10/0x10 [ 839.338359][T16093] should_fail_ex+0x424/0x570 [ 839.338384][T16093] _copy_from_user+0x2d/0xb0 [ 839.338405][T16093] __sys_bpf+0x1cb/0x850 [ 839.338427][T16093] ? __pfx___sys_bpf+0x10/0x10 [ 839.338456][T16093] ? ksys_write+0x275/0x2d0 [ 839.338487][T16093] __x64_sys_bpf+0x7c/0x90 [ 839.338505][T16093] do_syscall_64+0xf3/0x230 [ 839.338528][T16093] ? clear_bhb_loop+0x45/0xa0 [ 839.338548][T16093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.338565][T16093] RIP: 0033:0x7f83b658d169 [ 839.338580][T16093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.338600][T16093] RSP: 002b:00007f83b7338038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 839.338619][T16093] RAX: ffffffffffffffda RBX: 00007f83b67a5fa0 RCX: 00007f83b658d169 [ 839.338632][T16093] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 839.338643][T16093] RBP: 00007f83b7338090 R08: 0000000000000000 R09: 0000000000000000 [ 839.338655][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.338665][T16093] R13: 0000000000000001 R14: 00007f83b67a5fa0 R15: 00007ffe7d219668 [ 839.338689][T16093] [ 839.505150][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.282502][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2791'. [ 840.443788][ T5136] block nbd1: Receive control failed (result -32) [ 840.458267][T16098] block nbd1: shutting down sockets [ 840.643717][T16118] FAULT_INJECTION: forcing a failure. [ 840.643717][T16118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.683288][T16118] CPU: 0 UID: 0 PID: 16118 Comm: syz.1.2797 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 840.683316][T16118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 840.683326][T16118] Call Trace: [ 840.683333][T16118] [ 840.683341][T16118] dump_stack_lvl+0x241/0x360 [ 840.683368][T16118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.683388][T16118] ? __pfx__printk+0x10/0x10 [ 840.683415][T16118] should_fail_ex+0x424/0x570 [ 840.683439][T16118] _copy_from_user+0x2d/0xb0 [ 840.683458][T16118] copy_msghdr_from_user+0xb3/0x580 [ 840.683482][T16118] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 840.683500][T16118] ? __fget_files+0x2a/0x420 [ 840.683519][T16118] ? __fget_files+0x2a/0x420 [ 840.683542][T16118] __sys_sendmsg+0x20a/0x360 [ 840.683570][T16118] ? __pfx___sys_sendmsg+0x10/0x10 [ 840.683627][T16118] ? do_syscall_64+0xb6/0x230 [ 840.683652][T16118] do_syscall_64+0xf3/0x230 [ 840.683674][T16118] ? clear_bhb_loop+0x45/0xa0 [ 840.683693][T16118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.683710][T16118] RIP: 0033:0x7f3c68d8d169 [ 840.683725][T16118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.683739][T16118] RSP: 002b:00007f3c69bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.683758][T16118] RAX: ffffffffffffffda RBX: 00007f3c68fa5fa0 RCX: 00007f3c68d8d169 [ 840.683771][T16118] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 840.683783][T16118] RBP: 00007f3c69bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 840.683794][T16118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.683804][T16118] R13: 0000000000000000 R14: 00007f3c68fa5fa0 R15: 00007ffc23c51e08 [ 840.683827][T16118] [ 840.868364][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.086352][T16134] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2799'. [ 841.114771][T16134] input: syz1 as /devices/virtual/input/input86 [ 841.560879][T16139] FAULT_INJECTION: forcing a failure. [ 841.560879][T16139] name failslab, interval 1, probability 0, space 0, times 0 [ 841.753528][T16139] CPU: 0 UID: 0 PID: 16139 Comm: syz.1.2800 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 841.753554][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 841.753561][T16139] Call Trace: [ 841.753566][T16139] [ 841.753571][T16139] dump_stack_lvl+0x241/0x360 [ 841.753590][T16139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.753602][T16139] ? __pfx__printk+0x10/0x10 [ 841.753615][T16139] ? __pfx___might_resched+0x10/0x10 [ 841.753632][T16139] should_fail_ex+0x424/0x570 [ 841.753647][T16139] should_failslab+0xac/0x100 [ 841.753663][T16139] ? __get_vm_area_node+0x132/0x2d0 [ 841.753673][T16139] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 841.753686][T16139] __get_vm_area_node+0x132/0x2d0 [ 841.753698][T16139] __vmalloc_node_range_noprof+0x349/0x1390 [ 841.753709][T16139] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 841.753725][T16139] ? kstrtoull+0x1d3/0x2f0 [ 841.753739][T16139] ? __pfx_kstrtoull+0x10/0x10 [ 841.753757][T16139] ? kstrtouint+0xfc/0x190 [ 841.753770][T16139] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 841.753784][T16139] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 841.753796][T16139] __vmalloc_noprof+0x79/0x90 [ 841.753807][T16139] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 841.753819][T16139] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 841.753831][T16139] ? bpf_prog_alloc+0x28/0x1b0 [ 841.753844][T16139] bpf_prog_alloc+0x3a/0x1b0 [ 841.753857][T16139] bpf_prog_load+0x8ac/0x2320 [ 841.753873][T16139] ? __lock_acquire+0xad5/0xd80 [ 841.753886][T16139] ? __pfx_bpf_prog_load+0x10/0x10 [ 841.753907][T16139] __sys_bpf+0x58c/0x850 [ 841.753920][T16139] ? __pfx___sys_bpf+0x10/0x10 [ 841.753935][T16139] ? ksys_write+0x275/0x2d0 [ 841.753952][T16139] __x64_sys_bpf+0x7c/0x90 [ 841.753963][T16139] do_syscall_64+0xf3/0x230 [ 841.753977][T16139] ? clear_bhb_loop+0x45/0xa0 [ 841.753988][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.753998][T16139] RIP: 0033:0x7f3c68d8d169 [ 841.754008][T16139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.754017][T16139] RSP: 002b:00007f3c69bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 841.754029][T16139] RAX: ffffffffffffffda RBX: 00007f3c68fa5fa0 RCX: 00007f3c68d8d169 [ 841.754036][T16139] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 841.754043][T16139] RBP: 00007f3c69bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 841.754050][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.754056][T16139] R13: 0000000000000001 R14: 00007f3c68fa5fa0 R15: 00007ffc23c51e08 [ 841.754068][T16139] [ 841.754077][T16139] syz.1.2800: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 842.046994][T16139] CPU: 0 UID: 0 PID: 16139 Comm: syz.1.2800 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 842.047021][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 842.047033][T16139] Call Trace: [ 842.047045][T16139] [ 842.047050][T16139] dump_stack_lvl+0x241/0x360 [ 842.047068][T16139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.047080][T16139] ? __pfx__printk+0x10/0x10 [ 842.047092][T16139] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 842.047104][T16139] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 842.047115][T16139] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 842.047127][T16139] warn_alloc+0x27c/0x410 [ 842.047141][T16139] ? __pfx_warn_alloc+0x10/0x10 [ 842.047155][T16139] ? __get_vm_area_node+0x280/0x2d0 [ 842.047168][T16139] __vmalloc_node_range_noprof+0x36e/0x1390 [ 842.047181][T16139] ? kstrtoull+0x1d3/0x2f0 [ 842.047196][T16139] ? __pfx_kstrtoull+0x10/0x10 [ 842.047214][T16139] ? kstrtouint+0xfc/0x190 [ 842.047226][T16139] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 842.047241][T16139] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 842.047253][T16139] __vmalloc_noprof+0x79/0x90 [ 842.047264][T16139] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 842.047276][T16139] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 842.047289][T16139] ? bpf_prog_alloc+0x28/0x1b0 [ 842.047303][T16139] bpf_prog_alloc+0x3a/0x1b0 [ 842.047316][T16139] bpf_prog_load+0x8ac/0x2320 [ 842.047332][T16139] ? __lock_acquire+0xad5/0xd80 [ 842.047346][T16139] ? __pfx_bpf_prog_load+0x10/0x10 [ 842.047367][T16139] __sys_bpf+0x58c/0x850 [ 842.047380][T16139] ? __pfx___sys_bpf+0x10/0x10 [ 842.047395][T16139] ? ksys_write+0x275/0x2d0 [ 842.047412][T16139] __x64_sys_bpf+0x7c/0x90 [ 842.047423][T16139] do_syscall_64+0xf3/0x230 [ 842.047437][T16139] ? clear_bhb_loop+0x45/0xa0 [ 842.047448][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.047458][T16139] RIP: 0033:0x7f3c68d8d169 [ 842.047468][T16139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.047477][T16139] RSP: 002b:00007f3c69bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 842.047489][T16139] RAX: ffffffffffffffda RBX: 00007f3c68fa5fa0 RCX: 00007f3c68d8d169 [ 842.047496][T16139] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 842.047503][T16139] RBP: 00007f3c69bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 842.047510][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.047516][T16139] R13: 0000000000000001 R14: 00007f3c68fa5fa0 R15: 00007ffc23c51e08 [ 842.047528][T16139] [ 842.048105][T16139] Mem-Info: [ 842.338498][T16139] active_anon:355 inactive_anon:7342 isolated_anon:0 [ 842.338498][T16139] active_file:18027 inactive_file:37649 isolated_file:0 [ 842.338498][T16139] unevictable:768 dirty:285 writeback:0 [ 842.338498][T16139] slab_reclaimable:11362 slab_unreclaimable:104874 [ 842.338498][T16139] mapped:30269 shmem:1446 pagetables:926 [ 842.338498][T16139] sec_pagetables:0 bounce:0 [ 842.338498][T16139] kernel_misc_reclaimable:0 [ 842.338498][T16139] free:1303070 free_pcp:436 free_cma:0 [ 842.533838][T16139] Node 0 active_anon:1420kB inactive_anon:29268kB active_file:72032kB inactive_file:150596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121076kB dirty:1140kB writeback:0kB shmem:4248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11392kB pagetables:3704kB sec_pagetables:0kB all_unreclaimable? no [ 842.585933][T16139] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 842.627203][T16139] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.679788][T16144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.700888][T16144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.718403][T16139] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 842.746347][T16139] Node 0 DMA32 free:1286452kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:1416kB inactive_anon:29236kB active_file:71504kB inactive_file:150544kB unevictable:1536kB writepending:1140kB present:3129332kB managed:2551256kB mlocked:0kB bounce:0kB free_pcp:1812kB local_pcp:836kB free_cma:0kB [ 842.784246][T16139] lowmem_reserve[]: 0 0 0 0 0 [ 842.790193][T16139] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:528kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 842.827193][T16139] lowmem_reserve[]: 0 0 0 0 0 [ 842.833593][T16139] Node 1 Normal free:3910724kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.875965][T16149] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 842.886726][T16139] lowmem_reserve[]: 0 0 0 0 0 [ 842.904314][T16139] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 842.922286][T16139] Node 0 DMA32: 621*4kB (UME) 964*8kB (UME) 888*16kB (UME) 457*32kB (UME) 273*64kB (UME) 82*128kB (UME) 57*256kB (UM) 41*512kB (UM) 28*1024kB (UM) 12*2048kB (UME) 276*4096kB (UM) = 1286324kB [ 842.946292][T16139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 842.961778][T16139] Node 1 Normal: 239*4kB (UME) 59*8kB (UME) 43*16kB (UME) 190*32kB (UME) 103*64kB (UME) 37*128kB (UME) 14*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 5*2048kB (UME) 944*4096kB (M) = 3910724kB [ 842.980860][ T5827] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 842.989805][T16139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.001100][T16139] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 843.013043][T16139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.030476][T16139] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 843.046453][T16139] 57122 total pagecache pages [ 843.055723][T16139] 0 pages in swap cache [ 843.064695][T16139] Free swap = 124748kB [ 843.068945][T16139] Total swap = 124996kB [ 843.073612][T16139] 2097051 pages RAM [ 843.081937][T16139] 0 pages HighMem/MovableOnly [ 843.088377][T16139] 427449 pages reserved [ 843.092669][T16139] 0 pages cma reserved [ 843.150784][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 843.194124][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 843.345700][T16165] input: syz1 as /devices/virtual/input/input87 [ 843.555424][ T5827] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 843.564880][ T5827] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 843.574023][ T5827] usb 1-1: Product: syz [ 843.589072][ T5827] usb 1-1: Manufacturer: syz [ 843.593959][ T5827] usb 1-1: SerialNumber: syz [ 843.837850][T16144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.857065][T16172] FAULT_INJECTION: forcing a failure. [ 843.857065][T16172] name failslab, interval 1, probability 0, space 0, times 0 [ 843.882473][T16144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.892776][T16172] CPU: 1 UID: 0 PID: 16172 Comm: syz.1.2810 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 843.892802][T16172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 843.892813][T16172] Call Trace: [ 843.892821][T16172] [ 843.892830][T16172] dump_stack_lvl+0x241/0x360 [ 843.892868][T16172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.892888][T16172] ? __pfx__printk+0x10/0x10 [ 843.892910][T16172] ? __pfx___might_resched+0x10/0x10 [ 843.892938][T16172] should_fail_ex+0x424/0x570 [ 843.892963][T16172] should_failslab+0xac/0x100 [ 843.892990][T16172] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 843.893017][T16172] ? __alloc_skb+0x1c2/0x480 [ 843.893043][T16172] __alloc_skb+0x1c2/0x480 [ 843.893069][T16172] ? __pfx___alloc_skb+0x10/0x10 [ 843.893092][T16172] ? netlink_autobind+0xd6/0x2f0 [ 843.893110][T16172] ? netlink_autobind+0x2b0/0x2f0 [ 843.893130][T16172] netlink_sendmsg+0x65c/0xce0 [ 843.893156][T16172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.893182][T16172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.893198][T16172] __sock_sendmsg+0x221/0x270 [ 843.893219][T16172] ____sys_sendmsg+0x53c/0x870 [ 843.893250][T16172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.893272][T16172] ? __fget_files+0x2a/0x420 [ 843.893292][T16172] ? __fget_files+0x2a/0x420 [ 843.893315][T16172] __sys_sendmsg+0x271/0x360 [ 843.893343][T16172] ? __pfx___sys_sendmsg+0x10/0x10 [ 843.893402][T16172] ? do_syscall_64+0xb6/0x230 [ 843.893426][T16172] do_syscall_64+0xf3/0x230 [ 843.893448][T16172] ? clear_bhb_loop+0x45/0xa0 [ 843.893468][T16172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.893490][T16172] RIP: 0033:0x7f3c68d8d169 [ 843.893506][T16172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.893520][T16172] RSP: 002b:00007f3c69bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.893541][T16172] RAX: ffffffffffffffda RBX: 00007f3c68fa5fa0 RCX: 00007f3c68d8d169 [ 843.893554][T16172] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 843.893565][T16172] RBP: 00007f3c69bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 843.893576][T16172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.893587][T16172] R13: 0000000000000000 R14: 00007f3c68fa5fa0 R15: 00007ffc23c51e08 [ 843.893609][T16172] [ 844.133567][ T5827] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 844.143129][ T5827] visor 1-1:1.0: probe with driver visor failed with error -110 [ 845.636137][ T5827] usb 1-1: USB disconnect, device number 39 [ 845.856168][T16204] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2820'. [ 846.775015][T15757] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 847.268060][T16224] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 847.405485][T15757] usb 1-1: Using ep0 maxpacket: 32 [ 847.438388][T15757] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 847.452084][T15757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.461844][T15757] usb 1-1: config 0 descriptor?? [ 847.470967][T15757] gspca_main: sq930x-2.14.0 probing 041e:403c [ 847.812158][ T977] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 847.996247][ T977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.223466][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 848.269194][T15757] gspca_sq930x: ucbus_write failed -110 [ 848.311938][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 848.314781][T15757] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 848.344588][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 848.381782][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 848.418069][ T977] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 848.432235][T16243] input: syz1 as /devices/virtual/input/input88 [ 848.464628][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.495990][ T977] usb 7-1: config 0 descriptor?? [ 848.521184][ T977] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.549227][ T977] usb 7-1: MIDIStreaming interface descriptor not found [ 848.736567][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'. [ 848.754258][ T977] usb 7-1: USB disconnect, device number 40 [ 848.861771][ T5905] usb 1-1: USB disconnect, device number 40 [ 849.484006][T16284] unknown channel width for channel at 909000KHz? [ 849.803387][T16289] netlink: 'syz.6.2843': attribute type 1 has an invalid length. [ 849.815664][T16289] ubi: mtd0 is already attached to ubi31 [ 850.456507][T16294] xt_CONNSECMARK: invalid mode: 0 [ 850.509323][T16294] input: syz1 as /devices/virtual/input/input89 [ 850.715917][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 850.715947][ T30] audit: type=1326 audit(1743033723.813:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16300 comm="syz.1.2850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x40000000 [ 852.543417][ T5827] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 852.718219][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 852.725921][ T5827] usb 6-1: no configurations [ 852.730814][ T5827] usb 6-1: can't read configurations, error -22 [ 852.900059][ T5827] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 853.151278][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 853.167142][ T5827] usb 6-1: no configurations [ 853.197832][ T5827] usb 6-1: can't read configurations, error -22 [ 853.371671][ T5827] usb usb6-port1: attempt power cycle [ 853.820237][ T5827] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 854.229281][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 854.235375][ T5827] usb 6-1: no configurations [ 854.253915][ T5827] usb 6-1: can't read configurations, error -22 [ 854.407136][ T5827] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 854.449884][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 854.456606][ T5827] usb 6-1: no configurations [ 854.473142][ T5827] usb 6-1: can't read configurations, error -22 [ 854.495130][ T5827] usb usb6-port1: unable to enumerate USB device [ 854.770130][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 855.177961][ T30] audit: type=1326 audit(1743033727.994:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.232340][ T30] audit: type=1326 audit(1743033727.994:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.254102][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.556259][ T30] audit: type=1326 audit(1743033727.994:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.578279][ T30] audit: type=1326 audit(1743033727.994:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.637372][ T30] audit: type=1326 audit(1743033727.994:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.637640][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'. [ 855.659288][ T30] audit: type=1326 audit(1743033727.994:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.764720][T15757] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 855.772468][ T30] audit: type=1326 audit(1743033727.994:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.835747][ T30] audit: type=1326 audit(1743033727.994:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.870901][ T30] audit: type=1326 audit(1743033727.994:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16364 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 855.978526][T15757] usb 8-1: Using ep0 maxpacket: 16 [ 855.985409][T15757] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.028520][T15757] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 856.477277][T15757] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 856.528048][T15757] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58243, setting to 1024 [ 856.540313][T15757] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.562758][T15757] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 856.572791][T15757] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 856.596937][T15757] usb 8-1: Manufacturer: syz [ 856.605626][T15757] usb 8-1: config 0 descriptor?? [ 856.887811][T15757] rc_core: IR keymap rc-hauppauge not found [ 856.905121][T15757] Registered IR keymap rc-empty [ 856.918246][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 856.996716][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.032661][T15757] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 857.071690][T15757] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input90 [ 857.093452][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.115488][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.157910][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.211880][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.240246][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.272795][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.289593][ T5136] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 857.297881][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.326513][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.380986][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.418673][T15757] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 857.510451][ T5903] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 857.540979][T15757] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 857.550338][T15757] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 857.576212][T15757] usb 8-1: USB disconnect, device number 4 [ 858.200369][T16398] program syz.7.2882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.308884][T10651] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 858.359166][T16408] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2883'. [ 858.387680][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 858.400557][ T5903] usb 2-1: can't read configurations, error -61 [ 858.480159][T10651] usb 7-1: Using ep0 maxpacket: 16 [ 858.506587][T10651] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.742989][ T5903] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 858.911970][T10651] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 858.933985][T10651] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 858.947761][T10651] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 858.958551][T10651] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.980468][T10651] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 858.990639][T10651] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 859.003966][T10651] usb 7-1: Manufacturer: syz [ 859.011008][T10651] usb 7-1: config 0 descriptor?? [ 859.082644][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 859.100687][ T5903] usb 2-1: can't read configurations, error -61 [ 859.111375][ T5903] usb usb2-port1: attempt power cycle [ 859.303237][T10651] rc_core: IR keymap rc-hauppauge not found [ 859.312423][T10651] Registered IR keymap rc-empty [ 859.318736][ T5136] block nbd7: Receive control failed (result -32) [ 859.330433][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.350570][T16425] block nbd7: shutting down sockets [ 859.357416][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.381125][T10651] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 859.394801][T10651] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input91 [ 859.418599][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.453424][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.474808][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.486761][ T5903] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 859.506363][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.522827][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 859.530937][ T5903] usb 2-1: can't read configurations, error -61 [ 859.541749][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.571316][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.591784][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.613703][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.623906][ T977] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 859.634488][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.655862][T10651] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 859.680125][ T5903] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 859.681930][T10651] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 859.696027][T10651] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 859.734978][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 859.760522][ T5903] usb 2-1: can't read configurations, error -61 [ 859.779076][ T5903] usb usb2-port1: unable to enumerate USB device [ 859.800120][ T977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.810772][ T977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 859.822459][ T977] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 859.833432][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 859.849053][ T977] usb 1-1: SerialNumber: syz [ 860.079157][T16429] delete_channel: no stack [ 860.088748][ T977] usb 1-1: 0:2 : does not exist [ 860.103362][ T977] usb 1-1: USB disconnect, device number 41 [ 860.593995][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 860.629586][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 861.278914][T16461] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 861.371716][T10651] usb 7-1: USB disconnect, device number 41 [ 862.777728][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 863.236925][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.246137][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.255250][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.264459][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.273683][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.275120][ T977] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 863.282828][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.282869][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.282892][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.282913][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.282936][T16484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 863.356306][ T24] usb 7-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 863.373489][ T24] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 863.391310][ T24] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 863.421226][ T24] usb 7-1: Manufacturer: syz [ 863.431142][ T24] usb 7-1: SerialNumber: syz [ 863.525716][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 863.542033][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 863.548947][ T977] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 863.565377][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.581301][ T977] usb 2-1: config 0 descriptor?? [ 863.599397][ T977] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 863.610864][ T977] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 863.627676][ T977] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 863.635641][ T977] usb 2-1: media controller created [ 863.952345][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 863.968249][ T977] set interface failed [ 863.968757][ T977] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 863.988062][ T977] error writing reg: 0xff, val: 0x00 [ 864.370644][ T977] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 864.471479][ T977] usb 2-1: USB disconnect, device number 52 [ 865.270218][ T24] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 865.317910][ T24] usb 7-1: USB disconnect, device number 42 [ 866.262410][T16517] ucma_write: process 1357 (syz.6.2917) changed security contexts after opening file descriptor, this is not allowed. [ 866.611504][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 867.464490][T16540] input: syz1 as /devices/virtual/input/input93 [ 868.907598][T16560] FAULT_INJECTION: forcing a failure. [ 868.907598][T16560] name failslab, interval 1, probability 0, space 0, times 0 [ 869.002997][T16560] CPU: 1 UID: 0 PID: 16560 Comm: syz.7.2927 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 869.003026][T16560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 869.003037][T16560] Call Trace: [ 869.003044][T16560] [ 869.003053][T16560] dump_stack_lvl+0x241/0x360 [ 869.003083][T16560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.003103][T16560] ? __pfx__printk+0x10/0x10 [ 869.003122][T16560] ? __mutex_trylock_common+0x184/0x2e0 [ 869.003146][T16560] should_fail_ex+0x424/0x570 [ 869.003173][T16560] should_failslab+0xac/0x100 [ 869.003200][T16560] __kmalloc_cache_noprof+0x73/0x370 [ 869.003216][T16560] ? __hw_addr_add_ex+0x1fb/0x760 [ 869.003243][T16560] __hw_addr_add_ex+0x1fb/0x760 [ 869.003269][T16560] dev_addr_init+0x159/0x240 [ 869.003294][T16560] ? __pfx_dev_addr_init+0x10/0x10 [ 869.003325][T16560] alloc_netdev_mqs+0x307/0x1210 [ 869.003341][T16560] ? __pfx_vlan_setup+0x10/0x10 [ 869.003365][T16560] ? rcu_is_watching+0x15/0xb0 [ 869.003384][T16560] rtnl_create_link+0x2f9/0xc90 [ 869.003414][T16560] rtnl_newlink_create+0x212/0xa50 [ 869.003440][T16560] ? __pfx___mutex_lock+0x10/0x10 [ 869.003463][T16560] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 869.003489][T16560] ? ns_capable+0x8a/0xf0 [ 869.003515][T16560] rtnl_newlink+0x1a0a/0x1f60 [ 869.003542][T16560] ? kasan_save_free_info+0x40/0x50 [ 869.003561][T16560] ? __pfx_rtnl_newlink+0x10/0x10 [ 869.003582][T16560] ? __netlink_deliver_tap+0x561/0x7f0 [ 869.003599][T16560] ? netlink_deliver_tap+0x19d/0x1b0 [ 869.003614][T16560] ? netlink_unicast+0x7c6/0x9a0 [ 869.003637][T16560] ? netlink_sendmsg+0x8e8/0xce0 [ 869.003652][T16560] ? __sock_sendmsg+0x221/0x270 [ 869.003670][T16560] ? ____sys_sendmsg+0x53c/0x870 [ 869.003692][T16560] ? __sys_sendmsg+0x271/0x360 [ 869.003714][T16560] ? do_syscall_64+0xf3/0x230 [ 869.003735][T16560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.003777][T16560] ? kasan_quarantine_put+0xdc/0x230 [ 869.003797][T16560] ? lockdep_hardirqs_on+0x9d/0x150 [ 869.003820][T16560] ? nlmon_xmit+0xaf/0x100 [ 869.003851][T16560] ? __local_bh_enable_ip+0x168/0x200 [ 869.003871][T16560] ? lockdep_hardirqs_on+0x9d/0x150 [ 869.003894][T16560] ? __local_bh_enable_ip+0x168/0x200 [ 869.003916][T16560] ? __dev_queue_xmit+0x2f9/0x3f60 [ 869.003933][T16560] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 869.003961][T16560] ? __lock_acquire+0xad5/0xd80 [ 869.003997][T16560] ? __pfx_rtnl_newlink+0x10/0x10 [ 869.004017][T16560] rtnetlink_rcv_msg+0x80f/0xd70 [ 869.004035][T16560] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 869.004057][T16560] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 869.004081][T16560] ? ref_tracker_free+0x63e/0x7e0 [ 869.004107][T16560] netlink_rcv_skb+0x208/0x480 [ 869.004126][T16560] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 869.004146][T16560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 869.004176][T16560] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.004195][T16560] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.004214][T16560] netlink_unicast+0x7f8/0x9a0 [ 869.004245][T16560] ? __pfx_netlink_unicast+0x10/0x10 [ 869.004267][T16560] ? __virt_addr_valid+0x45f/0x530 [ 869.004287][T16560] ? __phys_addr_symbol+0x2f/0x70 [ 869.004305][T16560] ? __check_object_size+0x478/0x720 [ 869.004335][T16560] netlink_sendmsg+0x8e8/0xce0 [ 869.004367][T16560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.004394][T16560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.004410][T16560] __sock_sendmsg+0x221/0x270 [ 869.004433][T16560] ____sys_sendmsg+0x53c/0x870 [ 869.004464][T16560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.004486][T16560] ? __fget_files+0x2a/0x420 [ 869.004507][T16560] ? __fget_files+0x2a/0x420 [ 869.004531][T16560] __sys_sendmsg+0x271/0x360 [ 869.004560][T16560] ? __pfx___sys_sendmsg+0x10/0x10 [ 869.004622][T16560] ? do_syscall_64+0xb6/0x230 [ 869.004646][T16560] do_syscall_64+0xf3/0x230 [ 869.004669][T16560] ? clear_bhb_loop+0x45/0xa0 [ 869.004688][T16560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.004705][T16560] RIP: 0033:0x7f3b9398d169 [ 869.004721][T16560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.004736][T16560] RSP: 002b:00007f3b9477e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.004756][T16560] RAX: ffffffffffffffda RBX: 00007f3b93ba5fa0 RCX: 00007f3b9398d169 [ 869.004769][T16560] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 869.004780][T16560] RBP: 00007f3b9477e090 R08: 0000000000000000 R09: 0000000000000000 [ 869.004792][T16560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.004803][T16560] R13: 0000000000000000 R14: 00007f3b93ba5fa0 R15: 00007ffc1fa72508 [ 869.004827][T16560] [ 869.670790][T16566] input: syz1 as /devices/virtual/input/input94 [ 869.942338][T16565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.534536][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2931'. [ 872.119580][T16587] input: syz1 as /devices/virtual/input/input95 [ 872.784476][T15757] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 873.009491][T16603] input: syz1 as /devices/virtual/input/input96 [ 873.160021][T15757] usb 8-1: Using ep0 maxpacket: 32 [ 873.171872][T15757] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 873.201980][T15757] usb 8-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=7b.12 [ 873.214525][T15757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.223131][T15757] usb 8-1: Product: syz [ 873.227397][T15757] usb 8-1: Manufacturer: syz [ 873.235587][T15757] usb 8-1: SerialNumber: syz [ 873.331473][T15757] hdpvr 8-1:2.0: Could not find bulk-in endpoint [ 873.340694][T15757] hdpvr 8-1:2.0: probe with driver hdpvr failed with error -12 [ 873.746848][T16611] net_ratelimit: 3319 callbacks suppressed [ 873.746863][T16611] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 873.979824][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.220987][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.265069][ T5905] usb 8-1: USB disconnect, device number 5 [ 874.549274][T16618] input: syz1 as /devices/virtual/input/input97 [ 877.095085][T16652] input: syz1 as /devices/virtual/input/input98 [ 877.774291][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 877.774309][ T30] audit: type=1326 audit(1743033749.126:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16635 comm="syz.7.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9398d169 code=0x7fc00000 [ 878.652286][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2957'. [ 878.707696][ T30] audit: type=1326 audit(1743033750.006:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16670 comm="syz.5.2957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89a2f8d169 code=0x0 [ 878.887179][ T977] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 879.054571][T10651] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 879.089317][T16684] virt_wifi0 speed is unknown, defaulting to 1000 [ 879.095951][ T977] usb 7-1: Using ep0 maxpacket: 16 [ 879.103088][ T977] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.125834][ T977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.147239][ T977] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 879.162271][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.173853][ T977] usb 7-1: Product: syz [ 879.178293][ T977] usb 7-1: Manufacturer: syz [ 879.182978][ T977] usb 7-1: SerialNumber: syz [ 879.223531][T10651] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 879.235115][T10651] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.245234][T10651] usb 8-1: Product: syz [ 879.249729][T10651] usb 8-1: Manufacturer: syz [ 879.257494][T10651] usb 8-1: SerialNumber: syz [ 879.267257][T10651] usb 8-1: config 0 descriptor?? [ 879.447643][ T977] usb 7-1: 0:2 : does not exist [ 879.468253][ T977] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 879.512985][ T977] usb 7-1: USB disconnect, device number 43 [ 879.715145][T10651] airspy 8-1:0.0: Board ID: 00 [ 879.740005][T10651] airspy 8-1:0.0: Firmware version: [ 881.237531][T10651] airspy 8-1:0.0: usb_control_msg() failed -71 request 10 [ 881.247348][T10651] airspy 8-1:0.0: Registered as swradio24 [ 881.253175][T10651] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 881.264836][T10651] usb 8-1: USB disconnect, device number 6 [ 881.585100][T16730] netlink: 'syz.0.2973': attribute type 9 has an invalid length. [ 881.615801][T15757] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 881.788746][T15757] usb 6-1: Using ep0 maxpacket: 32 [ 881.860459][T15757] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 881.882088][T15757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.526322][T15757] usb 6-1: Product: syz [ 882.530551][T15757] usb 6-1: Manufacturer: syz [ 882.549992][T15757] usb 6-1: SerialNumber: syz [ 882.557319][T15757] usb 6-1: config 0 descriptor?? [ 882.658802][T13486] Bluetooth: hci5: sending frame failed (-49) [ 882.667142][ T5136] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 882.696323][ T30] audit: type=1326 audit(1743033753.729:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16744 comm="syz.0.2976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83b658d169 code=0x0 [ 883.293755][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2970'. [ 883.302856][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2970'. [ 883.312331][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2970'. [ 883.360283][T16750] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2977'. [ 883.370116][T16750] unsupported nlmsg_type 40 [ 884.526688][T13486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 884.550757][T13486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 884.567344][T13486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 884.584517][T13486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 884.604687][T13486] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 884.617568][T13486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 885.100973][T15757] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 885.109585][T15757] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 885.317213][T16770] virt_wifi0 speed is unknown, defaulting to 1000 [ 886.211877][T15757] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 886.420871][T15757] usb 6-1: USB disconnect, device number 18 [ 886.463308][T16770] chnl_net:caif_netlink_parms(): no params data found [ 886.829767][ T5827] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 886.968493][ T5136] Bluetooth: hci1: command tx timeout [ 887.021916][T15757] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 887.046832][ T5827] usb 7-1: config 0 has an invalid interface number: 175 but max is 0 [ 887.061920][ T5827] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.073937][ T5827] usb 7-1: config 0 has no interface number 0 [ 887.096227][ T5827] usb 7-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 887.114609][ T5827] usb 7-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 887.115723][T16770] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.143722][ T5827] usb 7-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 887.155022][T16770] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.165778][ T5827] usb 7-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 887.171675][T16770] bridge_slave_0: entered allmulticast mode [ 887.202166][T15757] usb 8-1: Using ep0 maxpacket: 16 [ 887.202207][T16770] bridge_slave_0: entered promiscuous mode [ 887.210413][T15757] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 887.228202][T16770] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.230854][T15757] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 887.248466][T16770] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.258717][ T5827] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 887.272008][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.282226][ T5827] usb 7-1: Product: syz [ 887.285535][T16770] bridge_slave_1: entered allmulticast mode [ 887.286404][ T5827] usb 7-1: Manufacturer: syz [ 887.302026][T15757] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 887.309425][T16770] bridge_slave_1: entered promiscuous mode [ 887.317709][ T5827] usb 7-1: SerialNumber: syz [ 887.323216][T15757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.331506][T15757] usb 8-1: Product: syz [ 887.340847][ T5827] usb 7-1: config 0 descriptor?? [ 887.349784][T15757] usb 8-1: Manufacturer: syz [ 887.356656][ T5827] symbolserial 7-1:0.175: symbol converter detected [ 887.373634][T15757] usb 8-1: SerialNumber: syz [ 887.379282][ T5827] usb 7-1: symbol converter now attached to ttyUSB0 [ 887.411655][T16770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.412718][T15757] usb 8-1: config 0 descriptor?? [ 887.430363][T16770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.437112][T15757] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 887.454063][T15757] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 887.488943][T16770] team0: Port device team_slave_0 added [ 887.517062][T16770] team0: Port device team_slave_1 added [ 887.589450][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.601787][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.611109][ T5827] usb 7-1: USB disconnect, device number 44 [ 887.611292][T16770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.629881][ T5827] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 887.648526][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.649475][ T5827] symbolserial 7-1:0.175: device disconnected [ 887.674602][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.696708][T16770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.766616][T16770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.790039][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.817475][ C1] vkms_vblank_simulate: vblank timer overrun [ 888.117335][T15757] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 888.125254][T15757] em28xx 8-1:0.0: Config register raw data: 0x2b [ 888.132556][T15757] em28xx 8-1:0.0: I2S Audio (1 sample rate(s)) [ 888.308268][T16770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.313469][T15757] em28xx 8-1:0.0: No AC97 audio processor [ 888.336506][T16818] xt_CONNSECMARK: invalid mode: 0 [ 888.416280][T16818] input: syz1 as /devices/virtual/input/input99 [ 888.755791][T16770] hsr_slave_0: entered promiscuous mode [ 888.769931][T16770] hsr_slave_1: entered promiscuous mode [ 888.864477][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2994'. [ 888.884559][T16770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.892235][T16770] Cannot create hsr debugfs directory [ 889.218533][ T5136] Bluetooth: hci1: command tx timeout [ 889.563039][T16828] Smack: duplicate mount options [ 889.691266][T16770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.723448][T16770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.823641][T16832] netlink: 800 bytes leftover after parsing attributes in process `syz.6.2999'. [ 889.832801][T16832] netlink: 1301 bytes leftover after parsing attributes in process `syz.6.2999'. [ 889.899335][T15757] usb 8-1: USB disconnect, device number 7 [ 889.963465][T16770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.974726][T16770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.108778][T16770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.185544][T16770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.445092][T16844] input: syz1 as /devices/virtual/input/input100 [ 890.461096][T15757] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 890.728315][T15757] usb 8-1: Using ep0 maxpacket: 32 [ 890.766790][T16847] xt_CONNSECMARK: invalid mode: 0 [ 890.818643][T16770] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.820593][T16847] input: syz1 as /devices/virtual/input/input101 [ 890.878304][T16770] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.891125][T15757] usb 8-1: config 0 has an invalid interface number: 136 but max is 0 [ 890.899705][T15757] usb 8-1: config 0 has no interface number 0 [ 890.906154][T15757] usb 8-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 891.064369][T15757] usb 8-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 891.221259][T15757] usb 8-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 891.259280][T15757] usb 8-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 891.302449][T15757] usb 8-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 891.319954][T15757] usb 8-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 891.335427][T15757] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.355891][T16770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 891.364140][T15757] usb 8-1: config 0 descriptor?? [ 891.381596][T16770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 891.406239][T16770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 891.407726][T15757] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 891.427267][ T5136] Bluetooth: hci1: command tx timeout [ 891.448396][T16770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 891.559102][T16854] Smack: duplicate mount options [ 891.578596][T16770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.639984][ T24] usb 8-1: USB disconnect, device number 8 [ 891.643246][T16770] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.670362][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.677839][ T6513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.719716][ T6513] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.727191][ T6513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.227450][T16770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 892.711009][ T5928] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 892.911818][T16770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.926264][ T5928] usb 8-1: Using ep0 maxpacket: 32 [ 892.953766][ T5928] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 892.965567][ T5928] usb 8-1: config 0 has no interface number 0 [ 892.979057][ T5928] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 893.023079][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.038617][ T5928] usb 8-1: Product: syz [ 893.045333][ T5928] usb 8-1: Manufacturer: syz [ 893.050400][ T5928] usb 8-1: SerialNumber: syz [ 893.073106][ T5928] usb 8-1: config 0 descriptor?? [ 893.081168][ T5928] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 893.090673][ T5928] usb 8-1: selecting invalid altsetting 1 [ 893.096654][ T5928] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 893.112479][ T5928] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 893.133125][T16770] veth0_vlan: entered promiscuous mode [ 893.145671][ T5928] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 893.166733][T16770] veth1_vlan: entered promiscuous mode [ 893.176321][ T5928] usb 8-1: media controller created [ 893.227437][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 893.327499][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3013'. [ 893.414269][T16770] veth0_macvtap: entered promiscuous mode [ 893.450470][T16770] veth1_macvtap: entered promiscuous mode [ 893.475135][T16770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.494201][T16770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.505160][T16770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.516383][T16770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.639443][ T5136] Bluetooth: hci1: command tx timeout [ 893.702589][ T5928] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 893.724342][T16770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.734934][T16770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.751065][ T5928] usb 8-1: USB disconnect, device number 9 [ 893.760865][T16770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.777827][T16770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.789149][T16770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.799380][T16770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.811610][T16770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.822480][T16770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.880642][T16770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.905013][T16770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.932178][T16770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.943488][T16770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.953107][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 893.965750][T16770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.975505][T16770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.119925][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 894.135048][ T24] usb 2-1: config 5 has an invalid interface number: 39 but max is 2 [ 894.146881][ T24] usb 2-1: config 5 has an invalid interface number: 155 but max is 2 [ 894.216599][ T24] usb 2-1: config 5 has an invalid interface number: 61 but max is 2 [ 894.261287][ T24] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 894.272134][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.281264][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.301309][ T24] usb 2-1: config 5 has an invalid interface number: 250 but max is 2 [ 894.326540][ T24] usb 2-1: config 5 has an invalid interface number: 6 but max is 2 [ 894.343980][ T24] usb 2-1: config 5 has 5 interfaces, different from the descriptor's value: 3 [ 894.351785][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.354717][ T24] usb 2-1: config 5 has no interface number 0 [ 894.368366][ T24] usb 2-1: config 5 has no interface number 1 [ 894.374718][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.457308][ T24] usb 2-1: config 5 has no interface number 2 [ 894.462963][T16895] Smack: duplicate mount options [ 894.476824][ T24] usb 2-1: config 5 has no interface number 3 [ 894.489980][ T24] usb 2-1: config 5 has no interface number 4 [ 894.496822][ T24] usb 2-1: config 5 interface 39 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 894.508785][ T24] usb 2-1: config 5 interface 39 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 894.519638][ T24] usb 2-1: config 5 interface 39 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 894.531796][ T24] usb 2-1: config 5 interface 39 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 894.556192][ T24] usb 2-1: config 5 interface 39 altsetting 6 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 894.581637][ T24] usb 2-1: too many endpoints for config 5 interface 155 altsetting 122: 148, using maximum allowed: 30 [ 894.593775][ T24] usb 2-1: config 5 interface 155 altsetting 122 has a duplicate endpoint with address 0x3, skipping [ 894.605303][ T24] usb 2-1: config 5 interface 155 altsetting 122 has a duplicate endpoint with address 0x7, skipping [ 894.616615][ T24] usb 2-1: config 5 interface 155 altsetting 122 has an invalid descriptor for endpoint zero, skipping [ 894.629141][ T24] usb 2-1: config 5 interface 155 altsetting 122 has an invalid descriptor for endpoint zero, skipping [ 894.642122][ T24] usb 2-1: config 5 interface 155 altsetting 122 has 4 endpoint descriptors, different from the interface descriptor's value: 148 [ 894.685589][ T24] usb 2-1: config 5 interface 61 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 894.865487][ T24] usb 2-1: config 5 interface 61 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 894.876479][ T24] usb 2-1: config 5 interface 61 altsetting 6 endpoint 0xB has invalid wMaxPacketSize 0 [ 896.302547][ T24] usb 2-1: config 5 interface 61 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 896.322025][ T24] usb 2-1: config 5 interface 61 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 896.335571][ T24] usb 2-1: config 5 interface 61 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 896.361276][ T24] usb 2-1: config 5 interface 61 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 896.372405][ T24] usb 2-1: config 5 interface 61 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 896.402768][ T24] usb 2-1: config 5 interface 250 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.417485][ T24] usb 2-1: too many endpoints for config 5 interface 6 altsetting 171: 63, using maximum allowed: 30 [ 896.426511][T16918] virt_wifi0 speed is unknown, defaulting to 1000 [ 896.456484][ T24] usb 2-1: config 5 interface 6 altsetting 171 has a duplicate endpoint with address 0x6, skipping [ 896.553566][T16920] input: syz1 as /devices/virtual/input/input102 [ 896.699053][ T24] usb 2-1: config 5 interface 6 altsetting 171 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 896.825950][ T24] usb 2-1: config 5 interface 39 has no altsetting 0 [ 896.832860][ T24] usb 2-1: config 5 interface 155 has no altsetting 0 [ 896.909582][ T24] usb 2-1: config 5 interface 61 has no altsetting 0 [ 896.938875][ T24] usb 2-1: config 5 interface 6 has no altsetting 0 [ 896.973287][ T24] usb 2-1: string descriptor 0 read error: -71 [ 897.004193][ T24] usb 2-1: Dual-Role OTG device on HNP port [ 897.024321][ T24] usb 2-1: can't set HNP mode: -71 [ 898.961040][T16943] Smack: duplicate mount options [ 899.193875][T16952] x_tables: duplicate underflow at hook 1 [ 899.957448][T16957] xt_CONNSECMARK: invalid mode: 0 [ 899.975675][T16957] input: syz1 as /devices/virtual/input/input103 [ 901.159501][T16966] fuse: Unknown parameter 'root1mode' [ 902.334892][T16971] gtp0: entered promiscuous mode [ 902.340176][T16971] gtp0: entered allmulticast mode [ 902.785297][T16994] Smack: duplicate mount options [ 903.417437][ T5827] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 903.483998][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3045'. [ 903.664338][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 903.689046][ T5827] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 903.699497][ T5827] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 903.707523][ T5827] usb 2-1: Product: syz [ 904.274433][ T5827] usb 2-1: Manufacturer: syz [ 904.283167][ T5827] usb 2-1: SerialNumber: syz [ 904.290409][ T5827] usb 2-1: config 0 descriptor?? [ 904.303545][ T5827] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 904.456680][T17012] xt_CONNSECMARK: invalid mode: 0 [ 904.476313][T17012] input: syz1 as /devices/virtual/input/input104 [ 904.562631][ T5827] gspca_zc3xx: reg_r err -71 [ 904.573217][ T5827] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 904.583757][T17022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3050'. [ 904.615917][ T5827] usb 2-1: USB disconnect, device number 55 [ 904.788540][ T977] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 904.883522][T17033] Smack: duplicate mount options [ 904.961822][ T977] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 904.978350][ T977] usb 8-1: can't read configurations, error -61 [ 905.141317][ T977] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 905.338808][ T977] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 905.458623][ T977] usb 8-1: can't read configurations, error -61 [ 905.699917][ T977] usb usb8-port1: attempt power cycle [ 908.858213][ T977] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 909.076325][T17059] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3063'. [ 909.247574][ T977] usb 8-1: device not accepting address 12, error -71 [ 909.391834][T17067] xt_TCPMSS: Only works on TCP SYN packets [ 910.315967][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3065'. [ 912.983798][T17092] virt_wifi0 speed is unknown, defaulting to 1000 [ 914.313169][ T5827] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 915.234755][T17122] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 915.267436][ T5827] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 915.300714][ T5827] usb 1-1: config 0 has no interface number 0 [ 915.330111][ T5827] usb 1-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 915.365041][ T5827] usb 1-1: config 0 interface 235 has no altsetting 0 [ 915.505179][ T5827] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 915.531854][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.629459][ T24] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 915.934825][ T24] usb 7-1: too many configurations: 192, using maximum allowed: 8 [ 915.999584][ T5827] usb 1-1: Product: syz [ 916.002126][ T30] audit: type=1326 audit(1743033784.880:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.1.3076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x0 [ 916.028045][ T5827] usb 1-1: Manufacturer: syz [ 916.032755][ T5827] usb 1-1: SerialNumber: syz [ 916.066517][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 916.079474][ T24] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 916.093730][ T5827] usb 1-1: config 0 descriptor?? [ 916.108242][ T5827] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 916.117015][ T5827] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 916.136240][ T5827] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 916.150467][ T24] usb 7-1: config 0 has no interface number 0 [ 916.161874][ T5827] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 916.175754][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 916.193788][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3088'. [ 916.209339][T17137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3088'. [ 916.219155][ T5827] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 916.228636][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.232258][T17137] netlink: 'syz.7.3088': attribute type 7 has an invalid length. [ 916.250870][ T5827] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 916.262602][ T5827] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 916.271332][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 916.328072][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 916.330988][T17140] xt_CONNSECMARK: invalid mode: 0 [ 916.357102][ T24] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 916.360767][T17140] input: syz1 as /devices/virtual/input/input107 [ 916.374188][ T24] usb 7-1: config 0 has no interface number 0 [ 916.374265][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 916.374343][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.374418][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 916.791063][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 916.811374][ T24] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 916.828266][ T24] usb 7-1: config 0 has no interface number 0 [ 916.841251][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 916.865134][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.880588][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 916.888362][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 916.934107][ T24] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 916.994439][ T24] usb 7-1: config 0 has no interface number 0 [ 917.000892][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 917.016163][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 917.035202][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 917.035531][ T5827] usb 1-1: USB disconnect, device number 42 [ 917.043946][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 917.097225][ T24] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 917.097331][ T5827] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 917.219049][ T24] usb 7-1: config 0 has no interface number 0 [ 917.242499][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 917.263506][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 917.345218][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 917.561951][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 917.778830][ T24] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 917.815603][ T5827] keyspan 1-1:0.235: device disconnected [ 917.844339][ T24] usb 7-1: config 0 has no interface number 0 [ 917.865791][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 917.901207][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 917.918812][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 917.959434][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 917.967876][ T24] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 918.099150][ T24] usb 7-1: config 0 has no interface number 0 [ 918.105953][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 918.117552][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.132098][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 918.140470][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 918.149390][ T24] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 918.202451][ T24] usb 7-1: config 0 has no interface number 0 [ 918.212211][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 918.227755][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.243291][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 918.651096][ T24] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 918.662969][ T24] usb 7-1: New USB device strings: Mfr=251, Product=214, SerialNumber=134 [ 918.690382][T17173] sctp: [Deprecated]: syz.7.3095 (pid 17173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 918.690382][T17173] Use struct sctp_sack_info instead [ 918.726850][ T5827] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 918.728822][ T24] usb 7-1: Product: syz [ 918.822076][ T24] usb 7-1: Manufacturer: syz [ 918.829833][ T24] usb 7-1: SerialNumber: syz [ 918.851748][ T24] usb 7-1: config 0 descriptor?? [ 918.870363][ T24] usb 7-1: can't set config #0, error -71 [ 918.923013][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 918.927906][ T24] usb 7-1: USB disconnect, device number 45 [ 919.125255][ T5827] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.548474][ T5827] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 919.566341][ T5827] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 919.580191][ T5827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 919.965990][ T5827] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 919.976945][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.006804][ T5827] usb 1-1: config 0 descriptor?? [ 920.034171][T17186] FAULT_INJECTION: forcing a failure. [ 920.034171][T17186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.193345][T17186] CPU: 0 UID: 0 PID: 17186 Comm: syz.1.3100 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 920.193374][T17186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 920.193389][T17186] Call Trace: [ 920.193396][T17186] [ 920.193405][T17186] dump_stack_lvl+0x241/0x360 [ 920.193432][T17186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.193453][T17186] ? __pfx__printk+0x10/0x10 [ 920.193479][T17186] should_fail_ex+0x424/0x570 [ 920.193505][T17186] _copy_to_user+0x31/0xb0 [ 920.193527][T17186] simple_read_from_buffer+0xdc/0x170 [ 920.193563][T17186] proc_fail_nth_read+0x1ef/0x260 [ 920.193585][T17186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 920.193607][T17186] ? rw_verify_area+0x246/0x630 [ 920.193629][T17186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 920.193649][T17186] vfs_read+0x21f/0xb90 [ 920.193674][T17186] ? __pfx___mutex_lock+0x10/0x10 [ 920.193697][T17186] ? __pfx_vfs_read+0x10/0x10 [ 920.193721][T17186] ? __fget_files+0x2a/0x420 [ 920.193740][T17186] ? __fget_files+0x39d/0x420 [ 920.193756][T17186] ? __fget_files+0x2a/0x420 [ 920.193780][T17186] ksys_read+0x19d/0x2d0 [ 920.193803][T17186] ? __pfx_ksys_read+0x10/0x10 [ 920.193829][T17186] ? do_syscall_64+0xb6/0x230 [ 920.193854][T17186] do_syscall_64+0xf3/0x230 [ 920.193875][T17186] ? clear_bhb_loop+0x45/0xa0 [ 920.193896][T17186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.193913][T17186] RIP: 0033:0x7f3c68d8bb7c [ 920.193929][T17186] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 920.193944][T17186] RSP: 002b:00007f3c69bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 920.193963][T17186] RAX: ffffffffffffffda RBX: 00007f3c68fa5fa0 RCX: 00007f3c68d8bb7c [ 920.193976][T17186] RDX: 000000000000000f RSI: 00007f3c69bf60a0 RDI: 0000000000000004 [ 920.193988][T17186] RBP: 00007f3c69bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 920.193999][T17186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.194010][T17186] R13: 0000000000000000 R14: 00007f3c68fa5fa0 R15: 00007ffc23c51e08 [ 920.194033][T17186] [ 920.441148][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 920.612578][ T30] audit: type=1326 audit(1743033789.192:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17192 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 920.978980][ T5827] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 920.992292][ T5827] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 921.009327][ T5827] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 921.018797][ T5827] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 921.026999][ T30] audit: type=1326 audit(1743033789.202:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17192 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 921.048724][T10651] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 921.058668][ T5827] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 921.090341][ T30] audit: type=1326 audit(1743033789.202:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17192 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 921.114518][ T30] audit: type=1326 audit(1743033789.202:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17192 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 921.138432][ T30] audit: type=1326 audit(1743033789.202:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17192 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 921.213324][ T30] audit: type=1326 audit(1743033789.202:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17192 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 921.222604][T10651] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.256874][ T30] audit: type=1326 audit(1743033789.202:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17192 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 921.279058][ T5827] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 921.279261][ T5827] hid-thrustmaster 0003:044F:B65D.0011: Unexpected non-int endpoint [ 921.888808][T10651] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 921.898512][ C0] hid-thrustmaster 0003:044F:B65D.0011: URB to get model id failed with error -71 [ 921.907865][T10651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.919392][T10651] usb 7-1: config 0 descriptor?? [ 921.940176][ T5827] usb 1-1: USB disconnect, device number 43 [ 921.954465][T10651] pwc: Askey VC010 type 2 USB webcam detected. [ 921.987052][T17203] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 922.058039][ T30] audit: type=1326 audit(1743033789.202:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17192 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c68d8d169 code=0x7ffc0000 [ 923.102943][T10651] pwc: recv_control_msg error -32 req 02 val 2b00 [ 923.115202][T10651] pwc: recv_control_msg error -32 req 02 val 2700 [ 923.132483][ T975] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 923.170554][T10651] pwc: recv_control_msg error -32 req 02 val 2c00 [ 923.327572][T10651] pwc: recv_control_msg error -32 req 04 val 1000 [ 923.376553][T10651] pwc: recv_control_msg error -32 req 04 val 1300 [ 923.407427][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 923.415262][T10651] pwc: recv_control_msg error -32 req 04 val 1400 [ 923.424854][T10651] pwc: recv_control_msg error -32 req 02 val 2000 [ 923.433698][ T975] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 923.441897][ T975] usb 6-1: config 0 has no interface number 0 [ 923.449586][T10651] pwc: recv_control_msg error -32 req 02 val 2100 [ 923.457202][T10651] pwc: recv_control_msg error -32 req 04 val 1500 [ 923.909552][ T975] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 923.923649][T10651] pwc: recv_control_msg error -32 req 02 val 2400 [ 923.932471][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.943623][ T975] usb 6-1: Product: syz [ 923.954114][ T975] usb 6-1: Manufacturer: syz [ 923.963740][ T975] usb 6-1: SerialNumber: syz [ 923.969336][T10651] pwc: recv_control_msg error -32 req 02 val 2600 [ 923.977817][T10651] pwc: recv_control_msg error -32 req 02 val 2900 [ 923.990794][T10651] pwc: recv_control_msg error -32 req 02 val 2800 [ 924.085839][ T975] usb 6-1: config 0 descriptor?? [ 924.091853][T10651] pwc: recv_control_msg error -32 req 04 val 1100 [ 924.103859][ T975] smsc95xx v2.0.0 [ 924.108199][T10651] pwc: Registered as video103. [ 924.114140][T10651] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input108 [ 924.764380][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.773350][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.784268][ T5903] usb 7-1: USB disconnect, device number 46 [ 925.067575][ T975] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 925.095422][ T975] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 925.747216][ T975] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 926.110690][ T975] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 926.138247][ T975] usb 6-1: USB disconnect, device number 19 [ 926.277078][T17241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3113'. [ 927.435631][T17253] ceph: No mds server is up or the cluster is laggy [ 927.451041][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 927.457152][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 929.105443][T17279] syz.6.3126 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 929.120359][T13486] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 929.135385][T13486] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 929.144700][T13486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 929.156585][T13486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.164871][T13486] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 929.181038][T13486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 929.367736][T10651] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 929.574139][ T975] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 929.648834][T17280] virt_wifi0 speed is unknown, defaulting to 1000 [ 929.706621][T10651] usb 6-1: Using ep0 maxpacket: 32 [ 929.730717][T10651] usb 6-1: config 1 interface 0 altsetting 11 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 929.756452][T10651] usb 6-1: config 1 interface 0 has no altsetting 0 [ 929.774881][T10651] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.797704][ T975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.810462][T10651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.834809][ T975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.844715][T10651] usb 6-1: Product: 䐊 [ 929.850467][T10651] usb 6-1: Manufacturer: ࢴ⡭뚥竲芭쌌옂稀ሰꔂ桾秲挸ⱑ릺凐ซꊄ㫨奵嚐㉖ڄᱺ୊찮㶥갩䄢떫罯ẚ瀶硳뫅᎞粐萕⎵젇羻펫ꁏ먷ﯙ䫲鸢㡼뇚Ჭ嗨琢똮ᔍ喦팞骦ꗍ족禴୿刞땵ි（엪 [ 929.875746][ C0] vkms_vblank_simulate: vblank timer overrun [ 929.882826][ T975] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 929.893980][ T975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.908266][T10651] usb 6-1: SerialNumber: syz [ 929.916442][ T975] usb 8-1: config 0 descriptor?? [ 929.931839][T17276] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 930.093452][T17280] chnl_net:caif_netlink_parms(): no params data found [ 930.477452][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.558371][T17285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.575547][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.647797][T17285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.655006][T10651] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 930.685802][T10651] usb 6-1: USB disconnect, device number 20 [ 930.693698][ T975] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 930.704158][T17280] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.704828][ T975] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 930.716614][T17280] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.720558][ T5872] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 930.728288][T17280] bridge_slave_0: entered allmulticast mode [ 930.745613][ T975] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0012/input/input110 [ 930.773264][ T975] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 930.814982][T17280] bridge_slave_0: entered promiscuous mode [ 930.824136][T17280] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.831661][T17280] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.839100][T17280] bridge_slave_1: entered allmulticast mode [ 930.848172][T17280] bridge_slave_1: entered promiscuous mode [ 930.881256][T17280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.890546][ T5872] usb 7-1: device descriptor read/64, error -71 [ 930.901945][T17280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.934759][T16931] usb 8-1: USB disconnect, device number 14 [ 930.964337][T17280] team0: Port device team_slave_0 added [ 930.983033][T17280] team0: Port device team_slave_1 added [ 931.008673][T17280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.016721][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.044022][T17280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.059098][T17280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.067990][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.094515][T17280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.134195][T17280] hsr_slave_0: entered promiscuous mode [ 931.141701][T17280] hsr_slave_1: entered promiscuous mode [ 931.149091][T17280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 931.157855][T17280] Cannot create hsr debugfs directory [ 931.266622][ T5872] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 931.522235][T16931] libceph: connect (1)[c::]:6789 error -101 [ 932.362807][T13486] Bluetooth: hci5: command tx timeout [ 932.370439][T16931] libceph: mon0 (1)[c::]:6789 connect error [ 932.379497][ T5872] usb 7-1: device descriptor read/64, error -71 [ 932.556467][ T5872] usb usb7-port1: attempt power cycle [ 932.604139][T17315] ceph: No mds server is up or the cluster is laggy [ 932.614883][T17280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.929598][T17280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.975367][T17331] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3136'. [ 933.000050][ T5872] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 933.074384][ T5872] usb 7-1: device descriptor read/8, error -71 [ 933.196744][T17280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.388616][T17280] bond0: (slave netdevsim0): Releasing backup interface [ 933.944746][T17280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.725516][T13486] Bluetooth: hci5: command tx timeout [ 934.742986][T17280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 934.774526][T17280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 934.808477][T17280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 935.006637][T17280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 936.302500][T17356] xt_CONNSECMARK: invalid mode: 0 [ 936.362560][T17280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.472828][T17280] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.504210][T14583] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.511367][T14583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.548838][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.555976][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.911571][T13486] Bluetooth: hci5: command tx timeout [ 937.501875][T17280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.646761][T17280] veth0_vlan: entered promiscuous mode [ 937.685803][T17280] veth1_vlan: entered promiscuous mode [ 937.743386][T17280] veth0_macvtap: entered promiscuous mode [ 937.907817][T17280] veth1_macvtap: entered promiscuous mode [ 937.923268][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.945951][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.959373][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.989419][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.999932][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.011489][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.022180][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.033667][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.171688][T17280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.381872][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3151'. [ 938.522545][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.540423][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.551179][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.561971][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.572321][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.584053][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.595628][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.621509][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.749000][T17280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.781772][T17280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.795833][T17280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.805086][T17280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.832826][T17280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.003045][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.011205][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.032386][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.040683][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.147231][T13486] Bluetooth: hci5: command tx timeout [ 939.156389][ T30] audit: type=1326 audit(1743033806.545:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 939.186876][ T30] audit: type=1326 audit(1743033806.545:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 939.217265][ T30] audit: type=1326 audit(1743033806.545:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 939.278128][ T977] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 939.467469][T10651] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 939.687344][T17427] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 939.704160][ T30] audit: type=1326 audit(1743033806.545:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 939.732770][ T30] audit: type=1326 audit(1743033806.545:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 939.763323][ T30] audit: type=1326 audit(1743033806.573:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 939.797282][ T30] audit: type=1326 audit(1743033806.573:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 939.842327][ T30] audit: type=1326 audit(1743033806.573:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 939.884388][ T977] usb 7-1: Using ep0 maxpacket: 32 [ 939.912578][ T977] usb 7-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 939.974384][T10651] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 939.991317][T10651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.000141][T10651] usb 6-1: Product: syz [ 940.015045][T10651] usb 6-1: Manufacturer: syz [ 940.021343][T10651] usb 6-1: SerialNumber: syz [ 940.077157][T10651] usb 6-1: config 0 descriptor?? [ 940.105173][T10651] hub 6-1:0.0: bad descriptor, ignoring hub [ 940.174042][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.187842][T10651] hub 6-1:0.0: probe with driver hub failed with error -5 [ 940.189533][ T30] audit: type=1326 audit(1743033806.573:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 940.218007][ T977] usb 7-1: config 0 descriptor?? [ 940.222728][T10651] f81232 6-1:0.0: f81534a converter detected [ 940.256017][ T30] audit: type=1326 audit(1743033806.573:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.7.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9398d169 code=0x7ffc0000 [ 940.766009][T17442] xt_TCPMSS: Only works on TCP SYN packets [ 941.722848][ T977] wacom 0003:056A:5002.0013: hidraw0: USB HID vff.ff Device [HID 056a:5002] on usb-dummy_hcd.6-1/input0 [ 942.197765][T17456] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3171'. [ 942.267700][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 942.408176][T10651] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 942.438381][T10651] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 942.503450][T17464] input: syz1 as /devices/virtual/input/input115 [ 942.524291][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 942.739838][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 942.752014][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.761049][T10651] usb 6-1: USB disconnect, device number 21 [ 942.786925][ T975] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 942.796732][T10651] f81232 6-1:0.0: device disconnected [ 942.816531][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 942.825456][ T5872] usb 7-1: USB disconnect, device number 51 [ 942.864397][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 942.907227][T17471] netlink: 'syz.0.3177': attribute type 4 has an invalid length. [ 942.928226][T17471] netlink: 'syz.0.3177': attribute type 4 has an invalid length. [ 942.988824][ T975] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.999578][ T975] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 943.010415][ T975] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 943.020254][ T975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 943.028770][ T975] usb 8-1: SerialNumber: syz [ 943.033264][ T24] usb 2-1: USB disconnect, device number 57 [ 943.122878][T17481] overlay: Unknown parameter 'rootcontext' [ 943.892272][ T5872] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 944.076046][ T5872] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 944.092691][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.157390][ T5872] usb 7-1: config 0 descriptor?? [ 944.186824][ T5872] cp210x 7-1:0.0: cp210x converter detected [ 944.668959][T17493] input: syz1 as /devices/virtual/input/input116 [ 944.824563][ T5872] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 945.167753][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 945.167940][ T30] audit: type=1326 audit(1743033812.158:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 945.226410][ T5872] usb 7-1: cp210x converter now attached to ttyUSB0 [ 945.387547][ T30] audit: type=1326 audit(1743033812.251:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 945.429157][ T30] audit: type=1326 audit(1743033812.251:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 945.508801][ T30] audit: type=1326 audit(1743033812.251:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 945.574220][ T975] usb 8-1: 0:2 : does not exist [ 945.597507][ T30] audit: type=1326 audit(1743033812.569:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 945.636157][ T975] usb 8-1: USB disconnect, device number 15 [ 945.717391][T17497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3186'. [ 945.873491][ T30] audit: type=1326 audit(1743033812.569:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 946.520410][ T30] audit: type=1326 audit(1743033812.635:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 946.585415][ T30] audit: type=1326 audit(1743033812.635:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 946.624590][ T977] usb 7-1: USB disconnect, device number 52 [ 946.633286][ T977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 946.650013][ T30] audit: type=1326 audit(1743033812.635:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 946.692269][ T30] audit: type=1326 audit(1743033812.635:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.6.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc53858d169 code=0x7ffc0000 [ 946.736511][ T977] cp210x 7-1:0.0: device disconnected [ 946.834321][ T24] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 947.046497][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.074045][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 947.099279][T17509] input: syz1 as /devices/virtual/input/input117 [ 947.123503][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 947.175079][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.221159][ T24] usb 8-1: Product: syz [ 947.225710][ T24] usb 8-1: Manufacturer: syz [ 947.271465][ T24] usb 8-1: SerialNumber: syz [ 947.614065][T17514] xt_TCPMSS: Only works on TCP SYN packets [ 948.446951][ T24] usb 8-1: 0:2 : does not exist [ 948.455329][ T24] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 948.495857][ T24] usb 8-1: USB disconnect, device number 16 [ 948.885804][T17533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3191'. [ 949.626139][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 950.001950][T13486] Bluetooth: hci2: command 0x0406 tx timeout [ 950.019242][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 950.029642][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.047649][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 950.057371][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 950.068052][ T9] usb 7-1: Manufacturer: syz [ 950.077728][ T9] usb 7-1: config 0 descriptor?? [ 950.210815][ T9] rc_core: IR keymap rc-hauppauge not found [ 950.227362][ T9] Registered IR keymap rc-empty [ 950.239483][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 950.259601][T17546] netlink: 110740 bytes leftover after parsing attributes in process `syz.7.3199'. [ 950.272006][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input118 [ 951.375851][ T5872] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 952.081139][T17564] xt_TCPMSS: Only works on TCP SYN packets [ 952.100521][ T5872] usb 8-1: unable to get BOS descriptor or descriptor too short [ 952.113130][ T5872] usb 8-1: not running at top speed; connect to a high speed hub [ 952.205903][T17568] input: syz1 as /devices/virtual/input/input119 [ 953.048955][ T5872] usb 8-1: config 8 interface 0 has no altsetting 0 [ 953.082028][ T975] usb 7-1: USB disconnect, device number 53 [ 953.108412][ T5872] usb 8-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e [ 953.120422][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.144030][ T5872] usb 8-1: Product: syz [ 953.148301][ T5872] usb 8-1: Manufacturer: syz [ 953.159841][ T5872] usb 8-1: SerialNumber: syz [ 953.180703][T17574] netlink: 'syz.1.3205': attribute type 1 has an invalid length. [ 953.363850][ T5872] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 953.383899][ T5872] gspca_sonixj: reg_w1 err -71 [ 953.393971][ T5872] sonixj 8-1:8.0: probe with driver sonixj failed with error -71 [ 953.403967][ T5872] usb 8-1: USB disconnect, device number 17 [ 953.449092][ T5827] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 953.509121][ T5905] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 954.120834][ T5827] usb 2-1: device descriptor read/64, error -71 [ 954.142167][ T5905] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 954.159194][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.173197][ T5905] usb 1-1: Product: syz [ 954.182001][ T5905] usb 1-1: Manufacturer: syz [ 954.191967][ T5905] usb 1-1: SerialNumber: syz [ 954.199766][ T5905] usb 1-1: config 0 descriptor?? [ 954.206364][ T5905] hub 1-1:0.0: bad descriptor, ignoring hub [ 954.212639][ T5905] hub 1-1:0.0: probe with driver hub failed with error -5 [ 954.221735][ T5905] f81232 1-1:0.0: f81534a converter detected [ 954.462255][ T5827] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 954.722239][ T5827] usb 2-1: device descriptor read/64, error -71 [ 955.049830][ T5827] usb usb2-port1: attempt power cycle [ 956.132299][ T5827] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 956.166870][ T5827] usb 2-1: device descriptor read/8, error -71 [ 956.195605][T17607] netlink: set zone limit has 8 unknown bytes [ 956.266460][T17609] xt_TCPMSS: Only works on TCP SYN packets [ 957.294596][ T5827] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 957.355774][ T5905] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 957.371772][ T5905] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 957.411887][ T5827] usb 2-1: device descriptor read/8, error -71 [ 957.428470][ T5905] usb 1-1: USB disconnect, device number 44 [ 957.445190][ T5905] f81232 1-1:0.0: device disconnected [ 957.850507][ T5827] usb usb2-port1: unable to enumerate USB device [ 957.872782][ T5872] IPVS: starting estimator thread 0... [ 957.981930][T17628] IPVS: using max 32 ests per chain, 76800 per kthread [ 958.063352][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 958.063366][ T30] audit: type=1804 audit(1743033824.235:888): pid=17633 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3221" name="/newroot/10/file0" dev="tmpfs" ino=69 res=1 errno=0 [ 959.052102][T17633] ref_ctr increment failed for inode: 0x45 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888028d21d40 [ 959.200340][T17632] uprobe: syz.1.3221:17632 failed to unregister, leaking uprobe [ 960.494311][T17654] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3225'. [ 960.508184][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3225'. [ 960.699542][T17654] 8021q: VLANs not supported on ip6_vti0 [ 960.756014][T17664] xt_TCPMSS: Only works on TCP SYN packets [ 961.367562][T13486] Bluetooth: hci4: command 0x0406 tx timeout [ 963.102081][ T5827] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 963.916229][ T5905] IPVS: starting estimator thread 0... [ 964.106625][T17690] IPVS: using max 30 ests per chain, 72000 per kthread [ 964.308398][ T5827] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 964.355880][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.374488][ T5827] usb 8-1: Product: syz [ 964.379973][ T5827] usb 8-1: Manufacturer: syz [ 964.385883][ T5827] usb 8-1: SerialNumber: syz [ 964.392258][ T5827] usb 8-1: config 0 descriptor?? [ 965.005610][ T5827] hub 8-1:0.0: bad descriptor, ignoring hub [ 965.017733][ T5827] hub 8-1:0.0: probe with driver hub failed with error -5 [ 965.037011][ T5827] f81232 8-1:0.0: f81534a converter detected [ 965.110366][ T5827] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 965.137064][ T5827] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 965.280748][ T5827] usb 8-1: USB disconnect, device number 18 [ 965.386858][T17715] xt_TCPMSS: Only works on TCP SYN packets [ 966.266918][ T5827] f81232 8-1:0.0: device disconnected [ 966.290038][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'. [ 966.323309][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3241'. [ 966.477672][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3243'. [ 966.750208][T17737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3247'. [ 966.760802][T17737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3247'. [ 967.821720][T17745] xt_CONNSECMARK: invalid mode: 0 [ 968.897979][T17758] xt_TCPMSS: Only works on TCP SYN packets [ 969.247117][T17755] xt_CONNSECMARK: invalid mode: 0 [ 969.481592][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3255'. [ 969.947506][T17768] netlink: 'syz.7.3256': attribute type 4 has an invalid length. [ 969.969984][T17768] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3256'. [ 971.562463][T17791] tmpfs: Bad value for 'mpol' [ 971.989528][T17803] xt_TCPMSS: Only works on TCP SYN packets [ 972.886368][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3266'. [ 973.743602][T17811] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 973.750189][T17811] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 973.765916][T17817] ntfs3(nullb0): Primary boot signature is not NTFS. [ 973.773484][T17817] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 973.781987][T17811] vhci_hcd vhci_hcd.0: Device attached [ 973.983148][T17819] tap0: tun_chr_ioctl cmd 1074025681 [ 973.995042][T17811] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 974.001587][T17811] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 974.015550][T17819] netlink: zone id is out of range [ 974.023888][T17811] vhci_hcd vhci_hcd.0: Device attached [ 974.030305][ T5905] vhci_hcd: vhci_device speed not set [ 974.046121][T17820] vhci_hcd: connection closed [ 974.047388][T17813] vhci_hcd: connection closed [ 974.054548][T17819] netlink: zone id is out of range [ 974.068291][T14583] vhci_hcd: stop threads [ 974.076048][T14583] vhci_hcd: release socket [ 974.081020][T14583] vhci_hcd: disconnect device [ 974.088771][T17819] netlink: set zone limit has 8 unknown bytes [ 974.098490][T17829] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3272'. [ 974.129323][T14583] vhci_hcd: stop threads [ 974.142417][T14583] vhci_hcd: release socket [ 974.180308][T14583] vhci_hcd: disconnect device [ 975.069187][ T5905] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 975.099296][ T5905] usb 47-1: enqueue for inactive port 0 [ 975.193568][ T5827] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 975.235338][ T5905] vhci_hcd: vhci_device speed not set [ 975.834193][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 975.842836][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.865798][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.944255][T17849] xt_TCPMSS: Only works on TCP SYN packets [ 976.792619][ T5827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 976.812743][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.821100][ T5827] usb 2-1: Product: syz [ 976.825323][ T5827] usb 2-1: Manufacturer: syz [ 976.830460][ T5827] usb 2-1: SerialNumber: syz [ 976.885319][T17855] loop2: detected capacity change from 0 to 7 [ 976.899149][T17855] Dev loop2: unable to read RDB block 7 [ 977.185176][T17859] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 977.887765][T17855] loop2: unable to read partition table [ 977.980818][T17855] loop2: partition table beyond EOD, truncated [ 978.009175][T17855] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 978.050416][ T5827] usb 2-1: 0:2 : does not exist [ 978.089500][ T5827] usb 2-1: USB disconnect, device number 62 [ 978.112052][T17864] netlink: 'syz.7.3284': attribute type 1 has an invalid length. [ 978.222748][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3285'. [ 981.744083][T17905] loop2: detected capacity change from 0 to 7 [ 981.778341][T17905] Dev loop2: unable to read RDB block 7 [ 981.783991][T17905] loop2: unable to read partition table [ 981.832820][T17905] loop2: partition table beyond EOD, truncated [ 981.839049][T17905] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 982.772001][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3299'. [ 983.359233][ T5827] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 983.630816][T17577] IPVS: starting estimator thread 0... [ 983.758200][T17935] IPVS: using max 30 ests per chain, 72000 per kthread [ 984.015626][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.162975][ T5827] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 984.179524][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.312075][ T5827] usb 7-1: config 0 descriptor?? [ 984.489106][T17945] syzkaller1: entered promiscuous mode [ 984.495764][T17945] syzkaller1: entered allmulticast mode [ 985.327018][T17913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.359759][T17913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.393797][T17913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.409288][T17913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.422996][T17952] netlink: 4140 bytes leftover after parsing attributes in process `syz.0.3313'. [ 985.432245][T17952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 985.439515][T17952] IPv6: NLM_F_CREATE should be set when creating new route [ 985.446809][T17952] IPv6: NLM_F_CREATE should be set when creating new route [ 985.473713][T17955] openvswitch: netlink: IPv4 tunnel dst address is zero [ 985.764345][ T5827] logitech-djreceiver 0003:046D:C53A.0014: item fetching failed at offset 3/7 [ 985.784613][T17952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3313'. [ 985.795061][ T5827] logitech-djreceiver 0003:046D:C53A.0014: logi_dj_probe: parse failed [ 985.844147][T17955] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3313'. [ 985.904481][ T5827] logitech-djreceiver 0003:046D:C53A.0014: probe with driver logitech-djreceiver failed with error -22 [ 986.092603][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.183941][T17577] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 986.572941][T17577] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 986.696587][T17577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.899180][T17577] usb 1-1: config 0 descriptor?? [ 987.094590][ T5827] usb 7-1: USB disconnect, device number 54 [ 988.036740][T17952] hsr0: entered promiscuous mode [ 988.647370][T17577] usb 1-1: string descriptor 0 read error: -71 [ 988.657724][T17577] usb 1-1: USB disconnect, device number 45 [ 991.771376][T18044] xt_TCPMSS: Only works on TCP SYN packets [ 991.890498][T18037] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 991.933957][ T31] INFO: task kworker/u8:11:7871 blocked for more than 144 seconds. [ 992.068203][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 992.128225][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 992.194483][ T31] task:kworker/u8:11 state:D stack:21112 pid:7871 tgid:7871 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 992.273738][ T31] Workqueue: netns cleanup_net [ 992.291163][ T31] Call Trace: [ 992.301152][ T31] [ 992.377669][ T31] __schedule+0x1ac3/0x5090 [ 992.383364][ T31] ? register_lock_class+0x54/0x330 [ 992.388684][ T31] ? do_raw_spin_lock+0x151/0x370 [ 992.393877][ T31] ? __pfx___schedule+0x10/0x10 [ 992.398834][ T31] ? schedule+0x90/0x360 [ 992.403230][ T31] ? schedule+0x90/0x360 [ 992.407547][ T31] schedule+0x163/0x360 [ 992.411777][ T31] afs_cell_purge+0x3e3/0x550 [ 992.435432][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 992.440818][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 992.449461][ T31] ? afs_net+0x45/0x280 [ 992.457403][ T31] afs_net_exit+0x50/0x100 [ 992.464522][ T31] cleanup_net+0x814/0xd60 [ 992.473032][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 992.500969][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 992.528257][ T31] process_scheduled_works+0xac3/0x18e0 [ 992.555899][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 992.595611][ T31] ? assign_work+0x367/0x3d0 [ 992.612820][ T31] worker_thread+0x870/0xd30 [ 992.633380][ T31] ? __kthread_parkme+0x169/0x1d0 [ 992.661820][ T31] ? __pfx_worker_thread+0x10/0x10 [ 992.686569][ T31] kthread+0x7a9/0x920 [ 992.709397][ T31] ? __pfx_worker_thread+0x10/0x10 [ 992.726688][ T31] ? __pfx_kthread+0x10/0x10 [ 992.747825][ T31] ? __pfx_kthread+0x10/0x10 [ 992.764678][T18047] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3337'. [ 992.787658][ T31] ? __pfx_kthread+0x10/0x10 [ 992.803433][ T31] ? __pfx_kthread+0x10/0x10 [ 992.811720][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 992.827044][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 992.845792][ T31] ? __pfx_kthread+0x10/0x10 [ 992.856362][ T31] ret_from_fork+0x4b/0x80 [ 992.865799][ T31] ? __pfx_kthread+0x10/0x10 [ 992.876304][ T31] ret_from_fork_asm+0x1a/0x30 [ 992.887870][ T31] [ 992.893558][ T31] [ 992.893558][ T31] Showing all locks held in the system: [ 993.007176][ T31] 3 locks held by kworker/u8:1/13: [ 993.019849][ T31] #0: ffff8880b8739958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 993.045260][ T31] #1: ffff8880b8723b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 993.059245][ T31] #2: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: batadv_nc_purge_paths+0xe8/0x3b0 [ 993.069457][ T31] 2 locks held by kworker/1:0/24: [ 993.074592][ T31] 1 lock held by khungtaskd/31: [ 993.079538][ T31] #0: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 993.090505][ T31] 2 locks held by getty/5585: [ 993.095312][ T31] #0: ffff8880357d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 993.106428][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 993.129650][ T31] 3 locks held by kworker/u8:11/7871: [ 993.138683][ T31] #0: ffff88801baf3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 993.164114][ T31] #1: ffffc90002e27c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 993.193680][ T31] #2: ffffffff8feb7610 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 993.203185][ T31] 1 lock held by syz.7.3319/17974: [ 993.225945][ T31] [ 993.228319][ T31] ============================================= [ 993.228319][ T31] [ 993.248363][ T31] NMI backtrace for cpu 0 [ 993.248388][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 993.248408][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 993.248417][ T31] Call Trace: [ 993.248424][ T31] [ 993.248432][ T31] dump_stack_lvl+0x241/0x360 [ 993.248457][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.248476][ T31] ? __pfx__printk+0x10/0x10 [ 993.248501][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 993.248525][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 993.248541][ T31] ? _printk+0xd5/0x120 [ 993.248572][ T31] ? __wake_up_klogd+0xcc/0x110 [ 993.248591][ T31] ? __pfx__printk+0x10/0x10 [ 993.248610][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 993.248635][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 993.248655][ T31] watchdog+0x1058/0x10a0 [ 993.248678][ T31] ? watchdog+0x1ea/0x10a0 [ 993.248702][ T31] ? __pfx_watchdog+0x10/0x10 [ 993.248723][ T31] kthread+0x7a9/0x920 [ 993.248743][ T31] ? __pfx_watchdog+0x10/0x10 [ 993.248762][ T31] ? __pfx_kthread+0x10/0x10 [ 993.248778][ T31] ? __pfx_kthread+0x10/0x10 [ 993.248796][ T31] ? __pfx_kthread+0x10/0x10 [ 993.248813][ T31] ? __pfx_kthread+0x10/0x10 [ 993.248831][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 993.248849][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 993.248869][ T31] ? __pfx_kthread+0x10/0x10 [ 993.248888][ T31] ret_from_fork+0x4b/0x80 [ 993.248910][ T31] ? __pfx_kthread+0x10/0x10 [ 993.248928][ T31] ret_from_fork_asm+0x1a/0x30 [ 993.248959][ T31] [ 993.248966][ T31] Sending NMI from CPU 0 to CPUs 1: [ 993.416706][ C1] NMI backtrace for cpu 1 [ 993.416725][ C1] CPU: 1 UID: 0 PID: 17974 Comm: syz.7.3319 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 993.416744][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 993.416753][ C1] RIP: 0010:kasan_check_range+0x86/0x2a0 [ 993.416780][ C1] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 d6 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc [ 993.416793][ C1] RSP: 0018:ffffc9000bab66a8 EFLAGS: 00000246 [ 993.416808][ C1] RAX: ffff88813fffc401 RBX: 1ffff11027fff93f RCX: ffffffff821b0420 [ 993.416820][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88813fffc9f8 [ 993.416831][ C1] RBP: ffffffffffffffff R08: ffff88813fffc9ff R09: 1ffff11027fff93f [ 993.416843][ C1] R10: dffffc0000000000 R11: ffffed1027fff93f R12: ffff88813fffe110 [ 993.416854][ C1] R13: 0000000000000000 R14: dffffc0000000001 R15: ffffed1027fff940 [ 993.416865][ C1] FS: 00007f3b9477e6c0(0000) GS:ffff88812535a000(0000) knlGS:0000000000000000 [ 993.416878][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.416889][ C1] CR2: 00007f1ace778ab8 CR3: 00000000693dc000 CR4: 00000000003526f0 [ 993.416903][ C1] DR0: 0000000000000007 DR1: 0000000000000005 DR2: 0000000000000008 [ 993.416912][ C1] DR3: 10000000fffffffe DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 993.416922][ C1] Call Trace: [ 993.416929][ C1] [ 993.416937][ C1] ? nmi_cpu_backtrace+0x3d1/0x4e0 [ 993.416956][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 993.416971][ C1] ? look_up_lock_class+0x7b/0x170 [ 993.416991][ C1] ? lock_acquire+0x1fc/0x2f0 [ 993.417014][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 993.417034][ C1] ? nmi_handle+0x196/0x5e0 [ 993.417049][ C1] ? nmi_handle+0x7e/0x5e0 [ 993.417063][ C1] ? kasan_check_range+0x86/0x2a0 [ 993.417083][ C1] ? default_do_nmi+0x63/0x160 [ 993.417098][ C1] ? exc_nmi+0x123/0x1f0 [ 993.417112][ C1] ? end_repeat_nmi+0xf/0x53 [ 993.417131][ C1] ? get_page_from_freelist+0x3a0/0x37d0 [ 993.417150][ C1] ? kasan_check_range+0x86/0x2a0 [ 993.417170][ C1] ? kasan_check_range+0x86/0x2a0 [ 993.417191][ C1] ? kasan_check_range+0x86/0x2a0 [ 993.417211][ C1] [ 993.417216][ C1] [ 993.417223][ C1] get_page_from_freelist+0x3a0/0x37d0 [ 993.417249][ C1] ? __pfx___might_resched+0x10/0x10 [ 993.417284][ C1] __alloc_frozen_pages_noprof+0x2c5/0x7b0 [ 993.417303][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 993.417328][ C1] alloc_pages_mpol+0x339/0x690 [ 993.417351][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 993.417376][ C1] folio_alloc_mpol_noprof+0x36/0x70 [ 993.417397][ C1] shmem_alloc_and_add_folio+0x490/0x1070 [ 993.417422][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 993.417443][ C1] ? shmem_allowable_huge_orders+0x1fe/0x420 [ 993.417463][ C1] shmem_get_folio_gfp+0x655/0x1800 [ 993.417487][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 993.417506][ C1] ? ktime_get_coarse_real_ts64_mg+0x57/0x220 [ 993.417526][ C1] shmem_write_begin+0x17e/0x3a0 [ 993.417553][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 993.417575][ C1] generic_perform_write+0x329/0xa10 [ 993.417597][ C1] ? ktime_get_coarse_real_ts64_mg+0x20c/0x220 [ 993.417621][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 993.417642][ C1] ? __pfx_generic_write_checks+0x10/0x10 [ 993.417659][ C1] ? file_update_time+0x2ab/0x450 [ 993.417679][ C1] shmem_file_write_iter+0xf9/0x120 [ 993.417700][ C1] __kernel_write_iter+0x439/0x990 [ 993.417720][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 993.417740][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 993.417757][ C1] ? __up_read+0x2c4/0x6b0 [ 993.417772][ C1] ? __pfx___up_read+0x10/0x10 [ 993.417787][ C1] ? iov_iter_bvec+0x4e/0x180 [ 993.417804][ C1] dump_user_range+0x94a/0xf90 [ 993.417822][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 993.417838][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 993.417863][ C1] ? __kmalloc_cache_noprof+0x236/0x370 [ 993.417877][ C1] ? dump_emit+0x99/0xd0 [ 993.417899][ C1] elf_core_dump+0x409d/0x4ae0 [ 993.417922][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 993.417937][ C1] ? dump_vma_snapshot+0xc66/0x1180 [ 993.417960][ C1] ? up_write+0x1ab/0x590 [ 993.417988][ C1] ? rcu_read_lock_any_held+0xbb/0x160 [ 993.418003][ C1] ? 0xffffffffff600000 [ 993.418020][ C1] do_coredump+0x22c3/0x3260 [ 993.418052][ C1] ? __pfx_do_coredump+0x10/0x10 [ 993.418088][ C1] ? proc_coredump_connector+0x1fe/0x6a0 [ 993.418107][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 993.418127][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 993.418143][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 993.418162][ C1] get_signal+0x13ed/0x1730 [ 993.418186][ C1] ? __pfx_get_signal+0x10/0x10 [ 993.418207][ C1] arch_do_signal_or_restart+0x98/0x840 [ 993.418228][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 993.418252][ C1] ? irqentry_exit_to_user_mode+0x53/0x250 [ 993.418272][ C1] irqentry_exit_to_user_mode+0x7e/0x250 [ 993.418291][ C1] exc_general_protection+0x419/0x5d0 [ 993.418316][ C1] ? exc_page_fault+0x599/0x8b0 [ 993.418332][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 993.418355][ C1] asm_exc_general_protection+0x26/0x30 [ 993.418369][ C1] RIP: 0033:0x7f3b9398d171 [ 993.418382][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 993.418395][ C1] RSP: 002b:0000200000000510 EFLAGS: 00010217 [ 993.418408][ C1] RAX: 0000000000000000 RBX: 00007f3b93ba5fa0 RCX: 00007f3b9398d169 [ 993.418419][ C1] RDX: 0000200000000540 RSI: 0000200000000510 RDI: 0000000000200400 [ 993.418429][ C1] RBP: 00007f3b93a0e2a0 R08: 00002000000005c0 R09: 00002000000005c0 [ 993.418440][ C1] R10: 0000200000000580 R11: 0000000000000206 R12: 0000000000000000 [ 993.418450][ C1] R13: 0000000000000000 R14: 00007f3b93ba5fa0 R15: 00007ffc1fa72508 [ 993.418467][ C1] [ 993.419012][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 993.419029][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 993.419050][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 993.419061][ T31] Call Trace: [ 993.419068][ T31] [ 993.419077][ T31] dump_stack_lvl+0x241/0x360 [ 993.419102][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.419123][ T31] ? __pfx__printk+0x10/0x10 [ 993.419145][ T31] ? vscnprintf+0x5d/0x90 [ 993.419165][ T31] panic+0x349/0x880 [ 993.419182][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 993.419203][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 993.419223][ T31] ? __pfx_panic+0x10/0x10 [ 993.419239][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 993.419260][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 993.419285][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 993.419304][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 993.419324][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 993.419344][ T31] watchdog+0x1097/0x10a0 [ 993.419368][ T31] ? watchdog+0x1ea/0x10a0 [ 993.419392][ T31] ? __pfx_watchdog+0x10/0x10 [ 993.419414][ T31] kthread+0x7a9/0x920 [ 993.419434][ T31] ? __pfx_watchdog+0x10/0x10 [ 993.419455][ T31] ? __pfx_kthread+0x10/0x10 [ 993.419472][ T31] ? __pfx_kthread+0x10/0x10 [ 993.419491][ T31] ? __pfx_kthread+0x10/0x10 [ 993.419509][ T31] ? __pfx_kthread+0x10/0x10 [ 993.419527][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 993.419546][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 993.419566][ T31] ? __pfx_kthread+0x10/0x10 [ 993.419585][ T31] ret_from_fork+0x4b/0x80 [ 993.419609][ T31] ? __pfx_kthread+0x10/0x10 [ 993.419627][ T31] ret_from_fork_asm+0x1a/0x30 [ 993.419659][ T31] [ 994.173876][ T31] Kernel Offset: disabled [ 994.178194][ T31] Rebooting in 86400 seconds..