last executing test programs: 1m0.068894435s ago: executing program 4 (id=2838): syz_emit_vhci(0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000007380), 0xd55c, 0x22100) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000100)=""/91) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$qrtr(0x2a, 0x2, 0x0) epoll_create1(0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) unshare(0x2c020400) msgget$private(0x0, 0x0) 58.103237481s ago: executing program 4 (id=2842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0, r1, 0x2f, 0x18, 0x4, @void, @value=r1}, 0x20) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000400000000000000200900000075"], 0x50) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x80000000, 0x80000000, 0x2, 0xc025}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000240)={0x0, 0x8, 0xf6c, 0x0, 0x1d}) 57.915960765s ago: executing program 4 (id=2843): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_dev$loop(0x0, 0x4, 0xc8440) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000fc02000000000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040842}, 0x4000) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x8}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 56.991955494s ago: executing program 4 (id=2845): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x23f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x506}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0xc, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x8, 0x40}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xcd, 0x5, 0x81, 0x20, 0xe}, 0x49, &(0x7f00000000c0)={0x5, 0xf, 0x49, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x1e, 0x0, [0xc0, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0xfffd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x10, 0xe, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc8, 0x8, 0x15, 0x3, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0x0, 0x2}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x500a}}, {0x8b, &(0x7f0000000180)=@string={0x8b, 0x3, "1ee559d96e508665f555890ae3fad2ce601c3c6e3c4c2c85d65110b161780aec2866541ad05c55329464021cba9088111844182e6f6216130c0704b273c77ea080be290aee899ebf19430d678085386a3eaa8e85a2ee389a22d27eeb20808208a5f53acc91b29f3b5e1b8df22fcfce4fe40ea4cf7316b019a9e316660fc1516b5d88b375e8b74d6112"}}, {0x7c, &(0x7f0000000280)=@string={0x7c, 0x3, "f785864f089de1103b148a348715ceb581e7282d4ab7ba58cb8b3699a62a5b6c7a171ab50665528e58b5c6757690f5103e2deca09e9177beafd6eeae06caf0d101c40ba3264721555dcea9d0cf6641e3e8e975ec8c0ecee67b6a6164482a0035aa4bf18586aa8794727994cc2ace1ae97449c994d9326e1feaa5"}}, {0x57, &(0x7f0000000300)=@string={0x57, 0x3, "d981760c06712cfb40f747a8d7bb5c98b9e9418d512986e8f1d0e5c220436ada1e9bc9f097bb38d9db694c086d490d86d8d3a9606841f1e725d47754ad70c83119071792065c78017fdf402fbc0dca417e2ff103f7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x427}}, {0x3e, &(0x7f00000003c0)=@string={0x3e, 0x3, "5f59727bd29593ac3254b5421e4d1009bb3732a2e0b5c14ef0d3a00c4073d00ee551c9a4e0107abca7de2ec3d2e35d40723ed98ae1d44bb27ae3f0cd"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xc, 0x5, {0x5, 0x4, '&Wd'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 54.548056869s ago: executing program 4 (id=2849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000038001280080001"], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000000440)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\a\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8d645bed910ef687c4587059bb1341f9e92ec428109281b698fd25ef4a685a09e0e13237e839016a6ecff7183005bdb60e47a285a446ff0df512649b9c9cdd4efd40c24767e7c9914f140f9ed384ee746ada1ae938a7972a80aed82da21162184b5d343c95f4e211b3ad874cfbae797dbc0da019ab63a8eed4211d458d393621cfa1b51d2a7bf05e07584bdb81934772481c8e8bb84f811fe7f69d0bd7c3ed6f591c81d64ee9e65dc", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[@ANYRESDEC=r3], 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 53.336083578s ago: executing program 4 (id=2852): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x0, 0x1}, {0x0, 0xf}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mem_connect\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc004) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'macvlan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) read(r3, &(0x7f0000005f40)=""/175, 0xaf) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 38.200800439s ago: executing program 32 (id=2852): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x0, 0x1}, {0x0, 0xf}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mem_connect\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc004) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'macvlan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) read(r3, &(0x7f0000005f40)=""/175, 0xaf) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 28.912900012s ago: executing program 0 (id=2918): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) (fail_nth: 4) 27.484109343s ago: executing program 0 (id=2923): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x6, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) 26.174709058s ago: executing program 0 (id=2924): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40008893) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r5, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x12}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x8012, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x12, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}, 0xfdef) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x2d8, 0x168, 0x9, 0x0, 0xb, 0x3e8, 0x250, 0x250, 0x3e8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0x7f00007f], [], 'batadv_slave_1\x00', 'sit0\x00', {}, {}, 0x6, 0x0, 0x0, 0x9}, 0x6000000, 0x290, 0x2d8, 0x0, {0x0, 0x28e}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff, 0xffffff00], @ipv4=@private=0xa010102, [0xff, 0xffffffff, 0xff000000], @ipv4=@broadcast, [0xff, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x1000, 0x4, 0x77, 0x4e23, 0x4e21, 0x4e20, 0x4e23, 0x140, 0x280}, 0x180, 0x3006, 0x4e20, 0x4e22, 0x4e22, 0x4e21}}, @common=@unspec=@comment={{0x120}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'dvmrp0\x00'}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff000000], 'veth0_to_bridge\x00', 'nicvf0\x00', {}, {0xff}, 0x1, 0x8, 0x4, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa, 0x6, 0x10000, 'pptp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0x4}]}, 0x1c}}, 0x4000) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x802, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRES32=r7]) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @multicast1}, &(0x7f0000000280)=0xc) 24.932065687s ago: executing program 0 (id=2931): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000003f49df5477e990620000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 20.88236431s ago: executing program 3 (id=2940): socket$inet6_udp(0xa, 0x2, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 20.575596793s ago: executing program 3 (id=2942): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) poll(&(0x7f0000000100)=[{r1, 0x14}], 0x1, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRES16=r0], 0x48) r3 = socket$netlink(0x10, 0x3, 0x9) fcntl$setstatus(r3, 0x4, 0x2000) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f4}}, 0x28}}, 0x0) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x88) mknodat$null(r4, &(0x7f0000000200)='./file0\x00', 0x40, 0x103) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0xc17a) fstat(r5, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x2, 0x9, 0x2, 0x80000000}, 0x2b4, 0x4, 'id0\x00', 'timer0\x00', 0x0, 0x4, 0x8, 0x10001, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000001100850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="e4e32dd2b696733552eca3e954943a18709f72fbd259010c0000000000001823f4a0c47bff45323c2b30982dfc67b46cc9a5a07833fc29689dc3b90aa9be70dcf4bbaa2650b6e7e583", 0x49}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[], 0x60, 0x24040804}], 0x1, 0x2400c0d1) recvmmsg(r6, &(0x7f0000008c40)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/181, 0xb5}], 0x2}}], 0x1, 0x0, 0x0) 19.59813994s ago: executing program 3 (id=2944): r0 = socket(0x1000000010, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x58, 0x60, 0xdd, 0x40, 0x5da, 0xa3, 0x9d36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x5c, 0x0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x3, 0xe4, 0xe5, 0x61, 0x0, [], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x81, 0xff, 0x7}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x5, 0x3, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x7, 0x4, 0x10}}]}}]}}]}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000006e00)=[{{&(0x7f0000000b40)={0xa, 0x4e27, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00\x00'], 0x248}}], 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x201, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0x8}, {0x9, 0x3}, {0x9, 0xd}}}, 0x24}}, 0x40040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r5, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x80, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0xfffc, 0x0, 0x0, {}, 0x5e, 0x0}}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000140)=0x7) r9 = dup(r7) write$UHID_INPUT(r9, &(0x7f0000002740)={0x1a, {"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", 0x1000}}, 0xd8b) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@bloom_filter={0x1e, 0x4, 0x0, 0x80000000, 0x8140, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xf, @value=r9, @void, @void, @value}, 0x50) 14.980687023s ago: executing program 3 (id=2951): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x6, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) 13.475079382s ago: executing program 3 (id=2953): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000280)="22067fba3c8ffbbcaed6dd826127f868581329bc017d0f31b074212feb5f8fa1110bd1435c9047f2983e7e2da79813ba8b1384aed3da30228011", 0x3a}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="2000006503efb24200000000000000008000000080a189"], 0x38, 0x8040}], 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x4) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00004324e8ed206f53292b2464c52268e610"]) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f000000c1c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000020000000900030073797a3100000000a17bad1403048328500ad2df86f24d058dd90855c8d1a527216d69834a5308adfd2a311a855b9d67e67c52b5ec453772fa6be2ee18a23a0b9fa11b99f874f624bd7f4b3459aac363bfb4fb6d53062df029de07edbb5763ef27573241bb3d1289bd7896840ef1"], 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r4, 0x40047451, 0x2000000a) ioctl$TUNSETOFFLOAD(r4, 0x40047451, 0x20000015) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="005c001280110001005fa25cc09ee8e05d6db7beb5736c61766500000000eb000537285645000000"], 0x7c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x40041}, 0x24000004) 12.688494533s ago: executing program 3 (id=2955): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x13, 0x8, 0x3, 0x0, 0x2800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002180)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@remote, @in6=@mcast2}, {@in6=@private1, 0x0, 0x32}, @in6=@private2, {}, {0x0, 0x0, 0xfffffffffffffffc, 0x200000000}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd2b, 0x70bd25, 0x70bd25, 0x1}}]}, 0x154}}, 0x0) 5.077083448s ago: executing program 1 (id=2979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/219, 0x4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, &(0x7f0000000040)=""/213, 0xd5, 0x0) 5.032466336s ago: executing program 2 (id=2980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff7c, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x7180, &(0x7f0000000480)={0x0, 0x800e7b3, 0x1, 0x0, 0xe3}, &(0x7f0000000d00), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x400b00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='ex;De\x00'/18, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0) readv(r8, 0x0, 0x0) 4.626196772s ago: executing program 1 (id=2981): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 4.491713596s ago: executing program 1 (id=2982): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x7, 0x8, [@multicast2]}, @ssrr={0x89, 0x3, 0xd7}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0xc000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000300)={r3, 0x3, {0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x1, 0x1e, 0x1d, "860e595ac21806fb9a51a7d8fdece168205e070b203cff3937791fb4bdc9531b4bdae76c3309b7d8bd06c9eaca2d4aa314ea069306e1075cbe3e1afe8e0b899e", "94ee74a5e45bcf1a2618ba49fe44a04b659c82cfc315037ab40278e093f2ea17dd63fc34def9e8a3ab066f686a177b3f06015e89c65c5bcda5f0d0b33f0c9f59", "9d64aad425836fa3ac2a8402cf582e99c508158dbf2d972ea3c9ef8ca98f499b", [0x9, 0x5]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x1, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x8c, 0x0, 0xff, 0xa, 0x0, 0x9, 0x2}}, {0x0, 0x2, [0x5, 0x3, 0xaa, 0x9, 0x3fe0]}}, {{0x0, 0x1, {0x6b, 0x92, 0x1, 0xd96, 0x2, 0x6, 0x8}}, {0x0, 0x2, [0x5]}}]}]}, 0x30}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 4.279853666s ago: executing program 5 (id=2983): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0x7, 0x2}, {0x5, 0x1}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x2e, 0x0]}}, &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x1, 0xfffffffb, 0x0, @void, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000004000002000000000000090000000006001500040000001400168004000880"], 0x38}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r1 = semget$private(0x0, 0x1, 0x24c) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000004c0)=[0x597, 0xdec, 0x800, 0x3, 0x8, 0x775e, 0xecc0]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x3) io_setup(0x3, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@mcast2, @in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0xf0, 0xa, 0xa}]}]}, 0xa0}}, 0x2004c010) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x840) 4.205121017s ago: executing program 1 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40008893) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r5, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x12}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x8012, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x12, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}, 0xfdef) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x2d8, 0x168, 0x9, 0x0, 0xb, 0x3e8, 0x250, 0x250, 0x3e8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0x7f00007f], [], 'batadv_slave_1\x00', 'sit0\x00', {}, {}, 0x6, 0x0, 0x0, 0x9}, 0x6000000, 0x290, 0x2d8, 0x0, {0x0, 0x28e}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff, 0xffffff00], @ipv4=@private=0xa010102, [0xff, 0xffffffff, 0xff000000], @ipv4=@broadcast, [0xff, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x1000, 0x4, 0x77, 0x4e23, 0x4e21, 0x4e20, 0x4e23, 0x140, 0x280}, 0x180, 0x3006, 0x4e20, 0x4e22, 0x4e22, 0x4e21}}, @common=@unspec=@comment={{0x120}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'dvmrp0\x00'}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff000000], 'veth0_to_bridge\x00', 'nicvf0\x00', {}, {0xff}, 0x1, 0x8, 0x4, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa, 0x6, 0x10000, 'pptp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0x4}]}, 0x1c}}, 0x4000) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @multicast1}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newneigh={0x6c, 0x1c, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, r7, 0x8, 0x14, 0x5}, [@NDA_PROBES={0x8, 0x4, 0x1ff}, @NDA_CACHEINFO={0x14, 0x3, {0x9, 0xd26, 0x7, 0x8}}, @NDA_PROBES={0x8, 0x4, 0x6}, @NDA_FLAGS_EXT={0x8}, @NDA_NH_ID={0x8, 0xd, 0xc}, @NDA_FLAGS_EXT={0x8}, @NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xcf}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 4.030088894s ago: executing program 2 (id=2985): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0xd347, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d83f000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x8000) 3.888038078s ago: executing program 2 (id=2986): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x3, 0x2f, 0x0, @rand_addr, @broadcast}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x707080, 0x41, 0x3a}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0xfffffffb, 0x1fffc, 0x3ff, 0x9, 0xf72, 0xb, 0x10, 0xcb0b}}) r5 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="12000000070000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'vlan0\x00', &(0x7f0000000340)=@ethtool_channels={0x3d, 0xfff, 0x9, 0xffffff81, 0x5e, 0xbb05, 0x7, 0x7fff, 0x8}}) fspick(r0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000001280)={0x0, 0x1000, "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"}, &(0x7f0000000280)=0x1008) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={r6, @in={{0x2, 0x4e20, @remote}}, [0x0, 0x5, 0x4, 0x6, 0x1, 0x100000001, 0x9, 0xf, 0x8000000000000001, 0x7f8e, 0x658d, 0x0, 0x8, 0xa]}, &(0x7f0000000300)=0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='G\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x8000) 3.262542021s ago: executing program 1 (id=2987): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1200653d00010000004909040004c59c8841b59ac2b6bb62b2e19cc64fdba630a0ad363290ca105ff5c493e9ed6b4538514abe3e56eba80d7e2d161422350dbb682f6ff3baa01cf3c6fee7595b1211b12bc826170da33413a9a956a1fe90ed97554fe99c24e407919e90e0e8903ab8ec6ad22b35957270ab0a4f4982777e2f7b3ab0f3169bc640c2e63df2d147d382bf86092472ceaed18b3668"], 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c4c0), 0x0, 0x20000000) 3.199439888s ago: executing program 2 (id=2988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) shmget$private(0x0, 0x9000, 0x10, &(0x7f0000ff7000/0x9000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0xf8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000b0000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000800003000000009f9dd60000", @ANYRES32=r6], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r7, &(0x7f0000000180), 0x0}, 0x20) (fail_nth: 1) 3.145524725s ago: executing program 5 (id=2989): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4420000649ad7bd15f649a5ae8e268c94e072457a2142c7e81aad76a0cac657ae21d69371939f72ae016955f0793e7f8e6c9183c89016440e980b90a7f6325302c1253f3081fcb17d10cc71ca7c7d0e7182827712ec9196d5dea057841778e080d4548f55f7c61cad68efadd23db4e1d56f587f85071c037332bdb14052040b745f3dd43e83379a77e487f2e67788a7e1c5a49c4eb5c594157142878d386", @ANYRESDEC=r2, @ANYBLOB="01002dbd7000fbdbdf250700000030000180060005004e230000060001000a00000008000700", @ANYRES16=r1, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40094}, 0x20000800) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @private2, 0x3}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) 2.624008804s ago: executing program 5 (id=2990): ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x57e, 0x537cf5abd76d56d2, 0x4, 0x0, 0x80000001, {0x77359400}, {0x5, 0x8, 0x7, 0x3, 0x5, 0x9, "0e7f9d62"}, 0x5, 0x4, {}, 0x9, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r9, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000001c0)={0x40, 0x0, 0x2}, 0x18) 1.508628916s ago: executing program 2 (id=2991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/219, 0x4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, &(0x7f0000000040)=""/213, 0xd5, 0x0) 1.425139332s ago: executing program 5 (id=2992): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.104125414s ago: executing program 2 (id=2993): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = epoll_create(0x6) r2 = socket$inet6(0xa, 0x3, 0x2f) getsockopt$inet6_buf(r2, 0x29, 0xca, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x5}) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xac, 0x9b, 0xcc, 0x20, 0x18d1, 0x1eaf, 0x5abb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x0, 0x80, 0xb, [{{0x9, 0x4, 0xbb, 0x6, 0x2, 0x3a, 0xe5, 0x4, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x5, 0x0, 0xce}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x75, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000a00)={0x40, 0xd, 0x2, "def0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x16) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r5, 0xdededede}) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 832.033166ms ago: executing program 5 (id=2994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0xaa, 0x4048814, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x6a, &(0x7f0000000500)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "166e70", 0x30, 0x3a, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0xd, 0x6, "422aab", 0x2, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r5, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r7, 0x1, 0x700, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB], 0x24}}, 0x20000001) 753.843668ms ago: executing program 5 (id=2995): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="62bd5ce5f0a52b2298180732dee2660fc8000000000039bf1a37862ceb567ba9f3e240c08f559d21d05aebe8d3eaaed411", 0x31}, {&(0x7f0000000540)}], 0x3}}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "a05c7b5d00008023e9c5bcf5ff7700"}) r3 = syz_open_pts(0xffffffffffffffff, 0x107282) r4 = dup3(r3, r2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x15b10c8e, 0x51cc, 0x10001, 0xce38, 0x1b, "06f2b484f5d4adf49d20ff5c0dcd4f119ddec2"}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) close_range(r6, r5, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x3, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xff, 0x0, 0x9, 0x10, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x0, 0x615, 0x3, 0x7, 0x71, 0xfe, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002040)=ANY=[@ANYBLOB="61128c00000000006113580000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f750000000000006154000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aecacc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601950777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00004000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a6650da54b5cc0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec826da90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92ce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830000000000000000000000000000000589ae9d06aeb20d99e371429b1cebccd2ce89fce33c40ebb061085815bb583ad459dc29b7b15429e741f43de1207b78b375c20e6cc8a2ebe7ee4c644559cdc6ece7f1b927e14e811a78eabc9fed1574d21232a8e2d2508"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80015b11, 0x0) 675.156057ms ago: executing program 0 (id=2931): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000003f49df5477e990620000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 379.685227ms ago: executing program 0 (id=2996): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x80000000, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x85d9, 0xe, 0x4, 0x11b7, 0x8, "01f818517dac62e78ac94efaac7fb7da83bf44"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000007c0)={{r2}, "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"}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000100) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c03, 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x4008af14, &(0x7f0000000280)) timer_create(0x3, 0x0, &(0x7f0000000780)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) r7 = syz_usbip_server_init(0x4) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000)) ioctl$KDSIGACCEPT(r3, 0x5607, 0x3d) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRESHEX=r3, @ANYRES32=r7], 0x26) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 0s ago: executing program 1 (id=2997): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000f40)={0x8, 0x120, 0xfa00, {0x2, {0x5, 0x9, "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", 0x6, 0x8, 0xcd, 0x1, 0x9, 0x5, 0x1}}}, 0x128) recvmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000180)=""/111, 0x6f}], 0x3, &(0x7f0000000240)=""/18, 0x12}, 0x9}], 0x1, 0x300, 0x0) epoll_create1(0x80000) (async) r2 = epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) setpgid(r4, r4) (async) setpgid(r4, r4) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) write$cgroup_int(r3, &(0x7f0000000000)=0x722, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000000)=0x722, 0x12) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xb0000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xb0000000}) kernel console output (not intermixed with test programs): using dummy_hcd [ 707.838346][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 707.852984][T13519] virt_wifi0 speed is unknown, defaulting to 1000 [ 707.866391][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.626288][ T5881] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 708.635635][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.653493][ T5881] usb 5-1: Product: syz [ 708.663512][ T5881] usb 5-1: Manufacturer: syz [ 708.683465][ T5881] usb 5-1: SerialNumber: syz [ 708.701883][ T5881] usb 5-1: config 0 descriptor?? [ 708.838834][T13545] program syz.3.2518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.019193][ T5881] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 709.069563][T13547] netlink: 'syz.0.2517': attribute type 5 has an invalid length. [ 709.168302][T13530] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 709.327687][ T5828] usb 5-1: USB disconnect, device number 18 [ 712.086869][T13025] IPVS: starting estimator thread 0... [ 712.200652][T13578] fuse: Bad value for 'fd' [ 712.863677][T13576] IPVS: using max 31 ests per chain, 74400 per kthread [ 713.430935][T13585] ubi0: attaching mtd0 [ 713.646301][T13585] ubi0: scanning is finished [ 714.330489][T13585] ubi0: empty MTD device detected [ 714.900694][T13592] netlink: 'syz.1.2532': attribute type 5 has an invalid length. [ 715.092819][T13585] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 716.505334][T13609] FAULT_INJECTION: forcing a failure. [ 716.505334][T13609] name failslab, interval 1, probability 0, space 0, times 0 [ 716.519425][T13609] CPU: 1 UID: 0 PID: 13609 Comm: syz.4.2536 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 716.519445][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 716.519455][T13609] Call Trace: [ 716.519460][T13609] [ 716.519467][T13609] dump_stack_lvl+0x241/0x360 [ 716.519496][T13609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.519521][T13609] ? __pfx__printk+0x10/0x10 [ 716.519550][T13609] ? __kmalloc_noprof+0xb5/0x4c0 [ 716.519571][T13609] ? __pfx___might_resched+0x10/0x10 [ 716.519587][T13609] ? vb2_core_reqbufs+0x8f2/0x17c0 [ 716.519606][T13609] should_fail_ex+0x40a/0x550 [ 716.519626][T13609] should_failslab+0xac/0x100 [ 716.519645][T13609] __kmalloc_noprof+0xdd/0x4c0 [ 716.519663][T13609] ? vb2_core_reqbufs+0x953/0x17c0 [ 716.519693][T13609] vb2_core_reqbufs+0x953/0x17c0 [ 716.519719][T13609] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 716.519746][T13609] v4l2_m2m_ioctl_reqbufs+0x14b/0x230 [ 716.519773][T13609] __video_do_ioctl+0xc23/0xdd0 [ 716.519794][T13609] ? __pfx___video_do_ioctl+0x10/0x10 [ 716.519807][T13609] ? smack_log+0x10d/0x5c0 [ 716.519834][T13609] ? __might_fault+0xaa/0x120 [ 716.519858][T13609] video_usercopy+0x89b/0x1180 [ 716.519876][T13609] ? __pfx___video_do_ioctl+0x10/0x10 [ 716.519889][T13609] ? __pfx_video_usercopy+0x10/0x10 [ 716.519901][T13609] ? smack_file_ioctl+0x2f7/0x3a0 [ 716.519923][T13609] ? __fget_files+0x2a/0x410 [ 716.519942][T13609] ? __fget_files+0x2a/0x410 [ 716.519959][T13609] v4l2_ioctl+0x189/0x1e0 [ 716.519978][T13609] ? __pfx_v4l2_ioctl+0x10/0x10 [ 716.519998][T13609] __se_sys_ioctl+0xf5/0x170 [ 716.520019][T13609] do_syscall_64+0xf3/0x230 [ 716.520036][T13609] ? clear_bhb_loop+0x35/0x90 [ 716.520056][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.520073][T13609] RIP: 0033:0x7f4b14f8cda9 [ 716.520084][T13609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.520095][T13609] RSP: 002b:00007f4b15ded038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.520108][T13609] RAX: ffffffffffffffda RBX: 00007f4b151a5fa0 RCX: 00007f4b14f8cda9 [ 716.520117][T13609] RDX: 0000000020000200 RSI: 00000000c0145608 RDI: 0000000000000009 [ 716.520125][T13609] RBP: 00007f4b15ded090 R08: 0000000000000000 R09: 0000000000000000 [ 716.520133][T13609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.520140][T13609] R13: 0000000000000000 R14: 00007f4b151a5fa0 R15: 00007fff22769688 [ 716.520158][T13609] [ 718.157334][T13622] FAULT_INJECTION: forcing a failure. [ 718.157334][T13622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.203819][T13622] CPU: 0 UID: 0 PID: 13622 Comm: syz.3.2540 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 718.203845][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 718.203856][T13622] Call Trace: [ 718.203862][T13622] [ 718.203870][T13622] dump_stack_lvl+0x241/0x360 [ 718.203915][T13622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.203944][T13622] ? __pfx__printk+0x10/0x10 [ 718.203976][T13622] ? snprintf+0xda/0x120 [ 718.203996][T13622] should_fail_ex+0x40a/0x550 [ 718.204020][T13622] _copy_to_user+0x31/0xb0 [ 718.204040][T13622] simple_read_from_buffer+0xca/0x150 [ 718.204065][T13622] proc_fail_nth_read+0x1e9/0x250 [ 718.204089][T13622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.204113][T13622] ? rw_verify_area+0x243/0x630 [ 718.204140][T13622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.204163][T13622] vfs_read+0x1f8/0xb40 [ 718.204192][T13622] ? fdget_pos+0x254/0x320 [ 718.204216][T13622] ? __pfx___mutex_lock+0x10/0x10 [ 718.204240][T13622] ? __pfx_vfs_read+0x10/0x10 [ 718.204264][T13622] ? do_sys_openat2+0x17a/0x1d0 [ 718.204290][T13622] ? __fget_files+0x2a/0x410 [ 718.204314][T13622] ? __fget_files+0x395/0x410 [ 718.204335][T13622] ? __fget_files+0x2a/0x410 [ 718.204365][T13622] ksys_read+0x18f/0x2b0 [ 718.204394][T13622] ? __pfx_ksys_read+0x10/0x10 [ 718.204421][T13622] ? do_syscall_64+0x100/0x230 [ 718.204446][T13622] ? do_syscall_64+0xb6/0x230 [ 718.204471][T13622] do_syscall_64+0xf3/0x230 [ 718.204494][T13622] ? clear_bhb_loop+0x35/0x90 [ 718.204522][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.204546][T13622] RIP: 0033:0x7f9ce378b7bc [ 718.204562][T13622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 718.204577][T13622] RSP: 002b:00007f9ce4641030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.204596][T13622] RAX: ffffffffffffffda RBX: 00007f9ce39a5fa0 RCX: 00007f9ce378b7bc [ 718.204608][T13622] RDX: 000000000000000f RSI: 00007f9ce46410a0 RDI: 0000000000000004 [ 718.204620][T13622] RBP: 00007f9ce4641090 R08: 0000000000000000 R09: 0000000000000000 [ 718.204630][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.204640][T13622] R13: 0000000000000000 R14: 00007f9ce39a5fa0 R15: 00007ffcd83101f8 [ 718.204666][T13622] [ 718.679380][T13629] program syz.4.2542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 719.928699][ T5881] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 720.215035][ T5881] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 720.223336][ T5881] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 720.253204][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 720.292066][ T5881] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 720.326122][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 720.357874][ T5881] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 720.376596][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.400318][ T5881] usb 4-1: Product: syz [ 720.409720][ T5881] usb 4-1: Manufacturer: syz [ 720.430406][ T5881] usb 4-1: SerialNumber: syz [ 720.449658][ T5881] usb 4-1: config 0 descriptor?? [ 720.463296][T13632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 720.681875][T13653] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 721.667416][ T5881] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 721.678535][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 721.689557][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 721.698880][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 721.731372][ T5881] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 721.780763][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 721.814187][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 722.003350][ T5881] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 722.012215][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 722.021815][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 722.030353][ T5881] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 722.039470][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 722.047778][ T5881] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 722.063573][ T5881] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 722.093745][ T5881] usb 4-1: USB disconnect, device number 24 [ 722.114577][ T5881] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 722.922553][ T5881] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 722.936870][ T5881] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 722.950958][ T5881] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 723.112074][ T5881] keyspan 4-1:0.0: device disconnected [ 724.722602][T13685] 9pnet_fd: Insufficient options for proto=fd [ 728.524944][T13713] sctp: failed to load transform for md5: -2 [ 728.582027][T13730] usb usb1: usbfs: process 13730 (syz.3.2569) did not claim interface 0 before use [ 729.207454][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2570'. [ 729.246505][T13736] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 730.073651][ T5909] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 730.346440][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.385185][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.392192][T12329] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 730.403618][ T5881] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 730.441357][ T5909] usb 5-1: config 1 has no interface number 0 [ 730.496786][ T5909] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.546370][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.562416][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.570676][ T5909] usb 5-1: Product: syz [ 730.575040][ T5909] usb 5-1: Manufacturer: syz [ 730.580003][ T5909] usb 5-1: SerialNumber: syz [ 730.584211][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 730.589989][T12329] usb 4-1: Using ep0 maxpacket: 8 [ 730.600581][T12329] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 730.604461][ T5909] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 730.613742][T12329] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 730.613880][ T5881] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.637908][T12329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 730.643580][ T5909] cdc_ncm 5-1:1.1: bind() failure [ 730.655755][T12329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 730.666411][ T5881] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 730.677983][T12329] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.691242][ T5881] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 730.704673][T12329] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 730.723494][T12329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.731817][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 730.748691][ T5881] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 730.768303][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.794817][ T5881] usb 3-1: config 0 descriptor?? [ 731.708296][T12329] usb 4-1: usb_control_msg returned -32 [ 731.719933][ T5881] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 731.731708][T12329] usbtmc 4-1:16.0: can't read capabilities [ 731.829425][T13764] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 731.844593][T13758] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 731.853971][T13758] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2573'. [ 731.918695][ T5881] corsair-cpro 0003:1B1C:0C10.000A: probe with driver corsair-cpro failed with error -71 [ 731.932388][ T5881] usb 3-1: USB disconnect, device number 11 [ 732.196667][ T5828] usb 5-1: USB disconnect, device number 19 [ 732.441099][T13770] 9pnet_fd: Insufficient options for proto=fd [ 733.260074][ T5828] usb 4-1: USB disconnect, device number 25 [ 733.949464][T13775] bridge_slave_0: left allmulticast mode [ 733.959490][T13775] bridge_slave_0: left promiscuous mode [ 733.971979][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.533395][T13775] bridge_slave_1: left allmulticast mode [ 734.549531][T13775] bridge_slave_1: left promiscuous mode [ 734.587416][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.734671][T13775] bond0: (slave bond_slave_0): Releasing backup interface [ 734.768066][T13775] bond0: (slave bond_slave_1): Releasing backup interface [ 734.840400][T13794] fuse: Bad value for 'fd' [ 735.665304][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.672777][T13775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.750022][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.773350][T13775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.154591][T13822] Process accounting resumed [ 737.564268][T13828] program syz.4.2596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 738.509062][T13830] usb usb1: usbfs: process 13830 (syz.3.2598) did not claim interface 0 before use [ 739.205859][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2600'. [ 739.808100][T13870] FAULT_INJECTION: forcing a failure. [ 739.808100][T13870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.821785][T13870] CPU: 1 UID: 0 PID: 13870 Comm: syz.4.2610 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 739.821810][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 739.821822][T13870] Call Trace: [ 739.821828][T13870] [ 739.821836][T13870] dump_stack_lvl+0x241/0x360 [ 739.821872][T13870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.821901][T13870] ? __pfx__printk+0x10/0x10 [ 739.821934][T13870] ? snprintf+0xda/0x120 [ 739.821954][T13870] should_fail_ex+0x40a/0x550 [ 739.821978][T13870] _copy_to_user+0x31/0xb0 [ 739.821998][T13870] simple_read_from_buffer+0xca/0x150 [ 739.822022][T13870] proc_fail_nth_read+0x1e9/0x250 [ 739.822046][T13870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.822070][T13870] ? rw_verify_area+0x243/0x630 [ 739.822097][T13870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.822120][T13870] vfs_read+0x1f8/0xb40 [ 739.822149][T13870] ? fdget_pos+0x254/0x320 [ 739.822173][T13870] ? __pfx___mutex_lock+0x10/0x10 [ 739.822198][T13870] ? __pfx_vfs_read+0x10/0x10 [ 739.822228][T13870] ? __fget_files+0x2a/0x410 [ 739.822253][T13870] ? __fget_files+0x395/0x410 [ 739.822283][T13870] ? __fget_files+0x2a/0x410 [ 739.822314][T13870] ksys_read+0x18f/0x2b0 [ 739.822344][T13870] ? __pfx_ksys_read+0x10/0x10 [ 739.822372][T13870] ? do_syscall_64+0x100/0x230 [ 739.822399][T13870] ? do_syscall_64+0xb6/0x230 [ 739.822425][T13870] do_syscall_64+0xf3/0x230 [ 739.822448][T13870] ? clear_bhb_loop+0x35/0x90 [ 739.822476][T13870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.822500][T13870] RIP: 0033:0x7f4b14f8b7bc [ 739.822516][T13870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 739.822532][T13870] RSP: 002b:00007f4b15ded030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.822551][T13870] RAX: ffffffffffffffda RBX: 00007f4b151a5fa0 RCX: 00007f4b14f8b7bc [ 739.822565][T13870] RDX: 000000000000000f RSI: 00007f4b15ded0a0 RDI: 0000000000000004 [ 739.822576][T13870] RBP: 00007f4b15ded090 R08: 0000000000000000 R09: 0000000000000000 [ 739.822587][T13870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.822597][T13870] R13: 0000000000000000 R14: 00007f4b151a5fa0 R15: 00007fff22769688 [ 739.822624][T13870] [ 740.073590][ T5909] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 740.235120][ T5909] usb 3-1: config 1 interface 0 altsetting 252 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 740.246697][ T5909] usb 3-1: config 1 interface 0 altsetting 252 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 740.257581][ T5909] usb 3-1: config 1 interface 0 altsetting 252 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 740.270744][ T5909] usb 3-1: config 1 interface 0 has no altsetting 0 [ 740.280351][ T5909] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 740.290906][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 740.303760][ T5909] usb 3-1: SerialNumber: syz [ 740.331774][T13834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.364564][T13878] usb usb1: usbfs: process 13878 (syz.4.2613) did not claim interface 0 before use [ 740.452965][T13834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 741.854576][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.863094][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.038797][ T5909] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 743.050139][ T5909] usb 3-1: USB disconnect, device number 12 [ 743.124568][T13898] netlink: 'syz.0.2617': attribute type 1 has an invalid length. [ 743.223963][ T5881] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 743.405349][ T5881] usb 5-1: config index 0 descriptor too short (expected 32531, got 36) [ 743.451512][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.533187][ T5881] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 743.564472][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 743.593770][ T5881] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 743.608856][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.739824][T13912] FAULT_INJECTION: forcing a failure. [ 743.739824][T13912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.752985][T13912] CPU: 0 UID: 0 PID: 13912 Comm: syz.3.2619 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 743.753004][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 743.753012][T13912] Call Trace: [ 743.753018][T13912] [ 743.753025][T13912] dump_stack_lvl+0x241/0x360 [ 743.753052][T13912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.753073][T13912] ? __pfx__printk+0x10/0x10 [ 743.753094][T13912] ? __pfx_lock_release+0x10/0x10 [ 743.753117][T13912] should_fail_ex+0x40a/0x550 [ 743.753135][T13912] _copy_from_iter+0x1e9/0x1c20 [ 743.753156][T13912] ? __virt_addr_valid+0x183/0x530 [ 743.753181][T13912] ? __alloc_skb+0x28f/0x440 [ 743.753199][T13912] ? __pfx__copy_from_iter+0x10/0x10 [ 743.753220][T13912] ? __virt_addr_valid+0x183/0x530 [ 743.753238][T13912] ? __virt_addr_valid+0x183/0x530 [ 743.753255][T13912] ? __virt_addr_valid+0x45f/0x530 [ 743.753274][T13912] ? __phys_addr_symbol+0x2f/0x70 [ 743.753292][T13912] ? __check_object_size+0x47a/0x730 [ 743.753311][T13912] netlink_sendmsg+0x73d/0xcb0 [ 743.753340][T13912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.753368][T13912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.753394][T13912] __sock_sendmsg+0x221/0x270 [ 743.753421][T13912] ____sys_sendmsg+0x52a/0x7e0 [ 743.753461][T13912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 743.753482][T13912] ? __fget_files+0x2a/0x410 [ 743.753501][T13912] ? __fget_files+0x2a/0x410 [ 743.753523][T13912] __sys_sendmsg+0x269/0x350 [ 743.753547][T13912] ? __pfx___sys_sendmsg+0x10/0x10 [ 743.753575][T13912] ? do_sys_openat2+0x17a/0x1d0 [ 743.753608][T13912] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 743.753627][T13912] ? do_syscall_64+0x100/0x230 [ 743.753646][T13912] ? do_syscall_64+0xb6/0x230 [ 743.753666][T13912] do_syscall_64+0xf3/0x230 [ 743.753683][T13912] ? clear_bhb_loop+0x35/0x90 [ 743.753705][T13912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.753726][T13912] RIP: 0033:0x7f9ce378cda9 [ 743.753738][T13912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.753750][T13912] RSP: 002b:00007f9ce4620038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.753765][T13912] RAX: ffffffffffffffda RBX: 00007f9ce39a6080 RCX: 00007f9ce378cda9 [ 743.753775][T13912] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000b [ 743.753783][T13912] RBP: 00007f9ce4620090 R08: 0000000000000000 R09: 0000000000000000 [ 743.753792][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.753800][T13912] R13: 0000000000000000 R14: 00007f9ce39a6080 R15: 00007ffcd83101f8 [ 743.753818][T13912] [ 744.255602][ T5881] usb 5-1: config 0 descriptor?? [ 744.370432][ T5881] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 745.682240][T13931] dvmrp1: entered allmulticast mode [ 745.723654][ T5881] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 745.909133][ T5881] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 745.945920][ T5881] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 745.969130][ T5881] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 746.000880][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.023229][T13923] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 746.034455][ T5881] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 746.290848][T13920] 9pnet_virtio: no channels available for device [ 746.449983][ T5881] usb 3-1: USB disconnect, device number 13 [ 746.784205][ T5881] usb 5-1: USB disconnect, device number 20 [ 747.264241][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.270698][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.253608][ T5909] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 750.494560][T13979] usb usb1: usbfs: process 13979 (syz.3.2640) did not claim interface 0 before use [ 750.612426][ T5909] usb 5-1: config 12 has an invalid interface number: 94 but max is 0 [ 750.663063][ T5909] usb 5-1: config 12 has no interface number 0 [ 750.725850][ T5909] usb 5-1: config 12 interface 94 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 750.810013][ T5909] usb 5-1: New USB device found, idVendor=0e8d, idProduct=7101, bcdDevice=9b.20 [ 750.861114][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.947844][ T5909] usb 5-1: Product: syz [ 750.985060][ T5909] usb 5-1: Manufacturer: syz [ 750.989728][ T5909] usb 5-1: SerialNumber: syz [ 751.005251][ T5909] option 5-1:12.94: GSM modem (1-port) converter detected [ 751.227386][ T29] audit: type=1326 audit(1738448318.277:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13988 comm="syz.0.2646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d9df8cda9 code=0x0 [ 752.520682][T14009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2650'. [ 752.550504][T14009] FAULT_INJECTION: forcing a failure. [ 752.550504][T14009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.567353][T14009] CPU: 0 UID: 0 PID: 14009 Comm: syz.2.2650 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 752.567382][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 752.567394][T14009] Call Trace: [ 752.567402][T14009] [ 752.567411][T14009] dump_stack_lvl+0x241/0x360 [ 752.567452][T14009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.567485][T14009] ? __pfx__printk+0x10/0x10 [ 752.567519][T14009] ? __pfx_lock_release+0x10/0x10 [ 752.567545][T14009] ? __lock_acquire+0x1397/0x2100 [ 752.567579][T14009] should_fail_ex+0x40a/0x550 [ 752.567607][T14009] _copy_from_user+0x2d/0xb0 [ 752.567628][T14009] kstrtouint_from_user+0xc6/0x190 [ 752.567659][T14009] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 752.567691][T14009] ? __pfx_lock_acquire+0x10/0x10 [ 752.567728][T14009] proc_fail_nth_write+0xaa/0x2d0 [ 752.567753][T14009] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 752.567775][T14009] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 752.567806][T14009] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 752.567832][T14009] vfs_write+0x29f/0xd10 [ 752.567866][T14009] ? fdget_pos+0x254/0x320 [ 752.567892][T14009] ? __mutex_unlock_slowpath+0x227/0x800 [ 752.567924][T14009] ? __pfx_vfs_write+0x10/0x10 [ 752.567952][T14009] ? do_sys_openat2+0x17a/0x1d0 [ 752.567983][T14009] ? __fget_files+0x2a/0x410 [ 752.568011][T14009] ? __fget_files+0x395/0x410 [ 752.568036][T14009] ? __fget_files+0x2a/0x410 [ 752.568080][T14009] ksys_write+0x18f/0x2b0 [ 752.568116][T14009] ? __pfx_ksys_write+0x10/0x10 [ 752.568149][T14009] ? do_syscall_64+0x100/0x230 [ 752.568179][T14009] ? do_syscall_64+0xb6/0x230 [ 752.568210][T14009] do_syscall_64+0xf3/0x230 [ 752.568236][T14009] ? clear_bhb_loop+0x35/0x90 [ 752.568269][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.568300][T14009] RIP: 0033:0x7f918198b85f [ 752.568318][T14009] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 752.568335][T14009] RSP: 002b:00007f91827fb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 752.568357][T14009] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f918198b85f [ 752.568372][T14009] RDX: 0000000000000001 RSI: 00007f91827fb0a0 RDI: 0000000000000006 [ 752.568385][T14009] RBP: 00007f91827fb090 R08: 0000000000000000 R09: 0000000000000000 [ 752.568397][T14009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 752.568409][T14009] R13: 0000000000000000 R14: 00007f9181ba5fa0 R15: 00007ffd417b7488 [ 752.568440][T14009] [ 753.502488][ T5909] usb 5-1: USB disconnect, device number 21 [ 753.514696][ T5909] option 5-1:12.94: device disconnected [ 753.535778][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2659'. [ 753.567158][T14036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.056159][T14057] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2665'. [ 754.079918][T14057] ip6gre0: entered promiscuous mode [ 754.963485][ T29] audit: type=1326 audit(1738448322.007:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14081 comm="syz.1.2674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff82898cda9 code=0x0 [ 755.002611][T14083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2673'. [ 755.015418][T14083] bond0: option resend_igmp: invalid value (1811939331) [ 755.032569][T14083] bond0: option resend_igmp: allowed values 0 - 255 [ 755.150869][T14079] virt_wifi0 speed is unknown, defaulting to 1000 [ 755.362123][T14094] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2676'. [ 755.372751][T14094] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 755.380969][T14094] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2676'. [ 755.892079][T14098] bio_check_eod: 2 callbacks suppressed [ 755.892092][T14098] syz.3.2678: attempt to access beyond end of device [ 755.892092][T14098] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 756.096868][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2680'. [ 756.543611][ T5880] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 758.566121][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 758.579413][ T5880] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 758.729667][T14128] netlink: 'syz.1.2685': attribute type 3 has an invalid length. [ 758.761213][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.893493][ T5880] usb 5-1: Product: syz [ 758.897835][ T5880] usb 5-1: Manufacturer: syz [ 758.902457][ T5880] usb 5-1: SerialNumber: syz [ 758.918865][ T5880] usb 5-1: config 0 descriptor?? [ 758.931432][ T5880] pvrusb2: Hardware description: Terratec Grabster AV400 [ 759.013355][ T5880] pvrusb2: ********** [ 759.062797][ T5880] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 759.479499][ T5880] pvrusb2: Important functionality might not be entirely working. [ 759.492760][T14139] ip6gretap0: entered promiscuous mode [ 759.509863][ T5880] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 759.540219][ T5880] pvrusb2: ********** [ 759.545246][T14133] tmpfs: Bad value for 'mpol' [ 759.566058][T14139] ip6gretap0: left promiscuous mode [ 759.574025][ T2339] pvrusb2: Invalid write control endpoint [ 759.733064][ T2339] pvrusb2: Invalid write control endpoint [ 759.752658][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 759.782255][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 759.805197][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 759.833512][ T2339] pvrusb2: Device being rendered inoperable [ 759.843911][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 759.869143][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 759.913660][ T2339] pvrusb2: Attached sub-driver cx25840 [ 759.924858][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 759.947669][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 760.112010][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 760.166849][ T29] audit: type=1804 audit(1738448327.217:773): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2696" name="file0" dev="ramfs" ino=40343 res=1 errno=0 [ 760.392551][T14168] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2699'. [ 760.401881][ T5127] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 760.404856][T14168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2699'. [ 760.421041][T14168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2699'. [ 760.556207][ T5127] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 760.590658][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.905029][ T5127] usb 3-1: config 0 descriptor?? [ 760.925736][ T5127] cp210x 3-1:0.0: cp210x converter detected [ 761.095976][ T5909] usb 5-1: USB disconnect, device number 22 [ 761.458428][T14174] warn_alloc: 3 callbacks suppressed [ 761.458449][T14174] syz.3.2695: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 761.481937][T14174] CPU: 0 UID: 0 PID: 14174 Comm: syz.3.2695 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 761.481961][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 761.481973][T14174] Call Trace: [ 761.481980][T14174] [ 761.481988][T14174] dump_stack_lvl+0x241/0x360 [ 761.482025][T14174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.482055][T14174] ? __pfx__printk+0x10/0x10 [ 761.482087][T14174] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 761.482120][T14174] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 761.482154][T14174] warn_alloc+0x278/0x410 [ 761.482188][T14174] ? __pfx_warn_alloc+0x10/0x10 [ 761.482223][T14174] ? translate_table+0x174/0x2330 [ 761.482243][T14174] ? __get_vm_area_node+0x1c8/0x2d0 [ 761.482269][T14174] ? __get_vm_area_node+0x25c/0x2d0 [ 761.482300][T14174] __vmalloc_node_range_noprof+0x62f/0x1380 [ 761.482351][T14174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 761.482393][T14174] ? rcu_is_watching+0x15/0xb0 [ 761.482416][T14174] ? trace_kmalloc+0x1f/0xd0 [ 761.482433][T14174] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 761.482452][T14174] ? __kvmalloc_node_noprof+0x72/0x190 [ 761.482476][T14174] __kvmalloc_node_noprof+0x142/0x190 [ 761.482502][T14174] ? translate_table+0x174/0x2330 [ 761.482519][T14174] translate_table+0x174/0x2330 [ 761.482550][T14174] ? __pfx_translate_table+0x10/0x10 [ 761.482566][T14174] ? __might_fault+0xaa/0x120 [ 761.482588][T14174] ? __pfx_lock_release+0x10/0x10 [ 761.482611][T14174] ? __virt_addr_valid+0x183/0x530 [ 761.482636][T14174] ? __might_fault+0xaa/0x120 [ 761.482660][T14174] ? __might_fault+0xc6/0x120 [ 761.482686][T14174] ? copy_from_sockptr_offset+0x6b/0xb0 [ 761.482703][T14174] do_ip6t_set_ctl+0xe4c/0x1270 [ 761.482722][T14174] ? nf_setsockopt+0x240/0x2c0 [ 761.482746][T14174] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 761.482762][T14174] ? rcu_is_watching+0x15/0xb0 [ 761.482789][T14174] ? trace_contention_end+0x3c/0x120 [ 761.482818][T14174] ? __mutex_unlock_slowpath+0x227/0x800 [ 761.482861][T14174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 761.482893][T14174] nf_setsockopt+0x295/0x2c0 [ 761.482933][T14174] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 761.482956][T14174] do_sock_setsockopt+0x3af/0x720 [ 761.482982][T14174] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 761.483007][T14174] ? __fget_files+0x395/0x410 [ 761.483026][T14174] ? __fget_files+0x2a/0x410 [ 761.483049][T14174] __x64_sys_setsockopt+0x1ee/0x280 [ 761.483078][T14174] do_syscall_64+0xf3/0x230 [ 761.483100][T14174] ? clear_bhb_loop+0x35/0x90 [ 761.483124][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.483144][T14174] RIP: 0033:0x7f9ce378cda9 [ 761.483157][T14174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.483170][T14174] RSP: 002b:00007f9ce45de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 761.483186][T14174] RAX: ffffffffffffffda RBX: 00007f9ce39a6240 RCX: 00007f9ce378cda9 [ 761.483197][T14174] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 761.483205][T14174] RBP: 00007f9ce380e2a0 R08: 00000000000003b0 R09: 0000000000000000 [ 761.483217][T14174] R10: 00000000200007c0 R11: 0000000000000246 R12: 0000000000000000 [ 761.483229][T14174] R13: 0000000000000000 R14: 00007f9ce39a6240 R15: 00007ffcd83101f8 [ 761.483249][T14174] [ 761.483259][T14174] Mem-Info: [ 761.548637][ T5127] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 761.603459][T14174] active_anon:3181 inactive_anon:8368 isolated_anon:0 [ 761.603459][T14174] active_file:14934 inactive_file:39396 isolated_file:0 [ 761.603459][T14174] unevictable:768 dirty:81 writeback:0 [ 761.603459][T14174] slab_reclaimable:10803 slab_unreclaimable:109763 [ 761.603459][T14174] mapped:35674 shmem:8919 pagetables:851 [ 761.603459][T14174] sec_pagetables:0 bounce:0 [ 761.603459][T14174] kernel_misc_reclaimable:0 [ 761.603459][T14174] free:1249047 free_pcp:10523 free_cma:0 [ 761.703462][ T5127] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 761.706091][T14174] Node 0 active_anon:12724kB inactive_anon:33472kB active_file:59660kB inactive_file:157584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142696kB dirty:320kB writeback:0kB shmem:34140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11456kB pagetables:3404kB sec_pagetables:0kB all_unreclaimable? no [ 761.722347][ T5127] usb 3-1: cp210x converter now attached to ttyUSB0 [ 761.725046][T14174] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 761.725110][T14174] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 761.731722][ T5127] usb 3-1: USB disconnect, device number 14 [ 761.735767][T14174] lowmem_reserve[]: 0 2493 2494 0 0 [ 761.735818][T14174] Node 0 DMA32 free:1068860kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:12720kB inactive_anon:33440kB active_file:58888kB inactive_file:157532kB unevictable:1536kB writepending:320kB present:3129332kB managed:2553684kB mlocked:0kB bounce:0kB free_pcp:40156kB local_pcp:38844kB free_cma:0kB [ 761.743283][ T5127] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 761.761468][T14174] lowmem_reserve[]: [ 761.868184][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.908681][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.945759][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.972917][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.015928][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.058043][T14174] 0 0 0 0 0 [ 762.061271][T14174] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:772kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 762.088191][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.094767][T14174] lowmem_reserve[]: 0 0 0 0 0 [ 762.099489][T14174] Node 1 Normal free:3911720kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 762.128422][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.134506][T14174] lowmem_reserve[]: 0 0 0 0 0 [ 762.139239][T14174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 762.151927][T14174] Node 0 DMA32: 304*4kB (UE) 58*8kB (UE) 44*16kB (UME) 401*32kB (UME) 376*64kB (UME) 56*128kB (ME) 17*256kB (UME) 55*512kB (UME) 121*1024kB (UM) 7*2048kB (UM) 208*4096kB (UM) = 1069168kB [ 762.171356][T14174] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 762.183210][T14174] Node 1 Normal: 234*4kB (UM) 54*8kB (UME) 43*16kB (UME) 203*32kB (UME) 97*64kB (UME) 35*128kB (UME) 19*256kB (UME) 15*512kB (UME) 5*1024kB (UM) 4*2048kB (UME) 944*4096kB (M) = 3911720kB [ 762.201827][T14174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.211418][T14174] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 762.220753][T14174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.230334][T14174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.239646][T14174] 63272 total pagecache pages [ 762.244344][T14174] 1 pages in swap cache [ 762.248479][T14174] Free swap = 124760kB [ 762.252620][T14174] Total swap = 124996kB [ 762.256794][T14174] 2097051 pages RAM [ 762.260583][T14174] 0 pages HighMem/MovableOnly [ 762.266172][T14174] 426778 pages reserved [ 762.270316][T14174] 0 pages cma reserved [ 762.409527][ T5127] cp210x 3-1:0.0: device disconnected [ 762.753823][ T5127] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 762.954024][ T5127] usb 3-1: device descriptor read/64, error -32 [ 763.243654][ T5127] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 763.343690][ T5828] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 763.425878][ T5127] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 763.440025][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.467815][ T5127] usb 3-1: config 0 descriptor?? [ 763.495588][ T5127] cp210x 3-1:0.0: cp210x converter detected [ 763.513562][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 763.521008][ T5828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 763.544320][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 763.583466][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.623485][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.673702][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.682809][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.714715][ T5127] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 763.722346][ T5127] cp210x 3-1:0.0: querying part number failed [ 763.750918][ T5127] usb 3-1: cp210x converter now attached to ttyUSB0 [ 763.761539][ T5127] usb 3-1: USB disconnect, device number 16 [ 763.803945][ T5127] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 763.812752][ T5127] cp210x 3-1:0.0: device disconnected [ 763.954447][T14183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.963354][T14183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.973956][T14183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.982550][T14183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.995102][ T5828] usb 5-1: usb_control_msg returned -71 [ 764.000873][ T5828] usbtmc 5-1:16.0: can't read capabilities [ 764.032932][ T5828] usb 5-1: USB disconnect, device number 23 [ 766.086101][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2715'. [ 766.123966][T14226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2717'. [ 766.217652][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2720'. [ 766.520288][T14241] program syz.3.2723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 766.985960][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2725'. [ 767.642000][T14271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2732'. [ 767.671049][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2729'. [ 768.060016][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2735'. [ 768.493756][T14284] vivid-003: ================= START STATUS ================= [ 768.503369][T14284] vivid-003: Radio HW Seek Mode: Bounded [ 768.509586][T14287] netlink: 'syz.2.2738': attribute type 1 has an invalid length. [ 768.521777][T14284] vivid-003: Radio Programmable HW Seek: false [ 768.528571][T14284] vivid-003: RDS Rx I/O Mode: Block I/O [ 768.534918][T14284] vivid-003: Generate RBDS Instead of RDS: false [ 768.541899][T14284] vivid-003: RDS Reception: true [ 768.547505][T14284] vivid-003: RDS Program Type: 0 inactive [ 768.554100][T14284] vivid-003: RDS PS Name: inactive [ 768.560363][T14284] vivid-003: RDS Radio Text: inactive [ 768.569105][T14284] vivid-003: RDS Traffic Announcement: false inactive [ 768.584556][T14284] vivid-003: RDS Traffic Program: false inactive [ 768.595583][T14284] vivid-003: RDS Music: false inactive [ 768.603435][T14284] vivid-003: ================== END STATUS ================== [ 768.730653][T14287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 768.867506][T14289] bond3: (slave ip6gretap1): making interface the new active one [ 768.876632][T14289] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 769.418959][T14306] 9pnet_fd: Insufficient options for proto=fd [ 769.437098][T14306] 9pnet_fd: Insufficient options for proto=fd [ 769.443925][T14306] 9pnet_fd: Insufficient options for proto=fd [ 769.453550][ T5828] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 769.454452][T14306] 9pnet_fd: Insufficient options for proto=fd [ 769.491044][T14306] 9pnet_fd: Insufficient options for proto=fd [ 769.605204][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.625937][ T5828] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 769.663455][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.684268][ T5828] usb 3-1: config 0 descriptor?? [ 769.703106][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 769.919464][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 770.012735][ T5828] pwc: recv_control_msg error -71 req 02 val 2700 [ 770.058856][ T5828] pwc: recv_control_msg error -71 req 02 val 2c00 [ 770.257129][ T5828] pwc: recv_control_msg error -71 req 04 val 1000 [ 770.271454][ T5828] pwc: recv_control_msg error -71 req 04 val 1300 [ 770.283564][ T5828] pwc: recv_control_msg error -71 req 04 val 1400 [ 770.292211][ T5828] pwc: recv_control_msg error -71 req 02 val 2000 [ 770.300519][ T5828] pwc: recv_control_msg error -71 req 02 val 2100 [ 770.418017][ T5828] pwc: recv_control_msg error -71 req 04 val 1500 [ 771.357059][ T5828] pwc: recv_control_msg error -71 req 02 val 2500 [ 771.374013][ T5828] pwc: recv_control_msg error -71 req 02 val 2400 [ 771.583587][ T5828] pwc: recv_control_msg error -71 req 02 val 2600 [ 771.593566][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 771.608268][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 771.624038][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 771.630847][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 771.643141][ T5828] pwc: Registered as video103. [ 771.700889][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 771.794029][ T5828] usb 3-1: USB disconnect, device number 17 [ 772.996313][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.047948][T11861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.057896][T11861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.066167][T11861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.084412][T11861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.097244][T11861] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 773.105860][T11861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 773.139394][ T5832] syz_tun (unregistering): left allmulticast mode [ 773.179681][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.326041][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.473132][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.532033][T14358] virt_wifi0 speed is unknown, defaulting to 1000 [ 774.251781][T14368] netlink: 'syz.3.2763': attribute type 1 has an invalid length. [ 774.288394][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'. [ 774.320337][T14358] chnl_net:caif_netlink_parms(): no params data found [ 774.369645][ T12] bridge_slave_1: left allmulticast mode [ 774.378987][ T12] bridge_slave_1: left promiscuous mode [ 774.408291][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.496234][ T12] bridge_slave_0: left allmulticast mode [ 774.512231][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.130167][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 775.141198][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 775.150085][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 775.159515][ T5844] Bluetooth: hci0: command tx timeout [ 775.172592][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 775.183257][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 775.190598][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 775.538842][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 775.549952][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.560829][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.571074][ T12] bond0 (unregistering): Released all slaves [ 775.712540][ T8] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 775.723939][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.742479][ T8] usb 3-1: config 0 descriptor?? [ 775.752663][ T8] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 775.765836][ T8] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 776.036906][T14397] program syz.3.2769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.043676][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.081964][T14358] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.103284][T14358] bridge_slave_0: entered allmulticast mode [ 776.909302][T14358] bridge_slave_0: entered promiscuous mode [ 777.236200][T11861] Bluetooth: hci0: command tx timeout [ 777.236289][ T5844] Bluetooth: hci4: command tx timeout [ 777.265464][T14386] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 777.304267][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.325318][T14358] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.332524][T14358] bridge_slave_1: entered allmulticast mode [ 777.340761][ T8] usb 3-1: USB disconnect, device number 18 [ 777.383222][T14358] bridge_slave_1: entered promiscuous mode [ 777.584728][T14382] virt_wifi0 speed is unknown, defaulting to 1000 [ 777.602513][T14358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.663751][T14358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.916856][T14386] syz.2.2767 (14386) used greatest stack depth: 18064 bytes left [ 778.669194][T14358] team0: Port device team_slave_0 added [ 778.686368][T14358] team0: Port device team_slave_1 added [ 778.737637][ T12] hsr_slave_0: left promiscuous mode [ 778.758355][ T12] hsr_slave_1: left promiscuous mode [ 778.774309][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.781900][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.794286][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.810837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.868061][ T12] veth1_macvtap: left promiscuous mode [ 778.985357][ T12] veth0_macvtap: left promiscuous mode [ 779.008224][ T12] veth1_vlan: left promiscuous mode [ 779.016752][ T12] veth0_vlan: left promiscuous mode [ 779.323567][T11861] Bluetooth: hci0: command tx timeout [ 779.329202][ T5844] Bluetooth: hci4: command tx timeout [ 780.771886][T14435] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2780'. [ 781.393817][T11861] Bluetooth: hci0: command tx timeout [ 781.399507][ T5844] Bluetooth: hci4: command tx timeout [ 782.253117][T14358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.263708][T14358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.345527][T14358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.575626][T14358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.803571][T14358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.093742][T14358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.473688][ T5844] Bluetooth: hci4: command tx timeout [ 783.594431][T14358] hsr_slave_0: entered promiscuous mode [ 783.601019][T14453] FAULT_INJECTION: forcing a failure. [ 783.601019][T14453] name failslab, interval 1, probability 0, space 0, times 0 [ 783.614544][T14358] hsr_slave_1: entered promiscuous mode [ 783.623106][T14453] CPU: 1 UID: 0 PID: 14453 Comm: syz.2.2784 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 783.623130][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 783.623141][T14453] Call Trace: [ 783.623148][T14453] [ 783.623154][T14453] dump_stack_lvl+0x241/0x360 [ 783.623190][T14453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.623218][T14453] ? __pfx__printk+0x10/0x10 [ 783.623247][T14453] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 783.623273][T14453] ? __pfx___might_resched+0x10/0x10 [ 783.623298][T14453] should_fail_ex+0x40a/0x550 [ 783.623321][T14453] should_failslab+0xac/0x100 [ 783.623344][T14453] kmem_cache_alloc_node_noprof+0x77/0x380 [ 783.623372][T14453] ? __alloc_skb+0x1c3/0x440 [ 783.623400][T14453] __alloc_skb+0x1c3/0x440 [ 783.623428][T14453] ? __pfx___alloc_skb+0x10/0x10 [ 783.623455][T14453] ? netlink_autobind+0xd6/0x2f0 [ 783.623470][T14453] ? netlink_autobind+0x2b0/0x2f0 [ 783.623490][T14453] netlink_sendmsg+0x638/0xcb0 [ 783.623527][T14453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.623565][T14453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.623591][T14453] __sock_sendmsg+0x221/0x270 [ 783.623614][T14453] ____sys_sendmsg+0x52a/0x7e0 [ 783.623649][T14453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.623675][T14453] ? __fget_files+0x2a/0x410 [ 783.623700][T14453] ? __fget_files+0x2a/0x410 [ 783.623752][T14453] __sys_sendmsg+0x269/0x350 [ 783.623784][T14453] ? __pfx___sys_sendmsg+0x10/0x10 [ 783.623823][T14453] ? do_sys_openat2+0x17a/0x1d0 [ 783.623869][T14453] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 783.623894][T14453] ? do_syscall_64+0x100/0x230 [ 783.623920][T14453] ? do_syscall_64+0xb6/0x230 [ 783.623945][T14453] do_syscall_64+0xf3/0x230 [ 783.623968][T14453] ? clear_bhb_loop+0x35/0x90 [ 783.623996][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.624019][T14453] RIP: 0033:0x7f918198cda9 [ 783.624036][T14453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.624051][T14453] RSP: 002b:00007f91827fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.624070][T14453] RAX: ffffffffffffffda RBX: 00007f9181ba5fa0 RCX: 00007f918198cda9 [ 783.624083][T14453] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 783.624094][T14453] RBP: 00007f91827fb090 R08: 0000000000000000 R09: 0000000000000000 [ 783.624104][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.624115][T14453] R13: 0000000000000000 R14: 00007f9181ba5fa0 R15: 00007ffd417b7488 [ 783.624140][T14453] [ 783.634154][T14358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.698758][T14358] Cannot create hsr debugfs directory [ 784.725813][T14382] chnl_net:caif_netlink_parms(): no params data found [ 784.767285][T14449] zonefs (nullb0) ERROR: Not a zoned block device [ 784.955160][T14448] virt_wifi0 speed is unknown, defaulting to 1000 [ 785.891477][T14470] openvswitch: netlink: Multiple metadata blocks provided [ 785.993470][T14382] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.000704][T14382] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.008412][T14382] bridge_slave_0: entered allmulticast mode [ 786.015618][T14382] bridge_slave_0: entered promiscuous mode [ 786.085311][T14478] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2790'. [ 786.860484][T14382] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.883697][T14382] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.898404][T14382] bridge_slave_1: entered allmulticast mode [ 786.912991][T14382] bridge_slave_1: entered promiscuous mode [ 786.995639][T14382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.197906][T14382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.917530][T14382] team0: Port device team_slave_0 added [ 788.959097][T14493] bridge0: port 1(gretap0) entered blocking state [ 788.968972][T14493] bridge0: port 1(gretap0) entered disabled state [ 788.977671][T14493] gretap0: entered allmulticast mode [ 789.018876][T14493] gretap0: entered promiscuous mode [ 789.030412][T14493] bridge0: port 1(gretap0) entered blocking state [ 789.037767][T14493] bridge0: port 1(gretap0) entered forwarding state [ 789.338340][T14358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.358973][T14494] gretap0: left allmulticast mode [ 789.365471][T14494] gretap0: left promiscuous mode [ 789.370597][T14494] bridge0: port 1(gretap0) entered disabled state [ 789.394900][T14382] team0: Port device team_slave_1 added [ 789.425732][T14358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.441671][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2795'. [ 789.566732][T14358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.647081][T14382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.658460][T14382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.864367][T14382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.921068][T14358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.943651][T14382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.950840][T14382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.977457][T14382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.344326][T14382] hsr_slave_0: entered promiscuous mode [ 790.350826][T14382] hsr_slave_1: entered promiscuous mode [ 790.378013][T14382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.421485][T14382] Cannot create hsr debugfs directory [ 790.715154][T14518] program syz.4.2802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.922942][T14358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 791.793136][T14527] usb usb1: usbfs: process 14527 (syz.2.2803) did not claim interface 0 before use [ 791.923636][T14358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 792.112419][T14358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 792.338758][T14358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 792.648497][T14358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.683717][T14540] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 792.686356][T14358] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.756618][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.763915][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.787254][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.794394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.196886][T14358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 794.028688][T14358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 794.394727][T14382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 794.460350][T14557] program syz.2.2813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.943524][T14382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 795.006487][T14382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 795.027226][T14382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 795.250723][T14382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.363123][T14358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.419617][T14382] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.468534][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.475706][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.511450][T14358] veth0_vlan: entered promiscuous mode [ 795.520047][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.527262][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.556987][T14358] veth1_vlan: entered promiscuous mode [ 795.640747][T14358] veth0_macvtap: entered promiscuous mode [ 795.696762][T14358] veth1_macvtap: entered promiscuous mode [ 795.760598][T14358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.788467][T14358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.805816][T14358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.822019][T14358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.840977][T14358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.886980][T14358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.914406][T14358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.934143][T14358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.957975][T14358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.993845][T14358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.018238][T14358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.037240][T14358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.081367][T14358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.094426][T14358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.123819][T14358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.132571][T14358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.244882][T14382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.264192][T12289] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 796.296806][T14587] overlayfs: failed to resolve './file0': -2 [ 796.386665][ T2885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.422896][ T2885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.453300][T12289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.623135][T12289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 796.640763][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.650679][T14382] veth0_vlan: entered promiscuous mode [ 796.653691][T12289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 796.662191][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.689187][T14382] veth1_vlan: entered promiscuous mode [ 796.724772][T12289] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.858026][T12289] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 796.917243][T12289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.016340][T12289] usb 5-1: config 0 descriptor?? [ 797.142814][T14590] block device autoloading is deprecated and will be removed. [ 797.157089][T14382] veth0_macvtap: entered promiscuous mode [ 797.166204][T14382] veth1_macvtap: entered promiscuous mode [ 797.178445][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.190415][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.200399][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.211003][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.221022][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.231650][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.253911][T14382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.314604][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.372978][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.410156][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.877553][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.890138][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.922009][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.947264][T14595] program syz.1.2754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.961857][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.982561][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.014994][T14382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.040411][T14382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.055160][T14382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.068895][T14382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.090379][T14382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.256307][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.285215][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.325892][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.335869][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.893573][T12329] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 799.028752][ T29] audit: type=1326 audit(1738448366.077:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14577 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b14f8cda9 code=0x7fc00000 [ 799.066247][T12329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.088096][T12329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.110190][T12329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.138013][T12329] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.149914][ T5881] usb 5-1: USB disconnect, device number 24 [ 799.181570][T12329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.229992][T12329] usb 4-1: config 0 descriptor?? [ 800.541365][T12329] plantronics 0003:047F:FFFF.000B: item 0 1 0 11 parsing failed [ 800.587339][T12329] plantronics 0003:047F:FFFF.000B: parse failed [ 800.619674][T11861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 800.621667][T12329] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 800.653707][T11861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 800.673815][T11861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 800.681598][T11861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 800.728397][T11861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 800.742028][T11861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 800.787502][T12329] usb 4-1: USB disconnect, device number 26 [ 800.796289][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2834'. [ 800.978718][T14625] virt_wifi0 speed is unknown, defaulting to 1000 [ 802.218878][T14625] chnl_net:caif_netlink_parms(): no params data found [ 802.834528][T11861] Bluetooth: hci1: command tx timeout [ 803.541395][T14664] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2843'. [ 804.181928][T14666] netlink: 64106 bytes leftover after parsing attributes in process `syz.1.2844'. [ 804.473936][ T5828] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 804.793564][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 804.806194][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.817477][ T5828] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 804.826726][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.860586][ T5828] usb 5-1: config 0 descriptor?? [ 805.068924][T11861] Bluetooth: hci1: command tx timeout [ 805.520108][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.528899][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.763324][ T5828] aureal 0003:0755:2626.000C: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.4-1/input0 [ 805.978968][ T5881] usb 5-1: USB disconnect, device number 25 [ 807.167170][T11861] Bluetooth: hci1: command tx timeout [ 807.646550][T14676] virt_wifi0 speed is unknown, defaulting to 1000 [ 807.791675][T14687] tmpfs: Bad value for 'mpol' [ 807.857261][T14625] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.894031][T14625] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.917613][T14625] bridge_slave_0: entered allmulticast mode [ 807.934881][T14625] bridge_slave_0: entered promiscuous mode [ 807.989152][T14625] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.058401][T14625] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.073048][T14625] bridge_slave_1: entered allmulticast mode [ 808.080334][T14625] bridge_slave_1: entered promiscuous mode [ 808.621546][T14625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.661574][T14625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.676321][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.708198][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.858705][T14625] team0: Port device team_slave_0 added [ 808.876534][T14625] team0: Port device team_slave_1 added [ 808.963002][T14708] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2856'. [ 809.243434][T11861] Bluetooth: hci1: command tx timeout [ 809.781671][T14625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.818414][T14625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.902270][T14625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.961141][T14711] dccp_close: ABORT with 28 bytes unread [ 809.964134][T14625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.993700][T14625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.063559][T14625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.143088][T14625] hsr_slave_0: entered promiscuous mode [ 810.144288][T14625] hsr_slave_1: entered promiscuous mode [ 810.166320][T14625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 810.183853][T14625] Cannot create hsr debugfs directory [ 811.400222][T14722] syzkaller1: entered promiscuous mode [ 811.400240][T14722] syzkaller1: entered allmulticast mode [ 811.546020][T14732] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2862'. [ 811.970763][T14625] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.128791][T14625] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.474938][T14625] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.726714][T14625] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.482987][T14625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 813.534457][T14750] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 814.397539][T14625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 814.551132][T14754] Can't find ip_set type has [ 814.630722][T14625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 814.716233][T14625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 815.771164][T14625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.823108][T14625] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.077399][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.084803][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.267773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.274982][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.788787][T14625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 816.840943][T14625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.792269][T14625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.856961][T14625] veth0_vlan: entered promiscuous mode [ 817.891648][T14625] veth1_vlan: entered promiscuous mode [ 817.990914][T14625] veth0_macvtap: entered promiscuous mode [ 818.010609][T14625] veth1_macvtap: entered promiscuous mode [ 818.071422][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.113679][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.365211][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.389443][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.399819][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.410306][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.420294][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.430803][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.452885][T14625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.546875][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.644603][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.775251][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.966155][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.094746][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.135984][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.183889][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.245358][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.273611][T14625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.317089][T14625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.344626][T14625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.377573][T14625] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.408525][T14625] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.433648][T14625] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.472695][T14625] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.694723][T14126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.705893][T14126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.758901][T14126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.774342][T14126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.815336][T14809] virt_wifi0 speed is unknown, defaulting to 1000 [ 821.850106][T14842] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 822.056265][T14842] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 822.179708][T14842] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 824.607704][T14877] netlink: 'syz.3.2899': attribute type 16 has an invalid length. [ 824.615686][T14877] netlink: 'syz.3.2899': attribute type 17 has an invalid length. [ 824.662668][T14877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 825.541644][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 825.555188][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 825.583061][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 825.604205][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 825.612757][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 825.620270][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 826.085210][T14883] virt_wifi0 speed is unknown, defaulting to 1000 [ 826.693971][T14883] chnl_net:caif_netlink_parms(): no params data found [ 827.753103][T14906] Can't find ip_set type hash:n [ 827.964820][T11861] Bluetooth: hci5: command tx timeout [ 828.119306][T14883] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.155838][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.194623][T12289] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 828.201730][T14883] bridge_slave_0: entered allmulticast mode [ 828.226792][T14883] bridge_slave_0: entered promiscuous mode [ 828.245068][T14883] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.273724][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.275006][T14921] FAULT_INJECTION: forcing a failure. [ 828.275006][T14921] name failslab, interval 1, probability 0, space 0, times 0 [ 828.280910][T14883] bridge_slave_1: entered allmulticast mode [ 828.331975][T14883] bridge_slave_1: entered promiscuous mode [ 828.338758][T14921] CPU: 1 UID: 0 PID: 14921 Comm: syz.3.2912 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 828.338785][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 828.338799][T14921] Call Trace: [ 828.338806][T14921] [ 828.338815][T14921] dump_stack_lvl+0x241/0x360 [ 828.338857][T14921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 828.338892][T14921] ? __pfx__printk+0x10/0x10 [ 828.338927][T14921] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 828.338958][T14921] ? __pfx___might_resched+0x10/0x10 [ 828.338980][T14921] ? validate_chain+0x11e/0x5920 [ 828.339017][T14921] should_fail_ex+0x40a/0x550 [ 828.339046][T14921] should_failslab+0xac/0x100 [ 828.339073][T14921] kmem_cache_alloc_node_noprof+0x77/0x380 [ 828.339101][T14921] ? __alloc_skb+0x1c3/0x440 [ 828.339135][T14921] __alloc_skb+0x1c3/0x440 [ 828.339170][T14921] ? __pfx___alloc_skb+0x10/0x10 [ 828.339201][T14921] ? validate_chain+0x11e/0x5920 [ 828.339239][T14921] sock_omalloc+0xd5/0x1e0 [ 828.339262][T14921] msg_zerocopy_realloc+0x9a/0x7d0 [ 828.339292][T14921] tcp_sendmsg_locked+0x498b/0x5330 [ 828.339315][T14921] ? mark_lock+0x9a/0x360 [ 828.339349][T14921] ? __lock_acquire+0x1397/0x2100 [ 828.339397][T14921] ? mark_lock+0x9a/0x360 [ 828.339430][T14921] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 828.339471][T14921] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 828.339507][T14921] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 828.339536][T14921] ? tcp_sendmsg+0x22/0x50 [ 828.339559][T14921] ? do_raw_spin_unlock+0x13c/0x8b0 [ 828.339591][T14921] tcp_sendmsg+0x30/0x50 [ 828.339616][T14921] __sock_sendmsg+0x1a6/0x270 [ 828.339645][T14921] ____sys_sendmsg+0x52a/0x7e0 [ 828.339687][T14921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.339718][T14921] ? __fget_files+0x2a/0x410 [ 828.339750][T14921] ? __sys_sendmmsg+0x392/0x720 [ 828.339783][T14921] ? __might_fault+0xaa/0x120 [ 828.339821][T14921] __sys_sendmmsg+0x36a/0x720 [ 828.339874][T14921] ? __pfx___sys_sendmmsg+0x10/0x10 [ 828.339916][T14921] ? __pfx_lock_release+0x10/0x10 [ 828.339939][T14921] ? kstrtouint_from_user+0x128/0x190 [ 828.339987][T14921] ? ksys_write+0x22a/0x2b0 [ 828.340017][T14921] ? __pfx_lock_release+0x10/0x10 [ 828.340060][T14921] ? sb_end_write+0xe9/0x1c0 [ 828.340083][T14921] ? vfs_write+0x7fa/0xd10 [ 828.340114][T14921] ? __mutex_unlock_slowpath+0x227/0x800 [ 828.340163][T14921] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 828.340189][T14921] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 828.340213][T14921] ? do_syscall_64+0x100/0x230 [ 828.340240][T14921] __x64_sys_sendmmsg+0xa0/0xb0 [ 828.340270][T14921] do_syscall_64+0xf3/0x230 [ 828.340293][T14921] ? clear_bhb_loop+0x35/0x90 [ 828.340321][T14921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.340345][T14921] RIP: 0033:0x7f9ce378cda9 [ 828.340360][T14921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.340375][T14921] RSP: 002b:00007f9ce4641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 828.340393][T14921] RAX: ffffffffffffffda RBX: 00007f9ce39a5fa0 RCX: 00007f9ce378cda9 [ 828.340407][T14921] RDX: 0000000000000004 RSI: 0000000020000f40 RDI: 0000000000000003 [ 828.340417][T14921] RBP: 00007f9ce4641090 R08: 0000000000000000 R09: 0000000000000000 [ 828.340427][T14921] R10: 0000000004048841 R11: 0000000000000246 R12: 0000000000000001 [ 828.340438][T14921] R13: 0000000000000000 R14: 00007f9ce39a5fa0 R15: 00007ffcd83101f8 [ 828.340470][T14921] [ 828.724931][T12289] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 828.732975][T12289] usb 3-1: config 0 has no interface number 0 [ 828.739286][T12289] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 828.748403][T12289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.764483][T12289] usb 3-1: config 0 descriptor?? [ 828.771387][T12289] cp210x 3-1:0.3: cp210x converter detected [ 828.798480][T14883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.846241][T14883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.063572][T12329] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 829.076828][T14883] team0: Port device team_slave_0 added [ 829.115780][T14883] team0: Port device team_slave_1 added [ 829.253533][T12329] usb 4-1: Using ep0 maxpacket: 32 [ 829.266653][T12329] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.293904][T14883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.300909][T14883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.346887][T12329] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 829.394669][T12329] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 829.398220][T14883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.418963][T12289] usb 3-1: cp210x converter now attached to ttyUSB0 [ 829.429452][T14883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.437885][T14883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.459020][T12329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 829.463939][T14883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.050828][T11861] Bluetooth: hci5: command tx timeout [ 830.203437][T12329] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 830.212638][T12329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.488621][T12329] usb 4-1: config 0 descriptor?? [ 831.392647][T14915] ubi0: attaching mtd0 [ 831.419752][T14915] ubi0: scanning is finished [ 831.444717][T14883] hsr_slave_0: entered promiscuous mode [ 831.469022][T14883] hsr_slave_1: entered promiscuous mode [ 831.480268][T14883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.507223][T14883] Cannot create hsr debugfs directory [ 831.543331][T12329] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 831.709470][T14915] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 831.720005][T14915] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 831.723214][T12329] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -71 [ 831.737975][T14915] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 831.747278][T14915] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 831.758529][T14915] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 831.768339][T14915] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 831.779113][T14915] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 197126248 [ 831.955470][T14915] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 831.966153][T12329] usb 4-1: USB disconnect, device number 27 [ 831.993438][T14943] ubi0: background thread "ubi_bgt0d" started, PID 14943 [ 832.127313][T11861] Bluetooth: hci5: command tx timeout [ 832.913078][T14947] FAULT_INJECTION: forcing a failure. [ 832.913078][T14947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.944904][ T5828] usb 3-1: USB disconnect, device number 19 [ 832.971214][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 832.995075][ T5828] cp210x 3-1:0.3: device disconnected [ 833.001441][T14949] FAULT_INJECTION: forcing a failure. [ 833.001441][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 833.018072][T14949] CPU: 1 UID: 0 PID: 14949 Comm: syz.2.2920 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 833.018100][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 833.018113][T14949] Call Trace: [ 833.018121][T14949] [ 833.018130][T14949] dump_stack_lvl+0x241/0x360 [ 833.018172][T14949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.018207][T14949] ? __pfx__printk+0x10/0x10 [ 833.018240][T14949] ? fs_reclaim_acquire+0x93/0x130 [ 833.018275][T14949] ? __pfx___might_resched+0x10/0x10 [ 833.018305][T14949] should_fail_ex+0x40a/0x550 [ 833.018334][T14949] should_failslab+0xac/0x100 [ 833.018362][T14949] __kmalloc_noprof+0xdd/0x4c0 [ 833.018389][T14949] ? tomoyo_encode+0x26f/0x540 [ 833.018426][T14949] tomoyo_encode+0x26f/0x540 [ 833.018465][T14949] tomoyo_mount_permission+0x53d/0xb80 [ 833.018502][T14949] ? stack_depot_save_flags+0x37/0x940 [ 833.018524][T14949] ? tomoyo_mount_permission+0x298/0xb80 [ 833.018560][T14949] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 833.018641][T14949] ? hook_sb_mount+0x10b/0x420 [ 833.018660][T14949] ? security_sb_mount+0x22/0x2f0 [ 833.018687][T14949] security_sb_mount+0xe0/0x2f0 [ 833.018712][T14949] path_mount+0xb9/0xfa0 [ 833.018735][T14949] ? kmem_cache_free+0x195/0x410 [ 833.018761][T14949] ? user_path_at+0x44/0x60 [ 833.018800][T14949] __se_sys_mount+0x2d6/0x3c0 [ 833.018831][T14949] ? __pfx___se_sys_mount+0x10/0x10 [ 833.018859][T14949] ? do_syscall_64+0x100/0x230 [ 833.018890][T14949] ? __x64_sys_mount+0x20/0xc0 [ 833.018916][T14949] do_syscall_64+0xf3/0x230 [ 833.018942][T14949] ? clear_bhb_loop+0x35/0x90 [ 833.018974][T14949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.019009][T14949] RIP: 0033:0x7fc40218cda9 [ 833.019027][T14949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.019045][T14949] RSP: 002b:00007fc402fed038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.019067][T14949] RAX: ffffffffffffffda RBX: 00007fc4023a5fa0 RCX: 00007fc40218cda9 [ 833.019081][T14949] RDX: 0000000020002880 RSI: 0000000020002840 RDI: 0000000000000000 [ 833.019100][T14949] RBP: 00007fc402fed090 R08: 0000000020000000 R09: 0000000000000000 [ 833.019113][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.019124][T14949] R13: 0000000000000000 R14: 00007fc4023a5fa0 R15: 00007ffeaff721b8 [ 833.019156][T14949] [ 833.322827][T14883] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 833.345920][T14947] CPU: 0 UID: 0 PID: 14947 Comm: syz.0.2918 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 833.345945][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 833.345957][T14947] Call Trace: [ 833.345963][T14947] [ 833.345971][T14947] dump_stack_lvl+0x241/0x360 [ 833.346007][T14947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.346036][T14947] ? __pfx__printk+0x10/0x10 [ 833.346064][T14947] ? __pfx_lock_release+0x10/0x10 [ 833.346095][T14947] should_fail_ex+0x40a/0x550 [ 833.346119][T14947] _copy_from_iter+0x1e9/0x1c20 [ 833.346145][T14947] ? __virt_addr_valid+0x183/0x530 [ 833.346180][T14947] ? __alloc_skb+0x28f/0x440 [ 833.346205][T14947] ? __pfx__copy_from_iter+0x10/0x10 [ 833.346239][T14947] ? __virt_addr_valid+0x183/0x530 [ 833.346263][T14947] ? __virt_addr_valid+0x183/0x530 [ 833.346287][T14947] ? __virt_addr_valid+0x45f/0x530 [ 833.346312][T14947] ? __phys_addr_symbol+0x2f/0x70 [ 833.346336][T14947] ? __check_object_size+0x47a/0x730 [ 833.346362][T14947] netlink_sendmsg+0x73d/0xcb0 [ 833.346401][T14947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.346440][T14947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.346466][T14947] __sock_sendmsg+0x221/0x270 [ 833.346490][T14947] ____sys_sendmsg+0x52a/0x7e0 [ 833.346525][T14947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.346550][T14947] ? __fget_files+0x2a/0x410 [ 833.346576][T14947] ? __fget_files+0x2a/0x410 [ 833.346607][T14947] __sys_sendmsg+0x269/0x350 [ 833.346639][T14947] ? __pfx___sys_sendmsg+0x10/0x10 [ 833.346678][T14947] ? do_sys_openat2+0x17a/0x1d0 [ 833.346724][T14947] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 833.346749][T14947] ? do_syscall_64+0x100/0x230 [ 833.346775][T14947] ? do_syscall_64+0xb6/0x230 [ 833.346800][T14947] do_syscall_64+0xf3/0x230 [ 833.346823][T14947] ? clear_bhb_loop+0x35/0x90 [ 833.346851][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.346874][T14947] RIP: 0033:0x7fb2c378cda9 [ 833.346890][T14947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.346905][T14947] RSP: 002b:00007fb2c45f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.346924][T14947] RAX: ffffffffffffffda RBX: 00007fb2c39a5fa0 RCX: 00007fb2c378cda9 [ 833.346937][T14947] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 833.346948][T14947] RBP: 00007fb2c45f4090 R08: 0000000000000000 R09: 0000000000000000 [ 833.346960][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.346969][T14947] R13: 0000000000000000 R14: 00007fb2c39a5fa0 R15: 00007ffc3ee41218 [ 833.346995][T14947] [ 833.653114][T14883] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 833.772210][T14958] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 833.933489][T14883] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 833.966615][T14883] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 834.203631][T14967] Cannot find set identified by id 0 to match [ 834.249963][T11861] Bluetooth: hci5: command tx timeout [ 835.952876][T14954] team0 (unregistering): Port device team_slave_0 removed [ 835.974916][T14954] team0 (unregistering): Port device team_slave_1 removed [ 836.349342][ T8554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.427484][T14883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.447703][T14883] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.466023][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.473105][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.495666][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.502902][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.513914][ T5880] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 836.571141][ T8554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.685419][ T8554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.704605][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 836.721385][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 836.745941][ T5880] usb 3-1: can't read configurations, error -71 [ 836.813681][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 836.850956][ T8554] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.984308][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 836.994730][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.016855][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.026187][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.034748][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.043466][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.051120][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 837.059363][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 837.089097][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.145654][ T8] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 837.163651][ T8554] bridge_slave_1: left allmulticast mode [ 837.169673][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.178765][ T8554] bridge_slave_1: left promiscuous mode [ 837.187161][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.279261][ T8] usb 4-1: config 0 descriptor?? [ 837.813260][ T8554] bridge_slave_0: left allmulticast mode [ 837.831278][ T8554] bridge_slave_0: left promiscuous mode [ 837.851654][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.587788][T13025] libceph: connect (1)[c::]:6789 error -101 [ 838.692564][T13025] libceph: mon0 (1)[c::]:6789 connect error [ 839.037009][T13025] libceph: connect (1)[c::]:6789 error -101 [ 839.050220][T13025] libceph: mon0 (1)[c::]:6789 connect error [ 839.075514][ T5844] Bluetooth: hci2: command tx timeout [ 839.270144][ T8554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.282207][ T8554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.292361][ T8554] bond0 (unregistering): Released all slaves [ 839.345370][T15012] netpci0: tun_chr_ioctl cmd 1074812118 [ 839.562925][T14883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.744119][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 839.758652][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 839.808789][T15028] 9pnet_fd: Insufficient options for proto=fd [ 840.101347][T15026] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 840.118358][T15013] ceph: No mds server is up or the cluster is laggy [ 840.338905][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 840.353940][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 840.370616][T14996] virt_wifi0 speed is unknown, defaulting to 1000 [ 840.378181][ T8] usb 4-1: USB disconnect, device number 28 [ 840.722329][ T8554] hsr_slave_0: left promiscuous mode [ 840.732623][ T8554] hsr_slave_1: left promiscuous mode [ 840.741731][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.759620][ T8554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.772019][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.782886][ T8554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.826273][ T8554] veth1_macvtap: left promiscuous mode [ 840.832011][ T8554] veth0_macvtap: left promiscuous mode [ 840.837969][ T8554] veth1_vlan: left promiscuous mode [ 840.843511][ T8554] veth0_vlan: left promiscuous mode [ 841.153547][T13025] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 841.164276][ T5844] Bluetooth: hci2: command tx timeout [ 841.316223][ T8554] team0 (unregistering): Port device team_slave_1 removed [ 841.337796][T13025] usb 3-1: Using ep0 maxpacket: 8 [ 841.352208][T13025] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 841.368108][T13025] usb 3-1: can't read configurations, error -61 [ 841.386217][ T8554] team0 (unregistering): Port device team_slave_0 removed [ 841.510220][T13025] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 841.705883][T13025] usb 3-1: Using ep0 maxpacket: 8 [ 841.719539][T13025] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 841.730324][T13025] usb 3-1: can't read configurations, error -61 [ 841.744977][T13025] usb usb3-port1: attempt power cycle [ 841.843513][ T5909] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 842.005041][ T5909] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 842.013821][ T5909] usb 4-1: config 0 has no interface number 0 [ 842.020236][ T5909] usb 4-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 842.031685][ T5909] usb 4-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 842.040929][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.065566][ T5909] usb 4-1: config 0 descriptor?? [ 842.075371][T15049] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 842.080474][T14883] veth0_vlan: entered promiscuous mode [ 842.095289][T13025] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 842.125080][T13025] usb 3-1: Using ep0 maxpacket: 8 [ 842.145713][T13025] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 842.187915][T13025] usb 3-1: can't read configurations, error -61 [ 842.335483][T13025] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 842.335967][T14883] veth1_vlan: entered promiscuous mode [ 842.395594][T13025] usb 3-1: Using ep0 maxpacket: 8 [ 842.613044][T13025] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 842.696142][T13025] usb 3-1: can't read configurations, error -61 [ 842.757640][T14996] chnl_net:caif_netlink_parms(): no params data found [ 842.766660][T13025] usb usb3-port1: unable to enumerate USB device [ 842.960308][T14883] veth0_macvtap: entered promiscuous mode [ 842.963169][T14883] veth1_macvtap: entered promiscuous mode [ 843.243780][ T5844] Bluetooth: hci2: command tx timeout [ 843.634828][ T8554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.769295][ T8554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.782424][T14996] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.782805][T14996] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.783052][T14996] bridge_slave_0: entered allmulticast mode [ 843.786417][T14996] bridge_slave_0: entered promiscuous mode [ 843.797635][T14996] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.797855][T14996] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.798121][T14996] bridge_slave_1: entered allmulticast mode [ 843.800293][T14996] bridge_slave_1: entered promiscuous mode [ 843.892692][ T8554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.954281][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.954308][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.954321][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.954336][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.954865][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.954883][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.954897][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.954911][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.971008][T14883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.977829][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.977850][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.977861][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.977874][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.977888][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.977926][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.977939][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.977953][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.977965][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.977978][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.981538][T14883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.989621][T14883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.989654][T14883] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.989704][T14883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.989730][T14883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.039516][ T8554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.195232][T14996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.196571][T15065] netlink: 'syz.2.2947': attribute type 298 has an invalid length. [ 844.483955][T14996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.631077][T14996] team0: Port device team_slave_0 added [ 844.654669][T14996] team0: Port device team_slave_1 added [ 844.895806][T14996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.904251][T14996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.950751][T14996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.383586][ T5844] Bluetooth: hci2: command tx timeout [ 845.895132][T14996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.935846][T14996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.092672][ T5909] usb 4-1: string descriptor 0 read error: -71 [ 846.104858][ T5909] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 846.114690][ T5909] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 846.124544][ T5909] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 846.167980][ T5909] usb 4-1: USB disconnect, device number 29 [ 846.205205][T14996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.863434][ T8554] bridge_slave_1: left allmulticast mode [ 846.887471][ T8554] bridge_slave_1: left promiscuous mode [ 846.905647][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.338035][T15086] input: syz1 as /devices/virtual/input/input22 [ 847.577462][ T8554] bridge_slave_0: left allmulticast mode [ 847.583301][ T8554] bridge_slave_0: left promiscuous mode [ 847.603658][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.783826][ T5909] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 847.858998][ T8554] dvmrp1 (unregistering): left allmulticast mode [ 847.960177][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 847.967447][ T5909] usb 3-1: too many configurations: 249, using maximum allowed: 8 [ 847.995465][ T5909] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 848.010259][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 848.018347][ T5909] usb 3-1: Product: syz [ 848.022534][ T5909] usb 3-1: Manufacturer: syz [ 848.027179][ T5909] usb 3-1: SerialNumber: syz [ 848.034033][ T5909] usb 3-1: config 0 descriptor?? [ 848.119674][ T8554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.130596][ T8554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.141114][ T8554] bond0 (unregistering): Released all slaves [ 848.160980][T15076] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 848.264686][ T5909] mdc800 3-1:0.0: probe fails -> wrong Number of Configuration [ 848.277550][ T5909] usb 3-1: USB disconnect, device number 26 [ 848.345405][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.350953][T14996] hsr_slave_0: entered promiscuous mode [ 848.353231][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.369968][T14996] hsr_slave_1: entered promiscuous mode [ 848.376199][T14996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 848.385510][T14996] Cannot create hsr debugfs directory [ 848.501324][T15092] sock: sock_set_timeout: `syz.1.2956' (pid 15092) tries to set negative timeout [ 848.616634][T15094] netlink: 'syz.1.2957': attribute type 298 has an invalid length. [ 848.693763][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.728113][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.033712][ T8554] hsr_slave_0: left promiscuous mode [ 849.039694][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.073544][ T8554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.124861][T15104] FAULT_INJECTION: forcing a failure. [ 849.124861][T15104] name failslab, interval 1, probability 0, space 0, times 0 [ 849.153566][T15104] CPU: 0 UID: 0 PID: 15104 Comm: syz.2.2961 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 849.153592][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 849.153603][T15104] Call Trace: [ 849.153610][T15104] [ 849.153617][T15104] dump_stack_lvl+0x241/0x360 [ 849.153653][T15104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.153682][T15104] ? __pfx__printk+0x10/0x10 [ 849.153710][T15104] ? __kmalloc_noprof+0xb5/0x4c0 [ 849.153735][T15104] ? __pfx___might_resched+0x10/0x10 [ 849.153760][T15104] should_fail_ex+0x40a/0x550 [ 849.153784][T15104] should_failslab+0xac/0x100 [ 849.153824][T15104] __kmalloc_noprof+0xdd/0x4c0 [ 849.153846][T15104] ? find_entry+0x207/0x250 [ 849.153867][T15104] ? __register_sysctl_table+0xcbe/0x1430 [ 849.153894][T15104] __register_sysctl_table+0xcbe/0x1430 [ 849.153928][T15104] ? __pfx___register_sysctl_table+0x10/0x10 [ 849.153955][T15104] ? is_module_address+0x27/0x50 [ 849.153975][T15104] ? register_net_sysctl_sz+0x33e/0x3b0 [ 849.154002][T15104] nf_lwtunnel_net_init+0x56/0xf0 [ 849.154031][T15104] ops_init+0x31e/0x590 [ 849.154054][T15104] ? __asan_memset+0x23/0x50 [ 849.154081][T15104] ? lockdep_init_map_type+0xa1/0x910 [ 849.154107][T15104] setup_net+0x287/0x9e0 [ 849.154128][T15104] ? __pfx_down_read_killable+0x10/0x10 [ 849.154157][T15104] ? __pfx_setup_net+0x10/0x10 [ 849.154191][T15104] copy_net_ns+0x33f/0x570 [ 849.154217][T15104] create_new_namespaces+0x425/0x7b0 [ 849.154250][T15104] unshare_nsproxy_namespaces+0x124/0x180 [ 849.154274][T15104] ksys_unshare+0x57d/0xa70 [ 849.154303][T15104] ? __pfx_ksys_unshare+0x10/0x10 [ 849.154325][T15104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 849.154350][T15104] ? do_syscall_64+0x100/0x230 [ 849.154379][T15104] __x64_sys_unshare+0x38/0x40 [ 849.154400][T15104] do_syscall_64+0xf3/0x230 [ 849.154423][T15104] ? clear_bhb_loop+0x35/0x90 [ 849.154453][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.154477][T15104] RIP: 0033:0x7fc40218cda9 [ 849.154492][T15104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.154507][T15104] RSP: 002b:00007fc402fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 849.154527][T15104] RAX: ffffffffffffffda RBX: 00007fc4023a5fa0 RCX: 00007fc40218cda9 [ 849.154540][T15104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 849.154550][T15104] RBP: 00007fc402fed090 R08: 0000000000000000 R09: 0000000000000000 [ 849.154561][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.154571][T15104] R13: 0000000000000000 R14: 00007fc4023a5fa0 R15: 00007ffeaff721b8 [ 849.154597][T15104] [ 849.154605][T15104] sysctl could not get directory: [ 849.314220][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.317124][T15104] / [ 849.327778][ T8554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.332115][T15104] net -12 [ 849.481707][ T8554] veth0_macvtap: left promiscuous mode [ 849.491649][ T8554] veth1_vlan: left promiscuous mode [ 849.501538][ T8554] veth0_vlan: left promiscuous mode [ 849.509949][T11861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 849.525647][T11861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 849.550013][T11861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 849.558190][T11861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 849.567358][T11861] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 849.577809][T11861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 850.087523][ T8554] team0 (unregistering): Port device team_slave_1 removed [ 850.131718][ T8554] team0 (unregistering): Port device team_slave_0 removed [ 850.860114][T15115] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 851.108484][T15115] team0 (unregistering): Port device team_slave_0 removed [ 851.122375][T15115] team0 (unregistering): Port device team_slave_1 removed [ 851.148291][T15106] virt_wifi0 speed is unknown, defaulting to 1000 [ 851.179730][T15117] lo: entered promiscuous mode [ 851.211396][T15116] lo: left promiscuous mode [ 851.242753][T14996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 851.389864][T14996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 851.402705][ T8554] IPVS: stop unused estimator thread 0... [ 851.415432][T15125] netlink: 'syz.5.2967': attribute type 298 has an invalid length. [ 851.442026][T14996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 851.496670][T14996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 851.634407][T11861] Bluetooth: hci3: command tx timeout [ 852.442209][T15140] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 852.527828][T15106] chnl_net:caif_netlink_parms(): no params data found [ 852.580775][T14996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.808529][T15146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 852.829091][T14996] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.948654][T15106] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.956883][T15106] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.964261][T15106] bridge_slave_0: entered allmulticast mode [ 852.972194][T15106] bridge_slave_0: entered promiscuous mode [ 852.985296][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.992534][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.793820][T11861] Bluetooth: hci3: command tx timeout [ 853.856823][T15106] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.865821][T15106] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.873002][T15106] bridge_slave_1: entered allmulticast mode [ 853.915056][T15106] bridge_slave_1: entered promiscuous mode [ 853.932745][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.939934][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.201795][T15106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.223157][T15159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2975'. [ 854.409074][T15106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.551230][T15106] team0: Port device team_slave_0 added [ 854.584481][T15106] team0: Port device team_slave_1 added [ 854.719993][T15106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.733801][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.761678][T15106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.776601][T15106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.783919][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.949785][T15106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.029509][T14996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.940272][T11861] Bluetooth: hci3: command tx timeout [ 856.185733][T15106] hsr_slave_0: entered promiscuous mode [ 856.192171][T15106] hsr_slave_1: entered promiscuous mode [ 856.524756][T15106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 856.532352][T15106] Cannot create hsr debugfs directory [ 856.631959][T14996] veth0_vlan: entered promiscuous mode [ 856.757853][T14996] veth1_vlan: entered promiscuous mode [ 856.770498][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'. [ 856.839647][T15106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.871235][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2983'. [ 857.007865][T15201] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input25 [ 857.224610][T15106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.836751][T15106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.857050][T15210] IPv6: Can't replace route, no match found [ 857.877940][T14996] veth0_macvtap: entered promiscuous mode [ 857.915022][T14996] veth1_macvtap: entered promiscuous mode [ 857.963691][T11861] Bluetooth: hci3: command tx timeout [ 858.056181][T15106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.111240][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.135346][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.176334][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.222883][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.248504][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.259615][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.270734][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.281539][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.291574][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.302158][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.316201][T14996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.373550][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 858.513546][ T9] usb 2-1: device descriptor read/64, error -71 [ 858.612410][T15106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 858.625857][T15106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 858.635468][T15106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 858.663950][T15106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 858.980407][T15227] nbd: socks must be embedded in a SOCK_ITEM attr [ 859.651645][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.664076][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 859.673723][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.813422][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.833894][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.833929][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.833946][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.833964][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.833978][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.834004][T14996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.834019][T14996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.835457][T14996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.842499][T15232] geneve2: entered promiscuous mode [ 859.842521][T15232] geneve2: entered allmulticast mode [ 859.892477][T14996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.892512][T14996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.892538][T14996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.892565][T14996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.973528][ T9] usb 2-1: device descriptor read/64, error -71 [ 860.088251][ T9] usb usb2-port1: attempt power cycle [ 860.188702][T14126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.275018][T14126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.317752][ T6598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.351879][ T6598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.390668][T15106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.403545][T12329] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 860.423593][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 860.454725][ T9] usb 2-1: device descriptor read/8, error -71 [ 860.482318][T15106] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.510271][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.517508][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.547590][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.554752][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.562223][T12329] usb 3-1: Using ep0 maxpacket: 32 [ 860.587921][T12329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 860.605419][T12329] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 860.614373][T12329] usb 3-1: config 7 has no interface number 0 [ 860.620511][T12329] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 860.639473][T12329] usb 3-1: config 7 interface 187 has no altsetting 0 [ 860.652398][T12329] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 860.663693][T12329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.693873][T12329] usb 3-1: Product: syz [ 860.703512][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 860.711600][T12329] usb 3-1: Manufacturer: syz [ 860.716517][T12330] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 860.734190][T12329] usb 3-1: SerialNumber: syz [ 860.748107][T15236] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 860.756272][ T9] usb 2-1: device descriptor read/8, error -71 [ 860.885431][ T9] usb usb2-port1: unable to enumerate USB device [ 860.892130][T12330] usb 6-1: Using ep0 maxpacket: 8 [ 860.905125][T12330] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 860.928220][T12330] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 860.953500][T12330] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 860.972914][T15106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.973541][T12330] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 860.998980][T12329] usb 3-1: Limiting number of CPorts to U8_MAX [ 861.019601][T12329] usb 3-1: Unknown endpoint type found, address 0x07 [ 861.046780][T12330] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.063455][T12329] usb 3-1: Not enough endpoints found in device, aborting! [ 861.097783][T12330] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 861.108342][T12330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.127962][T15251] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 861.134617][T15251] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 861.135860][T15106] veth0_vlan: entered promiscuous mode [ 861.163324][T15251] vhci_hcd vhci_hcd.0: Device attached [ 861.205460][ T9] usb 3-1: USB disconnect, device number 27 [ 861.220482][T15106] veth1_vlan: entered promiscuous mode [ 861.279976][T15256] [ 861.279988][T15256] ====================================================== [ 861.279996][T15256] WARNING: possible circular locking dependency detected [ 861.280005][T15256] 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 Not tainted [ 861.280015][T15256] ------------------------------------------------------ [ 861.280022][T15256] syz.1.2997/15256 is trying to acquire lock: [ 861.280032][T15256] ffff888011f30468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_write+0x1c6/0x1a30 [ 861.280085][T15256] [ 861.280085][T15256] but task is already holding lock: [ 861.280091][T15256] ffff888022e95140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x71a/0xf70 [ 861.280140][T15256] [ 861.280140][T15256] which lock already depends on the new lock. [ 861.280140][T15256] [ 861.280147][T15256] [ 861.280147][T15256] the existing dependency chain (in reverse order) is: [ 861.280155][T15256] [ 861.280155][T15256] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 861.280182][T15256] lock_acquire+0x1ed/0x550 [ 861.280203][T15256] __mutex_lock+0x19c/0x1010 [ 861.280225][T15256] autofs_notify_daemon+0x71a/0xf70 [ 861.280249][T15256] autofs_wait+0x10b8/0x1b30 [ 861.280271][T15256] autofs_mount_wait+0x170/0x330 [ 861.280293][T15256] autofs_d_automount+0x555/0x710 [ 861.280315][T15256] __traverse_mounts+0x2ba/0x580 [ 861.280336][T15256] step_into+0x5e5/0x10b0 [ 861.280356][T15256] path_lookupat+0x16f/0x450 [ 861.280378][T15256] filename_lookup+0x2a3/0x670 [ 861.280399][T15256] kern_path+0x35/0x50 [ 861.280421][T15256] lookup_bdev+0xc5/0x290 [ 861.280442][T15256] resume_store+0x1a0/0x710 [ 861.280459][T15256] kernfs_fop_write_iter+0x3a0/0x500 [ 861.280483][T15256] vfs_write+0xacf/0xd10 [ 861.280526][T15256] ksys_write+0x18f/0x2b0 [ 861.280552][T15256] do_syscall_64+0xf3/0x230 [ 861.280575][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.280601][T15256] [ 861.280601][T15256] -> #1 (&of->mutex){+.+.}-{4:4}: [ 861.280631][T15256] lock_acquire+0x1ed/0x550 [ 861.280652][T15256] __mutex_lock+0x19c/0x1010 [ 861.280674][T15256] kernfs_fop_write_iter+0x1ea/0x500 [ 861.280699][T15256] iter_file_splice_write+0xbfa/0x1510 [ 861.280718][T15256] do_splice+0xd68/0x18b0 [ 861.280737][T15256] __se_sys_splice+0x2e0/0x450 [ 861.280756][T15256] do_syscall_64+0xf3/0x230 [ 861.280779][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.280803][T15256] [ 861.280803][T15256] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 861.280832][T15256] validate_chain+0x18ef/0x5920 [ 861.280859][T15256] __lock_acquire+0x1397/0x2100 [ 861.280889][T15256] lock_acquire+0x1ed/0x550 [ 861.280911][T15256] __mutex_lock+0x19c/0x1010 [ 861.280933][T15256] pipe_write+0x1c6/0x1a30 [ 861.280953][T15256] __kernel_write_iter+0x4b3/0x950 [ 861.280980][T15256] __kernel_write+0x120/0x180 [ 861.281007][T15256] autofs_notify_daemon+0x72d/0xf70 [ 861.281033][T15256] autofs_wait+0x10b8/0x1b30 [ 861.281056][T15256] autofs_mount_wait+0x170/0x330 [ 861.281080][T15256] autofs_d_automount+0x555/0x710 [ 861.281105][T15256] __traverse_mounts+0x2ba/0x580 [ 861.281125][T15256] step_into+0x5e5/0x10b0 [ 861.281146][T15256] path_lookupat+0x16f/0x450 [ 861.281170][T15256] filename_lookup+0x2a3/0x670 [ 861.281194][T15256] kern_path+0x35/0x50 [ 861.281217][T15256] lookup_bdev+0xc5/0x290 [ 861.281239][T15256] resume_store+0x1a0/0x710 [ 861.281257][T15256] kernfs_fop_write_iter+0x3a0/0x500 [ 861.281282][T15256] vfs_write+0xacf/0xd10 [ 861.281308][T15256] ksys_write+0x18f/0x2b0 [ 861.281334][T15256] do_syscall_64+0xf3/0x230 [ 861.281357][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.281382][T15256] [ 861.281382][T15256] other info that might help us debug this: [ 861.281382][T15256] [ 861.281390][T15256] Chain exists of: [ 861.281390][T15256] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 861.281390][T15256] [ 861.281425][T15256] Possible unsafe locking scenario: [ 861.281425][T15256] [ 861.281432][T15256] CPU0 CPU1 [ 861.281438][T15256] ---- ---- [ 861.281445][T15256] lock(&sbi->pipe_mutex); [ 861.281460][T15256] lock(&of->mutex); [ 861.281476][T15256] lock(&sbi->pipe_mutex); [ 861.281495][T15256] lock(&pipe->mutex); [ 861.281509][T15256] [ 861.281509][T15256] *** DEADLOCK *** [ 861.281509][T15256] [ 861.281515][T15256] 5 locks held by syz.1.2997/15256: [ 861.281526][T15256] #0: ffff888030adcd38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320 [ 861.281579][T15256] #1: ffff8880359fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd10 [ 861.281640][T15256] #2: ffff88804665a888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 861.281695][T15256] #3: ffff8881412ffa58 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 861.281764][T15256] #4: ffff888022e95140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x71a/0xf70 [ 861.281832][T15256] [ 861.281832][T15256] stack backtrace: [ 861.281841][T15256] CPU: 1 UID: 0 PID: 15256 Comm: syz.1.2997 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 861.281861][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 861.281872][T15256] Call Trace: [ 861.281878][T15256] [ 861.281892][T15256] dump_stack_lvl+0x241/0x360 [ 861.281923][T15256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.281952][T15256] ? __pfx__printk+0x10/0x10 [ 861.281984][T15256] print_circular_bug+0x13a/0x1b0 [ 861.282014][T15256] check_noncircular+0x36a/0x4a0 [ 861.282044][T15256] ? __pfx_check_noncircular+0x10/0x10 [ 861.282072][T15256] ? lockdep_lock+0x123/0x2b0 [ 861.282100][T15256] validate_chain+0x18ef/0x5920 [ 861.282126][T15256] ? __pfx_lockdep_unlock+0x10/0x10 [ 861.282152][T15256] ? validate_chain+0x11e/0x5920 [ 861.282190][T15256] ? __pfx_validate_chain+0x10/0x10 [ 861.282219][T15256] ? __pfx_validate_chain+0x10/0x10 [ 861.282244][T15256] ? __pfx_validate_chain+0x10/0x10 [ 861.282270][T15256] ? __bfs+0x368/0x6f0 [ 861.282292][T15256] ? __pfx_hlock_conflict+0x10/0x10 [ 861.282318][T15256] ? __pfx___bfs+0x10/0x10 [ 861.282344][T15256] ? mark_lock+0x9a/0x360 [ 861.282368][T15256] __lock_acquire+0x1397/0x2100 [ 861.282396][T15256] lock_acquire+0x1ed/0x550 [ 861.282416][T15256] ? pipe_write+0x1c6/0x1a30 [ 861.282439][T15256] ? __pfx_lock_acquire+0x10/0x10 [ 861.282462][T15256] ? __pfx___might_resched+0x10/0x10 [ 861.282506][T15256] __mutex_lock+0x19c/0x1010 [ 861.282528][T15256] ? pipe_write+0x1c6/0x1a30 [ 861.282550][T15256] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 861.282573][T15256] ? do_raw_spin_unlock+0x13c/0x8b0 [ 861.282593][T15256] ? pipe_write+0x1c6/0x1a30 [ 861.282615][T15256] ? __pfx___mutex_lock+0x10/0x10 [ 861.282641][T15256] ? __schedule+0x18c4/0x4c40 [ 861.282665][T15256] pipe_write+0x1c6/0x1a30 [ 861.282690][T15256] ? __pfx___schedule+0x10/0x10 [ 861.282710][T15256] ? __pfx_lock_release+0x10/0x10 [ 861.282736][T15256] ? __pfx_pipe_write+0x10/0x10 [ 861.282755][T15256] ? lock_acquire+0x264/0x550 [ 861.282779][T15256] ? preempt_schedule+0xe1/0xf0 [ 861.282799][T15256] ? preempt_schedule_common+0x84/0xd0 [ 861.282823][T15256] __kernel_write_iter+0x4b3/0x950 [ 861.282854][T15256] ? __pfx_pipe_write+0x10/0x10 [ 861.282875][T15256] ? __pfx___kernel_write_iter+0x10/0x10 [ 861.282913][T15256] ? __mutex_lock+0x3b0/0x1010 [ 861.282936][T15256] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 861.282957][T15256] ? iov_iter_kvec+0x4e/0x180 [ 861.282985][T15256] __kernel_write+0x120/0x180 [ 861.283013][T15256] ? autofs_notify_daemon+0x71a/0xf70 [ 861.283040][T15256] ? __pfx___kernel_write+0x10/0x10 [ 861.283068][T15256] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 861.283091][T15256] ? from_kgid_munged+0x1fe/0x7a0 [ 861.283114][T15256] ? __pfx_from_kgid_munged+0x10/0x10 [ 861.283137][T15256] ? kasan_save_track+0x51/0x80 [ 861.283154][T15256] ? kasan_save_track+0x3f/0x80 [ 861.283189][T15256] ? __kasan_kmalloc+0x98/0xb0 [ 861.283209][T15256] ? autofs_notify_daemon+0x489/0xf70 [ 861.283238][T15256] autofs_notify_daemon+0x72d/0xf70 [ 861.283265][T15256] ? vfs_write+0xacf/0xd10 [ 861.283297][T15256] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 861.283342][T15256] ? __init_waitqueue_head+0xae/0x150 [ 861.283369][T15256] autofs_wait+0x10b8/0x1b30 [ 861.283403][T15256] ? __pfx_autofs_wait+0x10/0x10 [ 861.283432][T15256] ? autofs_d_automount+0x54b/0x710 [ 861.283458][T15256] ? __pfx_lock_release+0x10/0x10 [ 861.283482][T15256] ? _raw_spin_unlock+0x28/0x50 [ 861.283501][T15256] ? path_has_submounts+0x10b/0x170 [ 861.283532][T15256] autofs_mount_wait+0x170/0x330 [ 861.283561][T15256] autofs_d_automount+0x555/0x710 [ 861.283590][T15256] __traverse_mounts+0x2ba/0x580 [ 861.283618][T15256] step_into+0x5e5/0x10b0 [ 861.283644][T15256] ? __up_read+0x2c2/0x6b0 [ 861.283675][T15256] ? __pfx___up_read+0x10/0x10 [ 861.283703][T15256] ? make_vfsuid+0x52/0xa0 [ 861.283733][T15256] ? __pfx_step_into+0x10/0x10 [ 861.283755][T15256] ? lookup_fast+0x17a/0x590 [ 861.283783][T15256] ? walk_component+0x18d/0x410 [ 861.283810][T15256] path_lookupat+0x16f/0x450 [ 861.283840][T15256] filename_lookup+0x2a3/0x670 [ 861.283871][T15256] ? __pfx_filename_lookup+0x10/0x10 [ 861.283914][T15256] ? rcu_is_watching+0x15/0xb0 [ 861.283944][T15256] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 861.283968][T15256] ? getname_kernel+0x140/0x2f0 [ 861.283997][T15256] kern_path+0x35/0x50 [ 861.284022][T15256] lookup_bdev+0xc5/0x290 [ 861.284043][T15256] ? rcu_is_watching+0x15/0xb0 [ 861.284072][T15256] ? __pfx_lookup_bdev+0x10/0x10 [ 861.284099][T15256] ? __asan_memcpy+0x40/0x70 [ 861.284131][T15256] resume_store+0x1a0/0x710 [ 861.284151][T15256] ? kernfs_fop_write_iter+0x1ea/0x500 [ 861.284171][T15256] ? __pfx_resume_store+0x10/0x10 [ 861.284190][T15256] ? sysfs_kf_write+0x182/0x2a0 [ 861.284219][T15256] ? __pfx_sysfs_kf_write+0x10/0x10 [ 861.284249][T15256] kernfs_fop_write_iter+0x3a0/0x500 [ 861.284279][T15256] vfs_write+0xacf/0xd10 [ 861.284307][T15256] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 861.284327][T15256] ? __pfx_vfs_write+0x10/0x10 [ 861.284350][T15256] ? __fget_files+0x2a/0x410 [ 861.284377][T15256] ? __fget_files+0x2a/0x410 [ 861.284405][T15256] ksys_write+0x18f/0x2b0 [ 861.284436][T15256] ? __pfx_ksys_write+0x10/0x10 [ 861.284460][T15256] ? do_syscall_64+0x100/0x230 [ 861.284479][T15256] ? do_syscall_64+0xb6/0x230 [ 861.284498][T15256] do_syscall_64+0xf3/0x230 [ 861.284523][T15256] ? clear_bhb_loop+0x35/0x90 [ 861.284553][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.284579][T15256] RIP: 0033:0x7f504898cda9 [ 861.284594][T15256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.284607][T15256] RSP: 002b:00007f50498d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 861.284621][T15256] RAX: ffffffffffffffda RBX: 00007f5048ba5fa0 RCX: 00007f504898cda9 [ 861.284632][T15256] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000008 [ 861.284640][T15256] RBP: 00007f5048a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 861.284651][T15256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.284663][T15256] R13: 0000000000000000 R14: 00007f5048ba5fa0 R15: 00007ffe28e15a78 [ 861.284685][T15256] [ 861.287650][T15106] veth0_macvtap: entered promiscuous mode [ 861.291047][T15106] veth1_macvtap: entered promiscuous mode [ 861.343484][ T8] vhci_hcd: vhci_device speed not set [ 861.366701][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.437125][ T8] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 861.500458][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.534826][T15260] 9pnet_fd: Insufficient options for proto=fd [ 861.539264][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.539284][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.539314][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.747113][T12330] usb 6-1: usb_control_msg returned -32 [ 861.753705][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.769486][T12330] usbtmc 6-1:16.0: can't read capabilities [ 861.772347][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.021684][T15256] PM: Image not found (code -6) [ 862.026143][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.033253][T15257] PM: Image not found (code -6) [ 862.043388][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.542290][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.552339][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.562820][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.579345][T15106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.589812][T15253] vhci_hcd: connection reset by peer [ 862.594636][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.605888][ T12] vhci_hcd: stop threads [ 862.609100][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.610126][ T12] vhci_hcd: release socket [ 862.610190][ T12] vhci_hcd: disconnect device [ 862.621623][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.640473][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.650342][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.660819][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.670660][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.681086][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.691292][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.701740][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.711591][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.725521][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.736721][T15106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.749957][T15106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.758722][T15106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.767670][T15106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.776680][T15106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.807508][T15106] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 862.829810][T14126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.830926][T15106] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 862.849996][T14126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.867334][T14126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.876525][T14126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.646694][ T5942] usb 6-1: USB disconnect, device number 2 [ 866.583482][ T8] vhci_hcd: vhci_device speed not set [ 870.115135][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.121505][ T1295] ieee802154 phy1 wpan1: encryption failed: -22