last executing test programs: 27.332760039s ago: executing program 0 (id=2821): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x1100, 0x0, 0x0, &(0x7f0000005540), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r4, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="66696c746572000000000000000040000000000000000000000000000057670002"], 0x48) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x800, {0x4, 0x2, 0x3, 0x69, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d00003413000000000000000caa000000090000020000000004b427180010"}}) 26.17378068s ago: executing program 0 (id=2824): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000']) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff000000000100081d8d"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 25.693813359s ago: executing program 0 (id=2827): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b0004ff00000000bfa200000000000007020000f8ffffffb703002e76e964bcc33239cd520008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r6, 0x1, 0x48, &(0x7f0000000040), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000080)=0x2) socket(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x0, 0x84) r8 = socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000140)="c1c872f5fe578a99a07e84aa7f3564dbd1973e71f29894ca9b8be15ac2db0588c4e723a26c8009d6bc5510ef763ce6c81180160a22637523b1d9a38b8be52b8adcd61366ca056413a88abee23535db5ff71523888158d144d3d4eb7ac6e87817fd9bf8de", 0x64}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) 22.206453136s ago: executing program 0 (id=2832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xd9f}, {0x0, 0x2}}}]}}]}, 0x45c}}, 0x0) 21.829342364s ago: executing program 0 (id=2834): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x22840, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x3) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x7) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)=0x2) (async) futex(&(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x2) 13.316737743s ago: executing program 4 (id=2848): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.890232517s ago: executing program 4 (id=2850): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400230300000000000000000a000000", @ANYRES32=r5, @ANYBLOB="080008000004000014000100ff05"], 0x34}}, 0x0) eventfd(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970766c616e3100000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000780)={&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000002c0)=[0x0], &(0x7f0000000300), 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000002e80)=ANY=[@ANYBLOB="c40d0000", @ANYRES16=r10, @ANYBLOB="05000000000000000000010000000600060000000000480d0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e2403008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000f402098064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030000000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b14000400020000000000000000000000000000003808008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb050003000000000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f00000105000300000000000600010002000000080002007f0000010500030000000000060001000a000d0000000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000020500030000000000a0000080060001000a00000014000200ff01000000000000000000000000000105000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a0000000000000000000000000000000000ffffac1e0001000000007c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e000000105000300000000007c000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac1e00010500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES32=r11, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800070000000000"], 0xdc4}}, 0x0) 10.805770815s ago: executing program 4 (id=2853): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4c054) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001600b7030000000000008500000001000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.19271464s ago: executing program 4 (id=2854): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000a80)=@newtaction={0x14}, 0x14}}, 0x0) 10.05998028s ago: executing program 4 (id=2855): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "82d2f3", 0x0, 0x29, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000cc0)={0x0, 0x0, 0x13, 0x7}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000de07000abdb743934709e7bcc110c585a9071425f6de4cb2d95d552aa6f4e519ab41a7bf0ff9be9a917dcf1d28fd4a46a9188783d13b0472e65d16f68ef9d11c7ccd963452f0b44ebaf240b248413a1db9c4d0e4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffff0000680002002bbd7000fcdbdf2502000200020000000800010001000000"], 0x20}}, 0x48000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x30) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0/../file0/../file0\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x20, &(0x7f0000006680)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000027c0), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x38011, r6, 0xfffff000) fadvise64(r5, 0x81, 0x0, 0x5) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000002800)={0xb, 0x77, 0x2, 0x4}, 0xb) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) move_mount(r4, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x110) 8.074067677s ago: executing program 2 (id=2856): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = io_uring_setup(0x7c0a, &(0x7f0000000000)={0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000800)={0x2, 0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x0}, 0x20) syz_emit_ethernet(0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000014aa0b0390780300ecc278883400004500000000000000002f0000ac14140a00000000000000000000000000000023994b041975060cc512a6087ebab1e46231266b06cbe58c"], 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002ac0)=[{0x0}, {0x0}], &(0x7f0000002b40)=[0x0, 0x3], 0x2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$caif_stream(0x25, 0x1, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x0, 0x1}, 0x20) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='oom_score_adj\x00') syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESDEC], 0x0) write$sndseq(r5, &(0x7f0000000280)=[{0x3, 0x41, 0x0, 0x7, @tick=0x8000, {0xe8, 0x4}, {0x6, 0x6}, @control={0x0, 0x5, 0xffffffff}}], 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.999476005s ago: executing program 4 (id=2857): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.230850658s ago: executing program 1 (id=2860): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x248000, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x8) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="03e7a6eced05ea7deeb19055b8752631f08295b3f02a53d5305ce5735e17cf3777aecd6410570edb0760414431280aa4b9f4cfe52a3ab4c00481bfbd464b916c4e4e936d55e4925439d1c66afd5d8cffdefc2f73f1740cb64b282f4ff20db5145f484a24fac4af7ef34d4dfdcb328c928e186d3facec9c43705583431c10a98acb", 0x81}, {&(0x7f0000000180)="db7931b364964857c32e8fdeeec77cb85fe546ef06011cd5e7b957fea9cf70484e4dbf6a767b3c110bc8e35331c9ecff7ad3247c8ed2ce0902af4fd1a1477fd90eda3c33c052237b5c0a1e4e8086990f9313214ba954d64f03e8131ab0cb7027db4276e22a99a05d6d5cb1ac91b27e39e0441c06a9b7ab3b651e3a40062cf67572b946690c63469fad5b6c7c2306d7af4b4983cbd2d47078b0db061a49c5f9fb650b14f9605b6157f95e546d1833beffa224f46704b13b8a9a637f4fe8dab0fe80f034b833bd5c94c7a9e2f1907d544a1ae461f8b8be96faadf6ac", 0xdb}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000002c0)="2461d9729168c6d2cba46524ab59d5218be1a5c0a9a05400956dc33b7d1a3d994c6098cb3349da932bec60c9d23813a2d4161ae051a0edd250deee4321de8fe7580eec6a12ee207d48d3b66f84cd746443e867d93f20960b00f572dc0bc6995f5bdc6e817b8e6deb80fe3d514fa31d45d11623fb354631e58e0a7aef4f3e9b8dccaf89385a4877a9fd089a62c0cd17da3321613eab8ff641ebc4bd114c9be03d8664749e53c1a031579f005b237898eb189be4016a8c69c9af7640b12c2c5073af741596726eb7284feedff328de11a8674d1954fd6739fab0bf063f18d4e138c9ddacbe29afb1", 0xe7}], 0x4, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @private=0xa010102}}}], 0xc8}}, {{&(0x7f0000000580)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="35b56163e716a1032741651779886b4a66f258df7d0a282fa5e6b2501805bb8f7c2dbe7d0b88cf08c772265b3d9fbec5ba30966e3fe6ccc994b08e96c59387170744d5b6ec1538695b42a54456a259e6", 0x50}, {&(0x7f0000000640)="bab9dea715d6e6eac7cabd5d6d82caa8420d24d6fd1f0fb9051a2484ab98301d9fd6ba8199c7f37e25d1bc0d782843a4e475dc52971c5e6c857f2c2d095148", 0x3f}], 0x2, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff0000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x48}}], 0x2, 0x2000c450) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1544010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08000a0014"], 0x44}}, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x72}, "1e9ea42a53ab218b6b9e1e922a77c82d94929eeda59e0551008ce67f5bb48b0c56c2d48a306182c87dd683a81641e14218a6a11145458dc4cfb47315343a2aa2b14cb1724fc3d884d8fa760e340a0c41a512fa5950135ea803458dc5322a106099a2b3de07310e734fa2d36bd84a079674e0"}, 0x76) socket$netlink(0x10, 0x3, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x248000, 0x0) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async) socket$netlink(0x10, 0x3, 0x8) (async) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="03e7a6eced05ea7deeb19055b8752631f08295b3f02a53d5305ce5735e17cf3777aecd6410570edb0760414431280aa4b9f4cfe52a3ab4c00481bfbd464b916c4e4e936d55e4925439d1c66afd5d8cffdefc2f73f1740cb64b282f4ff20db5145f484a24fac4af7ef34d4dfdcb328c928e186d3facec9c43705583431c10a98acb", 0x81}, {&(0x7f0000000180)="db7931b364964857c32e8fdeeec77cb85fe546ef06011cd5e7b957fea9cf70484e4dbf6a767b3c110bc8e35331c9ecff7ad3247c8ed2ce0902af4fd1a1477fd90eda3c33c052237b5c0a1e4e8086990f9313214ba954d64f03e8131ab0cb7027db4276e22a99a05d6d5cb1ac91b27e39e0441c06a9b7ab3b651e3a40062cf67572b946690c63469fad5b6c7c2306d7af4b4983cbd2d47078b0db061a49c5f9fb650b14f9605b6157f95e546d1833beffa224f46704b13b8a9a637f4fe8dab0fe80f034b833bd5c94c7a9e2f1907d544a1ae461f8b8be96faadf6ac", 0xdb}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000002c0)="2461d9729168c6d2cba46524ab59d5218be1a5c0a9a05400956dc33b7d1a3d994c6098cb3349da932bec60c9d23813a2d4161ae051a0edd250deee4321de8fe7580eec6a12ee207d48d3b66f84cd746443e867d93f20960b00f572dc0bc6995f5bdc6e817b8e6deb80fe3d514fa31d45d11623fb354631e58e0a7aef4f3e9b8dccaf89385a4877a9fd089a62c0cd17da3321613eab8ff641ebc4bd114c9be03d8664749e53c1a031579f005b237898eb189be4016a8c69c9af7640b12c2c5073af741596726eb7284feedff328de11a8674d1954fd6739fab0bf063f18d4e138c9ddacbe29afb1", 0xe7}], 0x4, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @private=0xa010102}}}], 0xc8}}, {{&(0x7f0000000580)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="35b56163e716a1032741651779886b4a66f258df7d0a282fa5e6b2501805bb8f7c2dbe7d0b88cf08c772265b3d9fbec5ba30966e3fe6ccc994b08e96c59387170744d5b6ec1538695b42a54456a259e6", 0x50}, {&(0x7f0000000640)="bab9dea715d6e6eac7cabd5d6d82caa8420d24d6fd1f0fb9051a2484ab98301d9fd6ba8199c7f37e25d1bc0d782843a4e475dc52971c5e6c857f2c2d095148", 0x3f}], 0x2, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff0000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x48}}], 0x2, 0x2000c450) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1544010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08000a0014"], 0x44}}, 0x0) (async) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x72}, "1e9ea42a53ab218b6b9e1e922a77c82d94929eeda59e0551008ce67f5bb48b0c56c2d48a306182c87dd683a81641e14218a6a11145458dc4cfb47315343a2aa2b14cb1724fc3d884d8fa760e340a0c41a512fa5950135ea803458dc5322a106099a2b3de07310e734fa2d36bd84a079674e0"}, 0x76) (async) 4.98608011s ago: executing program 1 (id=2861): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) (async) r1 = gettid() ptrace$setopts(0x4206, r1, 0xfffffffffffffffd, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000016c0)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007d40)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)}, {0x0}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001cfeff000000000001000000cb0adb4d83eaf6973767ce33d0bd020000007907e357948e1b681605a883e52740fedbeafbd60d682ddcd41f9773c05b5b91d09f057493c4a9294d5572eae8556b12573a000000000000000000000000000000fcc937682d539b331c66d729d774ca046e69248c09c7ba6cb34004a71b75a18fdc08b6140f51b5286880af58729dc3700136d16b9d643b726200131ad436e6fd12025a9d8358179ad2971d62b9916d60e69179a2dbea1cd4b8b19d6aec", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x4048080}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x120, 0x8000}}, {{&(0x7f00000035c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000007ac0)=ANY=[@ANYBLOB="1c00000000000000010000000260e500", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x20000080}}, {{&(0x7f0000007b40)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000007c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="070000001400000ec7bf00000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x8800}}], 0x4, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4) (async) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) socket$inet_tcp(0x2, 0x1, 0x0) 4.909074389s ago: executing program 2 (id=2862): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs={0x1}, 0x6e) listen(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r5 = creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd2\xb2\x10\f\x0e\xcef\xd4\x0f\xe2\xbe>S\x0f\x17o\xa4\x1c\t{I\xfb5Ar\x84\x89\xc9\xdd\xff\xdf\xd3\xf1\xd9\xe4\xb8\fub\xff\x961\xf2\xcd\\\xc1\xbb\xc2\xc0\xd3\xf7\x10\xda\xfe\xb6/\x15\x17\xbb\xe2\x02\xdaZ\xac\x13\xde\xab\x8f\xac\xa6U`A\xa5\b\x00\x00\x00\x1c\x01a\x83\xc5X\xed?\x82\x8f\\Vr\xda\xf6\x82\xe6,m \"-\xf2\xbf\x12\x95|\xaf\xe0\xd5\x0e0\xde:\xcf'}]}, 0x76) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000d000000"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000067d06f20070a640065170000000109022d00010000000009046e00033e137d44bf265ac2849c0006f909050c03000280052409050b030004060908"], 0x0) 4.844114833s ago: executing program 1 (id=2863): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) write$eventfd(r2, &(0x7f00000000c0), 0x8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) creat(&(0x7f0000000180)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 4.584229272s ago: executing program 0 (id=2836): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="fd", 0x1}], 0x1, &(0x7f0000000d00)=ANY=[], 0x218}, 0x0) (async) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc56eb4d42dbbf6c41786780df56e5be7070101080a4e7719b506a0977b", 0xffeb}], 0x1}, 0x0) (async) close(r1) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = epoll_create(0x401) (async) r5 = userfaultfd(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3}) (async) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3.95715875s ago: executing program 2 (id=2864): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0xb4, &(0x7f0000000280)=""/180, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x6, 0xae}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x3, 0x5, 0x5, 0xa}], 0x10, 0xa}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mmap(&(0x7f0000b20000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000005c0), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000de2f1c954900e60500"}}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102", @ANYRES64], 0x0) 3.697321362s ago: executing program 1 (id=2867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000406a052c030000000000010902240001000000000000092100000001220500090581030000000000bec9bcfd57924e88f8109052e409"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0022050002000b741cb976"], 0x0}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0xd0, 0x1a0, 0x300, 0x3d0, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7c}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'ip6tnl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00', @remote}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES16=r1, @ANYBLOB="8000f2000a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)="fe18cdfe864a76", 0x7}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1}}], 0x1, 0x20000002, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8c010000", @ANYRES16=0x0, @ANYBLOB="1a032bbd7000ffdbdf25130000002c00018008000100", @ANYRES32=r7, @ANYRESOCT=0x0, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000300030000000840000000000000080001004759bd1632501612d874d3de5206c0fc1de06846426685c62aed1990992764bb6906cb70cbef1d3ca4cc467082ef165e2d9ed45e4c4d1a8ed95e4e86c9fa8aadab4e77716e32ddf2e9241712f205f69617e80800"/118, @ANYRES32=r7, @ANYBLOB="28000180080003000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f766c616e0000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d727030000000000000000000001400020070696d3672656700000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020065727370616e3000000000000000000008000100", @ANYRESOCT=r5, @ANYBLOB="48000180080003000200000008000300030000000800030001000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000300020000001400018008000100", @ANYRES32=r7, @ANYBLOB="00000000da4aa536", @ANYRES32=r7, @ANYBLOB="1c00018008000100", @ANYRES64=r6, @ANYBLOB="080003000000000008000100", @ANYRES32=r7, @ANYBLOB], 0x18c}, 0x1, 0x0, 0x0, 0x20000841}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x402, 0x0) 3.515852385s ago: executing program 3 (id=2868): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f00000000c0), &(0x7f0000000180)}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket(0x10, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0xf75bc000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tgkill(0x0, 0x0, 0x11) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000040)={0x4, "2a4d274344c9b258f4ba08956b8efcfd0319dac0fa4abe51d047e5742eb28bf7"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3.054297253s ago: executing program 2 (id=2869): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c00028006000100000000", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x0) 2.312687258s ago: executing program 2 (id=2870): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_pidfd_open(r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f00000011c0)={0xa, 0x4, 0xfd}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000, 0x0, 0x0, 0xa00}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x43403d05, &(0x7f0000000140)={{0x40000002}}) syz_usb_connect(0x2, 0x6e, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x9c, 0xfb, 0x2d, 0x10, 0x4f2, 0xb67c, 0xf791, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7}}]}}, 0x0) 2.310474082s ago: executing program 3 (id=2871): mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000052000100ffffffff000000000a00"], 0x28}}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth1_macvtap\x00'}, 0x18) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x8000000000000000, &(0x7f00000005c0)={&(0x7f0000000580)}}, 0x18) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x7c}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000640)={{r5}, "1f9deeb8cb661b28369ac86e592c51aa4ebaaf587680c35240b6afd8687b648d3d29dfcd4138e5008092494b4e1ce496c1b488c916dfaddab06c916b4bca00de10269d2142b88071073e636801c3da4d123681d0aea85d01d6efd233943997bd2350ff7ba3cab38fdb05a4db829999b750709b2945848a7df703c0d79fa5b0e1cbd156b19e54445edda105a7e6f5607c40bf3f803ae3c77ac337db094c41984af895189d898e30f247f93d702ba7b0ad3129ddfdc5e279b3c8d392f547b4e1477aec702f9450a402572446dc27a06283a41147632790988c1e7f334c05a1688f98b6e30626990864a6bd32c870db6e74609ed7cb1acf2ae66cad649902c4ba7095f964a846efd57c431d3dc66bf5f31bbed3fc2f86e7332fcfc8acabc12d91c624ab853a5416311c529300da64e7086538905a5e182e9f3c307868117a62ef962f270688c448c9f5cf34bb0eefb696e9078d3187266dc647555c07df1e5356a46e9764715524fa88320d4f68cde2eea82b3c9ad4a9492bd9f2fd16b1093a4a58f2f98e0f9039d404928ac36d517b1624f002fdc70d5e412c8f547b22b8aff3db0d27319f65ba3679149fe6f0e1c6b3cfaa2b161ce99449da55b21cb2ad89286351e6ceb557d72f2d86d96c3dc4c263807601d5e4a28cffa62fb41e477638f296dfe85a30ba1cc47e62955a2832b188fd2ef9f8f3944384452345859dc183e7681560707bb3881c1eaac9d5e01f9b7e6412f75841cb792913c81ed511e323b3f4536137cba13d49b4f04986e7aa9c78e3b7569b8f36e6aa99126be22ccec0dde67b2472e5ec5afddedaf0f89625f9f03c9a640875b578360930311966ad8c08b686f545fced4196fde21ecb600c6ffda45e1ef0daf219763b3ee1e5b7e331702cd10b09db0c8f4aac6b3b4864ceeed10b0c7ac3a5ef3d14847024f60f38515a264a8e23407f8dd0486bf2bd7ce593fc06118ff7e048c2bc0d68e6d37b2a7984d71faaa6b9e79d2324e0f98d9e4c474078d4ed10143ae154273146b00be275a42f51ccb37339e7ebdd47345c053dd6b432561e699414829688b63e9fa769cbfb819247978182c535cb3e60b6b14572311991f35d355e2c3ce4f13cbf1c9400e3f9518326ec92707b80370ffbfcb145a758069bc55f5b3ac9673323968b88122b119a9b5cc1283f4a5157443453073c353e8452ef8cb41640698c3f89fb5bdf698535ff0d4e648bf47a266ef7855ba0a8c78a8225cce4207165c58ec98c8e9e36224fe45844f12336c8ce3fbb499fec97a8bd2c69220aaccb7a24d44dc3c7be840133130387edb932e4b82c33e6c5cf3a61b47c1649ad45d526a572d2dbd03b376b9d76014d04424aef1ab84fa05e1821af13b97e500312761622f6ab97d996a0337263fca04e0ee5e7b1f5b40187f89995314f93c0d27b147a31c25614b430b2c25a88bdce4f4afbab279d2e816d1d9aa6aca9648016cb9f8b7d5a13633b6dd6830060a8b50d8e5ac3bd5e7a83dff88059fa2668c9799116ab3556577134a3dc864160cb807b20b82cfd8e4bc93d110f5a0a938ff104ac846d96dce2f6d7efa54a9ef5cda215d034eb33611fa896da437c7c8d40d8c88e9ebd99fb7fdba90f95fc28c24ec7092dd461af4c7573280681ee78eb738e2b9bbd4934b16c8a0a7dd213cd2f11557c078ba66b1d6b72bcb7fa1f653b88b80024c26315d292e073ce85c157fa78038b4342b74470d3de4bcee095898e50f3677a7e89d0006f33d2ce45f3ba1d958bdf4dbee2516b5b7a86aaa2adad3508ecde6293550ba804ed53e11fe424558f134ea2c3806dee3f3ca7b136c452526805900c576492fa1858faf1f4ba5053624b1d39f07f840bf95fab7be5aa701074e29661b58b096d695cf88327d226ad9aa1b0646e5ddf915c9448e9d632a4aaf5df0212a96e6a9c35b4943993a2a1a11511b63a78c2ce4c8e27690808363dfc2a2ccf51b52628f27eb4a97ad39400a37ad248430ed6cc94f8312050689b97ee21a902d395088445d8fe8653181c89d5ac9cce75ec148d690574c73fbb5765bcbbc66cbd7117e5f418c651263d301e728aed43f49ee8d10d58ee811b9510447dc65d24fca808460dfc617c82f0307ae1d341179d434cc98c4a0f206a77021f243f9f37abc7e3b79e2f22380babd5c0b0bcf6a511464c823f8fc9bc8e43d4603a9f3d5824c869f23fca1078de1cd43a53a06c48dbfb721ce19b76711ca10773cea3655d944f137630a3d2f54bae570d6db1c2f17c496780be6ff15592195922b96e6c1cc5dfa02036a611c4fbab31bb6278442afebdd10b991da2d12fdf3f4b05222bdd55c5f61de2b0c9943f8b0996e6b137ba29147384a2755dad2ad4cebb686cf3645fef442c23062cd5fdd6a9fb636e9ccabaff9397d00f151096ae22af18c6b04852e383f17060dc646c89594c335fd097a1a8a479059daea095a3b9be5f4b527be2b137e451e801fe1618bed29245d08bf95e5755bc812568fe70691bed70feddd5e678fe3617548cf27d4431317abca7c35233002211ebda332a11114869bc1a67755c1e141f029842509bced93d2a809bdc0dd9c61e16de5874a6638a4707e7c665cc728c156e44b60f5c25095983b31c76a17ed1ab297d98f85c8c1559902584d1550f84abc2d375763daeb1ccbd0fe0454c8f60724dc2fbbffd832368085181624fcc24f21894c6e93093ae503f65cdd54a0216415c4579e9fc1a0bc947996fb41ee1eeff6ee1d4fdfa7c55091d58d3bdced588b84f16ac307b54f14370af74296a2fcc85a44fa3384fc3c5297cebc115b2cf8097c9e56da3c756775f2e224cc7d197f8b94629742aa35d3932949689b87eccdc83095267b2b0acf33c47a42002e29d2dbb0879801bf93ec7893e74cae974e203aade93484ae301edf7e67919db372718e96212176449839b35acb1b95046697703a11e2d5294199537622729a4221bd6279b98ce88ee8736cc5ea52b132e59bd9b35d8bbb82f8064a9912f7b002e40aef4e334296db90d490cffa16cd054949f4e6851174ad7774def25e1d849388c5970ea2cdfd0f9512490b1e44cf47f31679a643535ce5dfe3614aed3b4e14c7ba5e937a8f3d1f769cbcdbac3e2d735dd50df5500fb2d1fb3ebc126e23873dd057b9a7d4ac1deebdecc356d6e6d4535044d6f57d32fe38455e5f006d2b0b732947f492c0871763aad07af1a5837c04c740d566671fd43e50cca2c96f385cee5a2d30959062911ae131b900602a4b399b3ad43cb9e27a3cb120578d290584ddbe442e00f4b1da2961660bd8f8722bd553dc5c78af8b5d122a9ceedb08e63f13498527902b737ec24265f65c25b8581f9df9cfb90990838a4dcf835aa338ba41264701228285600ea60fa20505581ae00505199ce175f3a7e017606266616c8ef69b3a2e6aaa1b318b1b57870c1bde523feaa6f4e43a0853484982b78784918670b46d5df1b4592f36658bac7cb4a56601d26ce66cfa1505e0cc35cf33f9537e7ba8813b3cb7738dcd180a8d1062885023d77c95c780abf620f46d586efd1bc1159f665041dbd5f7632a52555d4a8fab949d6dc8ea5f26d9045774f48890c55a13a747b373b6ef7bf3a16e78569b054a36e5a221f0536a4659f568b3f7a2c0ee3663851936fd77666903c816493a60a1d5b7c0cc57ceee5f80d768fe0dc4ff4554df70cf0fe22592e5bdb62833a46e2bd111c5bcb6a6ae7991862a709e25e681f279aa47411b502776c6636aa741d0086160f4fa670723901d758e19a6930b9d6183ab4ace57ba8bd193722b7dfb75d32676c54c014fd35ccaee818a09966e000fa2645081dcc8f0d6a51f7d0a48b787124a77bae9bd374125710eaea42cb78960e110a02903c5a5da719c2fe5f10eacc8608f165ca154eb02ac0a68aa95060115cad62f53c490411869ff8b9d3e351ee79f45b9a3aeb1a5ead4654f90ab5f4755e320d848277e9d75c1331132b614232f11ac97b32698dabaafc3ccabedd8e591f08d76de1e4218231d5c4faadc0611230d68f25c2535bcc4c804354144bd89f9ca5a81436f32993ffbd90e7179c9b6862a35e7dee410765f888725609082c84911a7561f57b18fab4a869a9ae96f71bcc6a66439cb480147ce539c702c2f9e5c9f61f9ac31308506195e768bd2786f69be0c4ac62b69e528c07e7b11bd1ecf684e06f0cf801225c2c13aa73261b60bf9df6b6df1055706b05a0fc2b5c489edce236d0a3059bbed50d78613f6bf0cbc9e8a8e02162cabb5bd3ad3f291428ff537f28ef9b067d2d0066a23067478f745ebcccfba596c17d88aab1187002ec4a5d344fd376dfccde81b6680d1f436016129c2d99dc25d3d5f69bb80771a96348fcbb05cd94f26b455f2b53cd43f243e0cbd1e9655077a04630c9065bb3cc69d2bb0996dbace222ca8e7172d617fd0f04217579344e07a4836e0a4f051af46c3dd6dcdddb99ebe501427ce00edc065dac9adeb33a7b9899e0b75140e8e4d6bc795e531dfdd61a131b1150fe49cc6d0ddf5562d5bc9b89a90b16c6f175c4b8b17cd3eda7d1c3cebbe5fa2eef8a22f8fd8efd12e0acd976df9a3abed31d8dd28e3a875a426ac89412ccddd23c4a71485dceb4ec31dc41163f9c962eee13cb7025c6e4039c54c59d0b88d592f6651fe0725b66bfd4e903993c4adbe87e43cace28906e8401d4197125cfe8daa182bcfc7a5d6f05b0fe6e4a54df3691a0524feabcf72423a6302a197f307d0f5db66781932fce05ac6a97a9411b6f1fd1dd779453553d7934dea19a7bb1ccd0c1c02f961e574baf65311597fc8078d4c56be0cdf185635482fdb7c6f17ce0823b62317b369f2ff0a5590e037990ab3eb8abcdb995b7cca2b6211b5fb91c128c153b95a438cfaa35e242c02a75df689293525d1746ac7cfa0ae9f38eb23c0bd357d88c605419de774b24bf05d621de83a045942a248120188741a1558fda4fe3277dcb23caaa06f2c185067c152749c20b044d33424298ab0bcca0541e8ffe2b1657d0f2f61c61c4c848b77c3b5d14dc7aa781f0cc68e0472fe1e105bb9876ef93f269e52ee82d643be1e46ee291d489d6ccdf059a5740a5d554030a082aecaff2dfbe40b585dfcc03c792f4d4db032b4f87cb8f80e6aff7f4487015d74181125039250608b1110975d9756317045b7de931c31be17b8c9b83db11e2767d37e0e2e5af41e3032190ee5f228a9be7179889ac0b94c3335b34bd3a4c7948d8bcff0cfc9e109a6088b5070698bca5eae619e8c907ff77f3d940108f24e2f40450da68ab4f6d1c6822f52f59f1981221465bd972cdf99d2af6bc52e510a406189dbe917c4cf1d7be60d45302d93b36472c8fcc0b53889d28fd23ef979f19972778470bd7715a1397a56d68a75549603556efa0da0f826fc90a08968b177362368b04679d9f7e7fca7ac0f30858c19ff6564a0d20c4f71fb64370cf0376f73bbf6310d347153cd44f447182166a42a79e58dac2bd50e3069a897b20c9659d7ca96df9906e673eebe7a683e0f8e1ad5fb32a00551a074d96773613dd8e4b9a3200dffd00a62e3d7950803d99f22565c1ac0ed73232cf6c380727c7c11878a1ba18f7754ff02e9fc49238089f55e38d95b8f88edc8390f166d7dabc94a8a0146e71bba8da17602557c3a33e71262721636cd91646497941f27fbda5f2e61fe214f2a482bd0aed0399cd1b9c1560e88935b257566a5e36e1a8a36116f56e62935848d341ca62b08c58475ee066afc215f8ffb90c9a69efb7078f92"}) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000400)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x4bfa, &(0x7f0000000100)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.081592662s ago: executing program 3 (id=2872): ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x1) 1.886221688s ago: executing program 3 (id=2873): timer_create(0x5, &(0x7f00000000c0)={0x0, 0x880036, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_delete(r0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000003880)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) 1.596283286s ago: executing program 2 (id=2874): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3e, 0xbc, 0x67, 0x40, 0x525, 0xa4a3, 0x1c92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0xe6, 0xef, 0xa2, 0x0, [], [{{0x9, 0x5, 0xc, 0x11}}]}}]}}]}}, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pwrite64(r1, &(0x7f0000000440)="1e", 0x1, 0x2) syz_usb_control_io(r0, 0x0, 0x0) 593.674881ms ago: executing program 3 (id=2875): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40040) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000a80)=[{0x2, 0x0, 0x3, &(0x7f00000003c0)="93106c"}, {0x9, 0x1c00, 0x0, 0x0}], 0x2}) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/45, 0x2d}, 0x20) 444.083896ms ago: executing program 1 (id=2876): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x3, 0x2, 0x23, 0x2, 0x2}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\x02'}], 0xa, "c9ef8508e2771620200c7030f4"}, 0x1a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000021c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, '\x00', "4623a9f6040839230fb7feac776dd8dc", "00008000", "078500"}, 0x28) recvmmsg(r3, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/24, 0x18}], 0x1}}], 0x1, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) shutdown(r3, 0x0) 341.10127ms ago: executing program 3 (id=2877): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) write$eventfd(r2, &(0x7f00000000c0), 0x8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) creat(&(0x7f0000000180)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 0s ago: executing program 1 (id=2878): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @private=0xa010101, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x4, 0xc0}, @noop, @cipso={0x86, 0x16, 0x0, [{0x5, 0x10, "b4ff79d5061f81b964de131b5daf"}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000002c0)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000580)=0x3) write$ppp(r4, &(0x7f0000000280)='\x00!', 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r1) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) fdatasync(r7) r8 = memfd_create(&(0x7f0000000fc0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x1c#\x1c\xc9\x006U\xf8\x14D\b\x0f\xfd\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-:\xb6\xbc\x00\xa5\xa8\xe58\x00\x9fM\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8\x00\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.ooZ+)\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8\xdbQ\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xa0\xef\xccUxhg\xffY\xe6\x83\xa6r\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\xa0\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.}\x89\xac\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x02\xab\t*\xbf\x89\xea\xaf\xd4\xe7)G\xc7\xd2\x81\xccT\xfa\"\xb3\xbe\xa1r\x9a \xd9\tb\xf1\x9aa\xdb\xffp\xc3\x9dFx\x18}\xb0/M\x12\x1a\xc1\xe8\n\x06\xac\xd2\xf1\x00\xcf!\x9274\x18\xc5U\xf7>\x12qsH\xbd\x1f|\x82\xb9\xcb\xe7H_\x95\x9f\xc1P\x16\x8a\xc4nxh\xde)x\xaa8\xe8\x8d\xe3pr\xba\xfeA\x89op\xde\xd4\xe1=\x8b\x9d\x1b\x9c\xe2F\xd0\xe1>\xd2\xe7\r;\x8fcq\xf1\xc0\fWG\xfb\xae\xe9\xa4\x0fAR{\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x96\xa4/\xc6-\x1e\xd9)\xab\xfe\v\rt\xd4p\xe3}\x87\xa7\x9cm2*\x8c\x02\xf3\xc2aJ\x1cQ\xe7]\xc1I\x8d\xc5;\x12k=\xab\xd8i(/\x05\xac\x9f\x13\xb9\x13\x8a\x87C&V\xdb\xc0\x11\xf1Y_\xfcc\xf8\x94D\xefV\xf7\xb6\xfaY4Q\xb6\xbe\xe8\x92\xa8U4\x8d\xf2<-\x05', 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r8, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "4a8d480f65491adf0fbc0b54d9391fec4647e0a1c2934cfde8e80d7f6e591f6a320847487bfbe55e35015fcc1824cd27189b63760775c5831a0866ee64818b40"}, 0x48, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x2, 0x1000, 0xb0, &(0x7f0000000380)="a2ff06c52a0958d2eea4004f0de4f03368a08756e199838ffdd39a009f7acef49a18759c83f525716719b31b2771982617d5f7a4780c577aef1d0cbceff1c72ff1bc585ca78c43984b02a954def82fd787845c1b60159b9990a01aa9c8faa1c065e13ab83044f4c56274ab6be43381778681a4bc946d98b237cbee882389d226ff36e6a35a1f7ee898a46cf991ea815bf6daefcb3715eb35663ff6582aa737237c6e1416529639f6c1327dd66f0b29b1", 0x8a, 0x0, &(0x7f0000000440)="f2394df68df40a9e03e9d7f6c16d2e9e89ac46cec062df19cb4bb3bf70fa82e1a21c720861ecf4b0080ce86a24de65143d2043c8ea82e60d3ef0518b5fbb8d941b93a9aa675db591b73db699c44dc67ca5bc921d0847df35394bc4a8842ed93c060fefa2dd563e3609cb9c292bbf934a17bcd89f71616ce6b2bd05c6ab78bb226d3958df408f9da8d28e"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x200000, 0x0) kernel console output (not intermixed with test programs): 39 using dummy_hcd [ 910.366504][ T5293] usb 4-1: device descriptor read/64, error -71 [ 910.434362][ T5241] Bluetooth: hci1: command tx timeout [ 910.535479][ T5465] usb 5-1: device descriptor read/64, error -71 [ 910.636841][ T5293] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 910.657785][ T5465] usb usb5-port1: attempt power cycle [ 910.798233][ T5293] usb 4-1: device descriptor read/64, error -71 [ 910.927592][ T5293] usb usb4-port1: attempt power cycle [ 911.075477][ T5465] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 911.126015][ T5465] usb 5-1: device descriptor read/8, error -71 [ 911.260211][T17853] netlink: 'syz.2.2646': attribute type 11 has an invalid length. [ 911.273197][T17780] chnl_net:caif_netlink_parms(): no params data found [ 911.335718][ T5293] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 911.391140][ T5293] usb 4-1: device descriptor read/8, error -71 [ 911.418497][ T5465] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 911.456277][ T5465] usb 5-1: device descriptor read/8, error -71 [ 911.586878][ T5465] usb usb5-port1: unable to enumerate USB device [ 911.664680][T17780] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.677881][ T5293] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 911.684491][T17780] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.704139][T17780] bridge_slave_0: entered allmulticast mode [ 911.712628][T17780] bridge_slave_0: entered promiscuous mode [ 911.718617][ T5293] usb 4-1: device descriptor read/8, error -71 [ 911.732636][T17780] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.746282][T17780] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.753860][T17780] bridge_slave_1: entered allmulticast mode [ 911.762481][T17780] bridge_slave_1: entered promiscuous mode [ 911.805389][ T2635] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 911.835829][ T5293] usb usb4-port1: unable to enumerate USB device [ 911.860564][T17780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.889333][T17780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.984925][T17780] team0: Port device team_slave_0 added [ 911.995925][ T2635] usb 3-1: Using ep0 maxpacket: 32 [ 912.007490][ T2635] usb 3-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2 [ 912.021973][T17780] team0: Port device team_slave_1 added [ 912.033854][ T2635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.056901][ T2635] usb 3-1: Product: syz [ 912.061153][ T2635] usb 3-1: Manufacturer: syz [ 912.081229][ T2635] usb 3-1: SerialNumber: syz [ 912.094750][ T2635] usb 3-1: config 0 descriptor?? [ 912.151694][T17780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.169755][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.217301][T17780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.247138][T17780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.261193][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.287873][T17780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.445700][T17780] hsr_slave_0: entered promiscuous mode [ 912.460153][T17780] hsr_slave_1: entered promiscuous mode [ 912.476386][T17780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 912.485194][T17780] Cannot create hsr debugfs directory [ 912.515469][T11637] Bluetooth: hci1: command tx timeout [ 912.635974][T17876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.676675][T17876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.086243][ T2635] usb 3-1: USB disconnect, device number 14 [ 913.215210][T17908] input: syz0 as /devices/virtual/input/input78 [ 913.392104][T11637] Bluetooth: hci0: command 0x0406 tx timeout [ 914.406472][T17780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 914.438306][T17780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 914.500599][T17780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 914.550917][T17780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 914.585554][ T5241] Bluetooth: hci1: command tx timeout [ 914.676092][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 914.727468][T17949] vlan2: entered promiscuous mode [ 914.914517][T17780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.976668][T17780] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.033688][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.041063][ T5486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.109736][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.117066][ T5486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.398133][T17780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.007564][T17780] veth0_vlan: entered promiscuous mode [ 916.022597][T17982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2672'. [ 916.057396][T17780] veth1_vlan: entered promiscuous mode [ 916.321853][T17780] veth0_macvtap: entered promiscuous mode [ 916.369020][T17780] veth1_macvtap: entered promiscuous mode [ 916.461768][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.502804][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.544763][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.587415][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.622469][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.656783][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.697982][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.734723][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.765253][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.795475][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.823849][T17780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.942038][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.982171][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.020350][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.085498][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.125811][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.173554][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.205497][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.232154][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.248472][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.275000][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.342185][T17780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.445236][T17780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.458140][T17780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.472569][T17780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.502135][T17780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.829990][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.871669][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.006296][ T5490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.014275][ T5490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.442255][ T5490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.512943][T18038] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 918.636041][ T58] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 918.685512][ T5490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.856228][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 918.869043][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 918.870377][ T5490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.897126][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 918.926042][ T58] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 918.971360][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 919.051044][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 919.091387][ T58] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 919.185403][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.204533][ T58] usb 1-1: Product: syz [ 919.216683][ T58] usb 1-1: Manufacturer: syz [ 919.234172][ T58] usb 1-1: SerialNumber: syz [ 919.276862][ T58] usb 1-1: config 0 descriptor?? [ 919.296937][ T58] redrat3 1-1:0.0: Couldn't find all endpoints [ 919.424887][ T5490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.523225][ T46] usb 1-1: USB disconnect, device number 119 [ 919.803991][T11637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 919.819568][T11637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 919.834378][T11637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 919.851967][T11637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 919.868227][T11637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 919.881630][T11637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 919.938093][T18059] macvlan0: entered promiscuous mode [ 919.960529][T18059] macvlan0: left promiscuous mode [ 920.107907][ T5490] bridge_slave_1: left allmulticast mode [ 920.132262][ T5490] bridge_slave_1: left promiscuous mode [ 920.157332][ T5490] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.185499][ T58] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 920.199430][ T5490] bridge_slave_0: left allmulticast mode [ 920.218966][ T5490] bridge_slave_0: left promiscuous mode [ 920.235187][ T5490] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.398259][ T58] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 920.418996][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.449906][ T58] usb 2-1: config 0 has no interface number 0 [ 920.479815][ T58] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 920.509281][ T58] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.558397][ T58] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 920.587770][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.615562][ T5465] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 920.624960][ T58] usb 2-1: Product: syz [ 920.641121][ T58] usb 2-1: Manufacturer: syz [ 920.656068][ T58] usb 2-1: SerialNumber: syz [ 920.694476][ T58] usb 2-1: config 0 descriptor?? [ 920.811250][ T5465] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 920.826523][ T5465] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 920.837164][ T5465] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 920.848648][ T5465] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 920.862851][ T5465] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 920.874677][ T5465] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 920.883449][ T5465] usb 1-1: Product: syz [ 920.888251][ T5465] usb 1-1: Manufacturer: syz [ 920.952820][ T5465] cdc_wdm 1-1:1.0: skipping garbage [ 920.967236][ T5465] cdc_wdm 1-1:1.0: skipping garbage [ 921.001551][ T5465] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 921.105968][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'. [ 921.208451][ T58] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 921.266680][ T58] usb 2-1: USB disconnect, device number 18 [ 921.946014][T11637] Bluetooth: hci0: command tx timeout [ 921.946602][ T5490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.991526][ T5490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.046458][ T5490] bond0 (unregistering): Released all slaves [ 922.171118][T18095] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 922.238202][ T5291] usb 1-1: USB disconnect, device number 120 [ 922.376033][ T5490] : left promiscuous mode [ 923.495380][ T5465] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 923.565089][ T5490] hsr_slave_0: left promiscuous mode [ 923.590976][ T5490] hsr_slave_1: left promiscuous mode [ 923.611248][ T5490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.625572][ T46] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 923.633883][ T5490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.664160][ T5490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.694644][ T5490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.745457][ T5465] usb 2-1: Using ep0 maxpacket: 8 [ 923.745493][ T5490] veth1_macvtap: left promiscuous mode [ 923.756840][ T5490] veth0_macvtap: left promiscuous mode [ 923.760238][ T5465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.763226][ T5490] veth1_vlan: left promiscuous mode [ 923.781712][ T5465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.788139][ T5490] veth0_vlan: left promiscuous mode [ 923.792404][ T5465] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 923.811667][ T5465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.828338][ T5465] usb 2-1: config 0 descriptor?? [ 923.844947][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.871958][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 923.888357][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 923.943494][ T46] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 923.972401][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.011589][T18139] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 924.025912][T11637] Bluetooth: hci0: command tx timeout [ 924.043682][ T46] hub 5-1:1.0: bad descriptor, ignoring hub [ 924.106370][ T46] hub 5-1:1.0: probe with driver hub failed with error -5 [ 924.163167][ T46] cdc_wdm 5-1:1.0: skipping garbage [ 924.185089][ T46] cdc_wdm 5-1:1.0: skipping garbage [ 924.204172][ T46] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 924.233191][ T46] cdc_wdm 5-1:1.0: Unknown control protocol [ 924.248020][ C0] wdm_int_callback: 253 callbacks suppressed [ 924.248044][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 924.260671][ C0] wdm_int_callback: 253 callbacks suppressed [ 924.260692][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 924.272887][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 924.320539][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 924.320561][ T29] audit: type=1326 audit(1725671549.268:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.2703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f492a57cef9 code=0x0 [ 924.468172][ T5287] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 924.700260][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 924.713111][ T5287] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 924.738546][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.782554][ T5287] usb 3-1: Product: syz [ 924.797926][ T5287] usb 3-1: Manufacturer: syz [ 924.821551][ T5465] usbhid 2-1:0.0: can't add hid device: -71 [ 924.833953][ T5465] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 924.849976][ T5287] usb 3-1: SerialNumber: syz [ 924.899173][ T5465] usb 2-1: USB disconnect, device number 19 [ 924.911219][ T5287] usb 3-1: config 0 descriptor?? [ 925.154363][T18153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.189310][T18153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.245811][ T46] usb 5-1: USB disconnect, device number 42 [ 925.771463][T18173] netlink: 'syz.4.2712': attribute type 11 has an invalid length. [ 925.905855][ T46] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 925.917549][ T5490] team0 (unregistering): Port device team_slave_1 removed [ 926.093039][ T5490] team0 (unregistering): Port device team_slave_0 removed [ 926.105535][T11637] Bluetooth: hci0: command tx timeout [ 926.134277][T18174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.148807][ T46] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 926.161605][T18174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.170180][ T46] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 926.206317][ T46] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 926.258975][ T46] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 926.291536][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.350001][T18169] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 926.565576][ T58] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 926.756776][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 926.799371][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.893781][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.948295][ T58] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 926.992256][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.060989][ T58] usb 2-1: config 0 descriptor?? [ 927.423356][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 927.444735][ T58] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 927.488550][ T58] usb 2-1: USB disconnect, device number 20 [ 927.496577][ T46] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 927.514772][ T46] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input80 [ 928.164931][T18173] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2712'. [ 928.185473][T11637] Bluetooth: hci0: command tx timeout [ 928.327516][T18173] bridge0: entered promiscuous mode [ 928.388017][ T5287] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 928.415086][T18069] chnl_net:caif_netlink_parms(): no params data found [ 928.434790][ T5287] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 928.827407][ T5287] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 928.880621][ T29] audit: type=1326 audit(1725671553.828:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 928.947939][ T29] audit: type=1326 audit(1725671553.858:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 928.972081][ T29] audit: type=1326 audit(1725671553.878:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 928.996093][ T5287] usb 3-1: USB disconnect, device number 15 [ 928.998205][ T58] usb 1-1: USB disconnect, device number 121 [ 929.003632][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 929.105773][ T29] audit: type=1326 audit(1725671553.878:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.160537][ T29] audit: type=1326 audit(1725671553.878:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.202157][ T29] audit: type=1326 audit(1725671553.888:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.226707][ T29] audit: type=1326 audit(1725671553.888:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.274308][ T29] audit: type=1326 audit(1725671553.888:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.326729][T18209] FAULT_INJECTION: forcing a failure. [ 929.326729][T18209] name failslab, interval 1, probability 0, space 0, times 0 [ 929.340598][T13896] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 929.350919][ T29] audit: type=1326 audit(1725671553.888:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.383252][T18069] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.396723][T18209] CPU: 0 UID: 0 PID: 18209 Comm: syz.0.2718 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 929.407582][T18209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 929.417684][T18209] Call Trace: [ 929.420995][T18209] [ 929.423949][T18209] dump_stack_lvl+0x241/0x360 [ 929.428651][T18209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.433867][T18209] ? __pfx__printk+0x10/0x10 [ 929.438470][T18209] ? fs_reclaim_acquire+0x93/0x140 [ 929.443601][T18209] ? __pfx___might_resched+0x10/0x10 [ 929.448926][T18209] should_fail_ex+0x3b0/0x4e0 [ 929.453634][T18209] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 929.459417][T18209] should_failslab+0xac/0x100 [ 929.464119][T18209] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 929.469854][T18209] __kmalloc_noprof+0xd8/0x400 [ 929.474634][T18209] ? kfree+0x4e/0x360 [ 929.478629][T18209] tomoyo_realpath_from_path+0xcf/0x5e0 [ 929.484211][T18209] tomoyo_path_number_perm+0x23a/0x880 [ 929.489697][T18209] ? tomoyo_path_number_perm+0x208/0x880 [ 929.495354][T18209] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 929.501391][T18209] ? __fget_files+0x29/0x470 [ 929.506002][T18209] ? __fget_files+0x3f6/0x470 [ 929.510696][T18209] ? __fget_files+0x29/0x470 [ 929.515314][T18209] security_file_ioctl+0x75/0xb0 [ 929.520295][T18209] __se_sys_ioctl+0x47/0x170 [ 929.524903][T18209] do_syscall_64+0xf3/0x230 [ 929.529422][T18209] ? clear_bhb_loop+0x35/0x90 [ 929.534120][T18209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.540034][T18209] RIP: 0033:0x7f9ad337cef9 [ 929.544466][T18209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.564306][T18209] RSP: 002b:00007f9ad40d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.572743][T18209] RAX: ffffffffffffffda RBX: 00007f9ad3536058 RCX: 00007f9ad337cef9 [ 929.580731][T18209] RDX: 0000000020000080 RSI: 000000008010743f RDI: 0000000000000003 [ 929.588713][T18209] RBP: 00007f9ad40d4090 R08: 0000000000000000 R09: 0000000000000000 [ 929.596695][T18209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.604704][T18209] R13: 0000000000000001 R14: 00007f9ad3536058 R15: 00007f9ad365fa28 [ 929.612741][T18209] [ 929.618608][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.624999][ T29] audit: type=1326 audit(1725671553.888:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.626592][T18069] bridge_slave_0: entered allmulticast mode [ 929.658826][T18209] ERROR: Out of memory at tomoyo_realpath_from_path. [ 929.665878][ T29] audit: type=1326 audit(1725671553.888:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.692417][T18069] bridge_slave_0: entered promiscuous mode [ 929.760831][ T29] audit: type=1326 audit(1725671553.888:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.837679][T18069] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.838376][T13896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 929.844868][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.858344][ T29] audit: type=1326 audit(1725671553.888:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.913505][T13896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 929.975827][T18069] bridge_slave_1: entered allmulticast mode [ 929.982490][T13896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 929.992175][ T29] audit: type=1326 audit(1725671553.898:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.992236][ T29] audit: type=1326 audit(1725671553.968:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.992288][ T29] audit: type=1326 audit(1725671553.968:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.992337][ T29] audit: type=1326 audit(1725671553.968:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 929.992389][ T29] audit: type=1326 audit(1725671553.998:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f923e57cef9 code=0x7ffc0000 [ 930.122722][T18069] bridge_slave_1: entered promiscuous mode [ 930.178424][T18216] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2721'. [ 930.188170][T13896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 930.255518][T18069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.276861][T13896] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 930.287123][ T5465] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 930.291768][T18069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.339938][T13896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.387855][T13896] usb 5-1: Product: syz [ 930.404067][T13896] usb 5-1: Manufacturer: syz [ 930.425152][T13896] usb 5-1: SerialNumber: syz [ 930.465058][T13896] usb 5-1: config 0 descriptor?? [ 930.497656][ T5465] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.518896][T13896] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 930.560956][ T5465] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 930.624069][ T5465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 930.662473][T18069] team0: Port device team_slave_0 added [ 930.694243][T18069] team0: Port device team_slave_1 added [ 930.761636][ T5465] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 930.817706][ T5465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.858637][T18213] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.883392][ T5465] hub 3-1:1.0: bad descriptor, ignoring hub [ 930.921503][ T5465] hub 3-1:1.0: probe with driver hub failed with error -5 [ 930.962395][ T5465] cdc_wdm 3-1:1.0: skipping garbage [ 930.974907][T18069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.997703][ T5465] cdc_wdm 3-1:1.0: skipping garbage [ 931.006737][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.042587][ T5465] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 931.062684][ T5465] cdc_wdm 3-1:1.0: Unknown control protocol [ 931.093149][T18069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.193738][T18069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.206225][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.212921][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.219174][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.225801][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.232068][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.238678][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.244945][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.251550][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.257866][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.264478][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.270733][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.277328][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.283572][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.290162][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.296445][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.303037][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.309280][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.315906][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.322242][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 931.328947][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 931.391510][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.443030][T18069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.593106][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 931.616963][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'. [ 931.793334][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.800113][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.887943][T13896] scsi host1: usb-storage 5-1:0.0 [ 931.947857][T13896] usb 5-1: USB disconnect, device number 43 [ 932.074374][T18069] hsr_slave_0: entered promiscuous mode [ 932.125792][ T5465] usb 3-1: USB disconnect, device number 16 [ 932.156547][T18069] hsr_slave_1: entered promiscuous mode [ 932.181810][T18069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.201250][T18069] Cannot create hsr debugfs directory [ 932.878858][T18256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 932.898610][T18256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 932.928295][T18256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 932.954796][T18256] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 933.009669][T18256] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 933.073394][T18256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 933.117800][T18256] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 933.154896][T18256] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 933.213709][T18256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 933.216248][T18274] loop2: detected capacity change from 0 to 7 [ 933.263461][T18274] Dev loop2: unable to read RDB block 7 [ 933.272224][T18256] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 933.286993][T18274] loop2: unable to read partition table [ 933.333032][T18256] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 933.340596][T18274] loop2: partition table beyond EOD, truncated [ 933.384359][T18274] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 933.407297][T18256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 933.423352][T18256] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 933.481817][T18256] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 933.902187][T18292] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 934.093942][T18285] misc userio: No port type given on /dev/userio [ 934.125949][T18292] Cannot find del_set index 4 as target [ 934.398786][T18069] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 934.433395][T18069] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 934.488439][T18069] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 934.488756][T13896] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 934.519141][T11637] Bluetooth: hci3: command 0x0406 tx timeout [ 934.568305][T18069] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 934.595560][ T58] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 934.707982][T13896] usb 5-1: device descriptor read/64, error -71 [ 934.797583][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.827202][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.850570][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 934.906031][ T58] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 934.919593][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.936149][ T58] usb 2-1: config 0 descriptor?? [ 934.985656][T11637] Bluetooth: hci2: command 0x0c1a tx timeout [ 935.056134][T13896] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 935.117224][T18069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.136129][ T2635] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 935.155907][T11637] Bluetooth: hci4: command 0x0c1a tx timeout [ 935.164372][T18069] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.211238][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.218497][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.235714][T13896] usb 5-1: device descriptor read/64, error -71 [ 935.243433][T11637] Bluetooth: hci1: command 0x0c1a tx timeout [ 935.349497][ T58] logitech 0003:046D:C293.0038: item fetching failed at offset 5/7 [ 935.365939][T13896] usb usb5-port1: attempt power cycle [ 935.376131][ T58] logitech 0003:046D:C293.0038: parse failed [ 935.391361][ T58] logitech 0003:046D:C293.0038: probe with driver logitech failed with error -22 [ 935.396613][ T2635] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 935.434538][ T2635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.452461][ T2635] usb 3-1: Product: syz [ 935.467275][T11637] Bluetooth: hci0: command 0x0c1a tx timeout [ 935.473271][ T2635] usb 3-1: Manufacturer: syz [ 935.487384][ T8454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.515556][ T2635] usb 3-1: SerialNumber: syz [ 935.527549][ T2635] usb 3-1: config 0 descriptor?? [ 935.541744][ T2635] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 935.561882][T18304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.612417][T18304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.631606][T18304] loop8: detected capacity change from 0 to 7 [ 935.647032][T18304] Dev loop8: unable to read RDB block 7 [ 935.657015][T18304] loop8: unable to read partition table [ 935.667475][T18304] loop8: partition table beyond EOD, truncated [ 935.684364][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.691690][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.709652][T18304] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 935.709652][T18304] ) failed (rc=-5) [ 935.738454][ T5286] usb 2-1: USB disconnect, device number 21 [ 935.826718][T13896] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 935.873518][ T8454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.886306][T13896] usb 5-1: device descriptor read/8, error -71 [ 935.939901][ T2635] gspca_sunplus: reg_w_riv err -71 [ 935.945194][ T2635] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 935.986358][ T2635] usb 3-1: USB disconnect, device number 17 [ 936.073322][ T8454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.165426][T13896] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 936.221621][T13896] usb 5-1: device descriptor read/8, error -71 [ 936.277039][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 936.290971][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 936.310825][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 936.321581][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 936.330922][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 936.338538][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 936.348950][ T8454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.380589][T13896] usb usb5-port1: unable to enumerate USB device [ 936.492927][T18069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.592832][T11637] Bluetooth: hci3: command 0x0406 tx timeout [ 936.704003][T18338] loop2: detected capacity change from 0 to 7 [ 936.716944][T18338] Dev loop2: unable to read RDB block 7 [ 936.730773][T18338] loop2: unable to read partition table [ 936.741239][T18338] loop2: partition table beyond EOD, truncated [ 936.748049][T13896] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 936.761558][T18338] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 936.949575][T13896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.038837][T13896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.066224][T11637] Bluetooth: hci2: command 0x0c1a tx timeout [ 937.075638][T13896] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 937.096098][T13896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.099424][T18347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.116625][T18069] veth0_vlan: entered promiscuous mode [ 937.127248][T13896] usb 2-1: config 0 descriptor?? [ 937.141425][ T8454] bridge_slave_1: left allmulticast mode [ 937.153941][ T8454] bridge_slave_1: left promiscuous mode [ 937.163413][T18347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.184142][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.231695][ T8454] bridge_slave_0: left allmulticast mode [ 937.237943][T11637] Bluetooth: hci4: command 0x0c1a tx timeout [ 937.256727][ T8454] bridge_slave_0: left promiscuous mode [ 937.286229][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.339898][T18331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.361011][T18331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.448431][T18358] xt_recent: Unsupported userspace flags (00000064) [ 937.553514][T11637] Bluetooth: hci0: command 0x0c1a tx timeout [ 937.655877][ T2635] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 937.845941][ T2635] usb 3-1: Using ep0 maxpacket: 16 [ 937.853394][ T2635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.874088][ T2635] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 937.905590][ T2635] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 937.928173][ T2635] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 937.966832][ T2635] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 937.987184][ T2635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 937.995246][ T2635] usb 3-1: SerialNumber: syz [ 938.017045][T18355] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 938.207351][ T8454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.221314][ T8454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.233813][ T8454] bond0 (unregistering): Released all slaves [ 938.369232][T13896] usbhid 2-1:0.0: can't add hid device: -71 [ 938.376153][T13896] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 938.400618][T13896] usb 2-1: USB disconnect, device number 22 [ 938.425829][T11637] Bluetooth: hci1: command tx timeout [ 938.433153][T18370] sctp: [Deprecated]: syz.2.2745 (pid 18370) Use of int in maxseg socket option. [ 938.433153][T18370] Use struct sctp_assoc_value instead [ 938.460071][T18069] veth1_vlan: entered promiscuous mode [ 938.792099][ T8454] hsr_slave_0: left promiscuous mode [ 938.818026][ T8454] hsr_slave_1: left promiscuous mode [ 938.835147][ T8454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.847643][ T8454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.868712][ T8454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.881128][ T8454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.993984][ T8454] veth1_macvtap: left promiscuous mode [ 939.023853][ T8454] veth0_macvtap: left promiscuous mode [ 939.036158][ T8454] veth1_vlan: left promiscuous mode [ 939.056477][ T8454] veth0_vlan: left promiscuous mode [ 939.145690][T11637] Bluetooth: hci2: command 0x0c1a tx timeout [ 939.305458][T11637] Bluetooth: hci4: command 0x0c1a tx timeout [ 939.413647][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 939.429284][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 939.440469][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 939.472931][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 939.483894][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 939.492048][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 939.625744][ T5241] Bluetooth: hci0: command 0x0c1a tx timeout [ 939.703878][T18395] xt_TCPMSS: Only works on TCP SYN packets [ 940.164899][ T5291] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 940.360720][ T2635] usb 3-1: USB disconnect, device number 18 [ 940.375386][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 940.386169][ T5291] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9d.15 [ 940.395765][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=192 [ 940.404031][ T5291] usb 2-1: Product: syz [ 940.427626][ T5291] usb 2-1: Manufacturer: syz [ 940.432286][ T5291] usb 2-1: SerialNumber: syz [ 940.441076][ T5291] usb 2-1: config 0 descriptor?? [ 940.478776][ T5291] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 940.511075][ T5241] Bluetooth: hci1: command tx timeout [ 940.526429][T18400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2753'. [ 940.549001][ T8454] team0 (unregistering): Port device team_slave_1 removed [ 940.685974][ T8454] team0 (unregistering): Port device team_slave_0 removed [ 940.953365][ T5465] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 941.157513][ T5465] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.166261][ T5465] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 941.175675][ T5465] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 941.197754][ T5465] usb 3-1: Manufacturer: syz [ 941.209119][ T5465] usb 3-1: config 0 descriptor?? [ 941.460163][T18400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.482923][T18400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.550607][ T5241] Bluetooth: hci3: command tx timeout [ 941.598646][ T5291] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 941.658760][T18329] chnl_net:caif_netlink_parms(): no params data found [ 941.724969][T18398] bridge0: entered promiscuous mode [ 941.928429][ T5465] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 941.942816][ T5465] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 941.944659][T18069] veth0_macvtap: entered promiscuous mode [ 941.972198][ T5465] usb 3-1: USB disconnect, device number 19 [ 942.151406][T18069] veth1_macvtap: entered promiscuous mode [ 942.237513][T18329] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.244720][T18329] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.262545][T18329] bridge_slave_0: entered allmulticast mode [ 942.295825][T18329] bridge_slave_0: entered promiscuous mode [ 942.308362][T18329] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.316621][T18329] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.323925][T18329] bridge_slave_1: entered allmulticast mode [ 942.355724][T18329] bridge_slave_1: entered promiscuous mode [ 942.367036][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.405449][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.428579][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.443760][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.463400][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.475217][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.496432][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.516842][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.531065][T18069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.585806][ T5241] Bluetooth: hci1: command tx timeout [ 942.768775][T18329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.845612][T18329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.871423][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.902240][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.938883][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.951732][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.962451][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.973450][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.983781][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.995219][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.007320][T18069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.069424][T18398] bridge0: left promiscuous mode [ 943.106529][ T5286] usb 2-1: USB disconnect, device number 23 [ 943.164323][T18426] loop0: detected capacity change from 0 to 128 [ 943.172459][T18426] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 943.180266][T18426] loop0: partition table partially beyond EOD, truncated [ 943.187633][ T2635] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 943.197356][T18426] loop0: p1 size 348879409 extends beyond EOD, truncated [ 943.221731][T18329] team0: Port device team_slave_0 added [ 943.257328][T13383] udevd[13383]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 943.261712][T18329] team0: Port device team_slave_1 added [ 943.316264][T18069] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.340576][T18069] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.362522][T18069] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.372140][T18069] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.393811][ T2635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.406942][ T2635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.418169][ T2635] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 943.435752][ T2635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.459089][ T2635] usb 3-1: config 0 descriptor?? [ 943.509773][T18329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.523501][T18329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.551365][T18329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.591241][T18329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.598819][T18329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.626431][ T5241] Bluetooth: hci3: command tx timeout [ 943.632113][T18329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.674731][T18424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.711191][T18424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.726116][ T5286] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 943.754646][T18424] xt_recent: Unsupported userspace flags (00000064) [ 943.787485][ T2635] usbhid 3-1:0.0: can't add hid device: -71 [ 943.805766][ T2635] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 943.809324][T18329] hsr_slave_0: entered promiscuous mode [ 943.819006][ T2635] usb 3-1: USB disconnect, device number 20 [ 943.833804][T18329] hsr_slave_1: entered promiscuous mode [ 943.843151][T18329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 943.851401][T18329] Cannot create hsr debugfs directory [ 943.864771][T18392] chnl_net:caif_netlink_parms(): no params data found [ 943.929121][ T5286] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 943.947848][ T5286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 943.958065][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.966481][ T5286] usb 2-1: Product: syz [ 943.970717][ T5286] usb 2-1: Manufacturer: syz [ 943.975530][ T5286] usb 2-1: SerialNumber: syz [ 943.992894][T18428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 944.082007][ T8454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.173542][ T5486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.203935][ T5486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.225559][T18436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.261427][ T5286] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 944.287916][T18436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.310927][ T5286] usb 2-1: USB disconnect, device number 24 [ 944.369036][ T8454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.644531][ T8454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.666109][ T5241] Bluetooth: hci1: command tx timeout [ 944.676083][T18392] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.683497][T18392] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.708157][T18392] bridge_slave_0: entered allmulticast mode [ 944.731803][T18392] bridge_slave_0: entered promiscuous mode [ 944.774778][T18392] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.788101][ T5291] IPVS: starting estimator thread 0... [ 944.807808][T18453] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 944.822463][T18392] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.852197][T18392] bridge_slave_1: entered allmulticast mode [ 944.883517][T18392] bridge_slave_1: entered promiscuous mode [ 944.895767][T18454] IPVS: using max 24 ests per chain, 57600 per kthread [ 945.104722][ T8454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.205622][ T5286] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 945.294354][T18460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2760'. [ 945.330093][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'. [ 945.389556][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.398034][ T5286] usb 3-1: device descriptor read/64, error -71 [ 945.421761][T18392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.425354][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.453190][T18392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.693160][ T5286] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 945.718697][ T5241] Bluetooth: hci3: command tx timeout [ 945.906552][ T5286] usb 3-1: device descriptor read/64, error -71 [ 946.025919][ T5286] usb usb3-port1: attempt power cycle [ 946.053205][T18392] team0: Port device team_slave_0 added [ 946.116599][T18392] team0: Port device team_slave_1 added [ 946.467674][T18392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.484750][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.485504][ T5286] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 946.511435][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.552689][T18392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.567943][T18392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.584174][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.612242][ T5293] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 946.630879][ T5286] usb 3-1: device descriptor read/8, error -71 [ 946.634154][T18392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.797679][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.831550][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.842558][ T8454] team0: left allmulticast mode [ 946.847344][ T5293] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 946.855207][ T8454] team_slave_0: left allmulticast mode [ 946.857311][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.867134][ T8454] team_slave_1: left allmulticast mode [ 946.883485][ T5293] usb 4-1: config 0 descriptor?? [ 946.887937][ T8454] bridge0: port 3(team0) entered disabled state [ 946.923850][ T8454] bridge_slave_1: left allmulticast mode [ 946.932070][ T5286] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 946.946889][ T8454] bridge_slave_1: left promiscuous mode [ 946.964976][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.976777][ T5286] usb 3-1: device descriptor read/8, error -71 [ 947.008100][ T8454] bridge_slave_0: left allmulticast mode [ 947.013889][ T8454] bridge_slave_0: left promiscuous mode [ 947.024158][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.103128][T18478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.119970][ T5286] usb usb3-port1: unable to enumerate USB device [ 947.138103][T18478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.260700][T18482] xt_recent: Unsupported userspace flags (00000064) [ 947.785953][ T5241] Bluetooth: hci3: command tx timeout [ 948.154714][ T8454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.167824][ T8454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.180957][ T8454] bond0 (unregistering): Released all slaves [ 948.200006][ T8454] bond1 (unregistering): Released all slaves [ 948.224286][T18392] hsr_slave_0: entered promiscuous mode [ 948.242674][T18392] hsr_slave_1: entered promiscuous mode [ 948.255510][ T5465] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 948.273548][T18392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.302645][T18392] Cannot create hsr debugfs directory [ 948.354879][ T5293] usbhid 4-1:0.0: can't add hid device: -71 [ 948.361319][ T5293] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 948.395737][ T5293] usb 4-1: USB disconnect, device number 109 [ 948.475406][ T5465] usb 3-1: Using ep0 maxpacket: 32 [ 948.487183][ T5465] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 948.496652][ T5465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.504698][ T5465] usb 3-1: Product: syz [ 948.511081][ T5465] usb 3-1: Manufacturer: syz [ 948.518622][ T5465] usb 3-1: SerialNumber: syz [ 948.529054][ T5465] usb 3-1: config 0 descriptor?? [ 948.542305][ T5465] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 948.662979][ T2635] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 948.752971][ T5286] usb 3-1: USB disconnect, device number 25 [ 948.849805][T18329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 948.874021][ T2635] usb 2-1: unable to get BOS descriptor or descriptor too short [ 948.886665][ T2635] usb 2-1: not running at top speed; connect to a high speed hub [ 948.894845][T18329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 948.915794][ T2635] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.920563][T18329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 948.932768][ T2635] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 948.978750][T18329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 948.985568][ T2635] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.985604][ T2635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.985629][ T2635] usb 2-1: Product: syz [ 948.985648][ T2635] usb 2-1: Manufacturer: syz [ 948.985666][ T2635] usb 2-1: SerialNumber: syz [ 949.083519][ T8454] hsr_slave_0: left promiscuous mode [ 949.090075][ T8454] hsr_slave_1: left promiscuous mode [ 949.110619][ T8454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.127336][ T8454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.152764][ T8454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.170822][ T8454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.221461][ T8454] veth1_macvtap: left promiscuous mode [ 949.237907][ T8454] veth0_macvtap: left promiscuous mode [ 949.244029][ T8454] veth1_vlan: left promiscuous mode [ 949.255724][ T8454] veth0_vlan: left promiscuous mode [ 949.434011][ T2635] usb 2-1: 0:2 : does not exist [ 949.485582][T13896] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 949.511001][ T2635] usb 2-1: USB disconnect, device number 25 [ 949.700956][T13896] usb 4-1: Using ep0 maxpacket: 8 [ 949.735983][T13896] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 17 [ 949.766034][T13896] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 949.776645][T13896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.803603][T13896] usb 4-1: Product: syz [ 949.808837][T13896] usb 4-1: Manufacturer: syz [ 949.813469][T13896] usb 4-1: SerialNumber: syz [ 949.836900][T13896] usb 4-1: config 0 descriptor?? [ 949.843963][T18506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 949.856197][T13896] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 949.863793][T13896] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 949.873537][T13896] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 950.502045][ T8454] team_slave_1 (unregistering): left promiscuous mode [ 950.524269][ T8454] team0 (unregistering): Port device team_slave_1 removed [ 950.591474][ T8454] team_slave_0 (unregistering): left promiscuous mode [ 950.602331][ T8454] team0 (unregistering): Port device team_slave_0 removed [ 951.362013][ T5465] usb 4-1: USB disconnect, device number 110 [ 951.412008][T18518] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2773'. [ 952.285442][ T5465] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 952.413859][T18329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.488056][ T5465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.512490][T18329] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.519501][ T5465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.535500][ T2635] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 952.564177][ T5465] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 952.583891][ T5465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.604902][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.612168][ T8454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.641045][ T5465] usb 3-1: config 0 descriptor?? [ 952.673473][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.680841][ T5481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.741873][ T2635] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 952.763533][ T2635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.792046][ T2635] usb 4-1: Product: syz [ 952.812475][ T2635] usb 4-1: Manufacturer: syz [ 952.824089][ T2635] usb 4-1: SerialNumber: syz [ 952.841514][ T2635] usb 4-1: config 0 descriptor?? [ 952.877071][T18533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.909875][T18533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.973955][T18392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 952.993455][T18392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 953.038900][T18392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 953.109234][T18392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 953.118150][ T5465] usbhid 3-1:0.0: can't add hid device: -71 [ 953.142234][ T5465] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 953.198331][ T5465] usb 3-1: USB disconnect, device number 26 [ 953.221094][T18329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.297048][ T2635] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 953.338545][ T2635] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 953.385598][ T2635] usb 4-1: USB disconnect, device number 111 [ 953.394083][T18561] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2782'. [ 953.579021][T18329] veth0_vlan: entered promiscuous mode [ 953.652592][T18329] veth1_vlan: entered promiscuous mode [ 953.687600][T18392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.803843][ T5241] Bluetooth: hci2: unexpected cc 0x2027 length: 2 > 1 [ 953.812190][ T5241] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 953.870222][ T1062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.941689][T18392] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.017514][ T1062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.087412][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.094745][ T8454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.250228][ T1062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.315096][T18329] veth0_macvtap: entered promiscuous mode [ 954.348552][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.355806][ T5481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.513838][ T1062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.555903][ T58] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 954.624030][T18329] veth1_macvtap: entered promiscuous mode [ 954.756222][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 954.770193][T11637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 954.783531][T11637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 954.792163][T11637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 954.806907][ T58] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 954.823481][T11637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 954.833760][T11637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 954.837322][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.841747][T11637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 954.871949][ T58] usb 2-1: Product: syz [ 954.899429][T18329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.927044][ T58] usb 2-1: Manufacturer: syz [ 954.931722][ T58] usb 2-1: SerialNumber: syz [ 954.945624][ T46] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 954.953489][T18329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.968377][ T58] usb 2-1: config 0 descriptor?? [ 955.006510][T18329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.056597][T18329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.083853][T18329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.096543][T18329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.117960][T18329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.127839][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 955.135194][T18329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.153628][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.157054][T18329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.174653][T18329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.188748][ T46] usb 3-1: config 0 descriptor?? [ 955.207935][ T58] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 955.212084][ T46] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 955.223050][T18329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.240347][T18329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.252711][T18329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.272130][T18329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.284706][T18329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.303970][T18329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.318734][T18329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.331459][T18329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.478539][T18329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.488046][T18329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.498862][T18329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.508077][T18329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.549622][ T46] usb 3-1: USB disconnect, device number 27 [ 955.568163][ T1062] bridge_slave_1: left allmulticast mode [ 955.573859][ T1062] bridge_slave_1: left promiscuous mode [ 955.597268][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.621848][ T1062] bridge_slave_0: left allmulticast mode [ 955.633659][ T1062] bridge_slave_0: left promiscuous mode [ 955.651010][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.763180][ T1062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.786682][ T1062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.801052][ T1062] bond0 (unregistering): Released all slaves [ 956.912573][T11637] Bluetooth: hci0: command tx timeout [ 957.103115][T18392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.265399][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 957.277860][ T58] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 957.292261][ T58] usb 2-1: USB disconnect, device number 26 [ 957.424804][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.437010][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.459464][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.474048][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.531074][ T25] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 957.544565][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.575615][ T25] usb 3-1: config 0 descriptor?? [ 957.587102][ T1062] hsr_slave_0: left promiscuous mode [ 957.599142][ T1062] hsr_slave_1: left promiscuous mode [ 957.614841][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.623339][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.645098][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.663446][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.728894][ T1062] veth1_macvtap: left promiscuous mode [ 957.748645][ T1062] veth0_macvtap: left promiscuous mode [ 957.754495][ T1062] veth1_vlan: left promiscuous mode [ 957.770647][ T1062] veth0_vlan: left promiscuous mode [ 957.790372][T18618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.808893][T18618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.875922][T11637] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 957.886819][T11637] Bluetooth: hci2: Injecting HCI hardware error event [ 957.896935][ T5241] Bluetooth: hci2: hardware error 0x00 [ 958.985855][T11637] Bluetooth: hci0: command tx timeout [ 959.196997][ T1062] team0 (unregistering): Port device team_slave_1 removed [ 959.380896][ T1062] team0 (unregistering): Port device team_slave_0 removed [ 959.947928][ T5241] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 960.146446][ T5291] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 960.337695][ T5291] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 960.347205][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.378140][ T5291] usb 2-1: config 0 descriptor?? [ 960.522055][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.556700][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.617879][ T5291] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 960.638225][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 960.681620][T18392] veth0_vlan: entered promiscuous mode [ 960.695465][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 960.703285][ T5291] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 960.725435][ T25] usb 3-1: USB disconnect, device number 28 [ 960.764578][T18590] chnl_net:caif_netlink_parms(): no params data found [ 960.793365][ T5291] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 960.834229][ T5291] [drm] Initialized udl on minor 2 [ 960.929419][T18392] veth1_vlan: entered promiscuous mode [ 961.067811][ T5241] Bluetooth: hci0: command tx timeout [ 961.473581][ T5291] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 961.553635][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.563129][T18688] xt_NFQUEUE: number of total queues is 0 [ 961.582912][ T5291] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 961.607286][T18590] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.619659][ T5465] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 961.645687][T18590] bridge_slave_0: entered allmulticast mode [ 961.656449][ T5291] usb 2-1: USB disconnect, device number 27 [ 961.667981][ T5465] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 961.690090][T18590] bridge_slave_0: entered promiscuous mode [ 961.705229][ T5465] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 961.738524][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.757163][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.787364][T18590] bridge_slave_1: entered allmulticast mode [ 961.823778][T18590] bridge_slave_1: entered promiscuous mode [ 962.098767][T18590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.176641][ T5465] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 962.210056][T18697] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2806'. [ 962.211612][T18590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.407040][ T5465] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 962.451443][ T5465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 962.490284][T18590] team0: Port device team_slave_0 added [ 962.506514][ T5465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 962.547292][T18392] veth0_macvtap: entered promiscuous mode [ 962.558981][ T5465] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 962.590702][T18392] veth1_macvtap: entered promiscuous mode [ 962.606917][ T5465] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 962.631875][ T5465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.632960][T18590] team0: Port device team_slave_1 added [ 962.676565][ T5465] usb 3-1: config 0 descriptor?? [ 962.903136][T18590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.921878][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.947954][ C1] vkms_vblank_simulate: vblank timer overrun [ 962.969500][T18590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.032516][T18590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.066450][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.099259][ T5465] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 963.155114][ T5241] Bluetooth: hci0: command tx timeout [ 963.156747][T18590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.219747][ T5465] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 963.260287][T18709] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 963.298744][ T5465] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 963.362739][T18713] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2809'. [ 963.460127][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.496692][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.516679][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.553894][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.589854][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.627878][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.660946][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.692284][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.747567][T18392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.854492][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.901025][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.920094][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.103134][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.166643][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.208064][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.250128][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.300540][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.354269][T18392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.615380][ T5465] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 964.677806][T18590] hsr_slave_0: entered promiscuous mode [ 964.878557][T18590] hsr_slave_1: entered promiscuous mode [ 964.903182][T18590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.934752][T18590] Cannot create hsr debugfs directory [ 965.013534][T18392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.056608][T18392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.098659][T18392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.150616][T18392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.263699][T18731] loop2: detected capacity change from 0 to 7 [ 965.287268][T18731] Dev loop2: unable to read RDB block 7 [ 965.293060][T18731] loop2: unable to read partition table [ 965.304243][T18731] loop2: partition table beyond EOD, truncated [ 965.313909][T18731] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 965.830820][ T1062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.870350][ T5291] usb 3-1: USB disconnect, device number 29 [ 966.122645][ T1062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.361333][ T1062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.385884][T18619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.414236][T18619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.453946][ T5291] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 966.509213][ T1062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.645561][ T5291] usb 3-1: Using ep0 maxpacket: 32 [ 966.658052][ T5291] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 966.681504][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.689817][ T5481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.707250][ T5481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.719301][ T5291] usb 3-1: config 0 descriptor?? [ 966.744147][T11637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 966.758705][ T5291] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 966.770012][T11637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 966.783158][T11637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 966.797462][T11637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 966.815980][T11637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 966.827913][T11637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 967.120832][T18756] FAULT_INJECTION: forcing a failure. [ 967.120832][T18756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.169744][T18756] CPU: 1 UID: 0 PID: 18756 Comm: syz.0.2818 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 967.180584][T18756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 967.190691][T18756] Call Trace: [ 967.194008][T18756] [ 967.196960][T18756] dump_stack_lvl+0x241/0x360 [ 967.201753][T18756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 967.206954][T18756] ? __pfx__printk+0x10/0x10 [ 967.211570][T18756] ? __pfx_lock_release+0x10/0x10 [ 967.216703][T18756] should_fail_ex+0x3b0/0x4e0 [ 967.221395][T18756] _copy_to_user+0x2f/0xb0 [ 967.225822][T18756] rng_dev_read+0x3be/0x6d0 [ 967.230339][T18756] ? __pfx_rng_dev_read+0x10/0x10 [ 967.235376][T18756] ? security_file_permission+0x7f/0xa0 [ 967.240952][T18756] ? rw_verify_area+0x52a/0x6b0 [ 967.245810][T18756] vfs_readv+0x6c2/0xa90 [ 967.250087][T18756] ? __pfx_rng_dev_read+0x10/0x10 [ 967.255115][T18756] ? __pfx_vfs_readv+0x10/0x10 [ 967.259897][T18756] ? __fget_files+0x29/0x470 [ 967.264499][T18756] __x64_sys_preadv+0x1c7/0x2d0 [ 967.269380][T18756] ? __pfx___x64_sys_preadv+0x10/0x10 [ 967.274802][T18756] ? do_syscall_64+0x100/0x230 [ 967.279617][T18756] ? do_syscall_64+0xb6/0x230 [ 967.284336][T18756] do_syscall_64+0xf3/0x230 [ 967.288881][T18756] ? clear_bhb_loop+0x35/0x90 [ 967.293627][T18756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.299547][T18756] RIP: 0033:0x7f69fd57cef9 [ 967.303981][T18756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.323620][T18756] RSP: 002b:00007f69fe39c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 967.332047][T18756] RAX: ffffffffffffffda RBX: 00007f69fd735f80 RCX: 00007f69fd57cef9 [ 967.340044][T18756] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 967.348148][T18756] RBP: 00007f69fe39c090 R08: 0000000000000000 R09: 0000000000000000 [ 967.356131][T18756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.364107][T18756] R13: 0000000000000000 R14: 00007f69fd735f80 R15: 00007f69fd85fa28 [ 967.372104][T18756] [ 967.385721][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 967.385745][ T29] audit: type=1326 audit(1725671592.218:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.536382][ T29] audit: type=1326 audit(1725671592.218:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.576292][ T29] audit: type=1326 audit(1725671592.218:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.624890][ T29] audit: type=1326 audit(1725671592.218:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.657280][ T29] audit: type=1326 audit(1725671592.328:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.754613][ T29] audit: type=1326 audit(1725671592.368:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.796929][ T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 967.879608][ T29] audit: type=1326 audit(1725671592.368:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.903522][ T29] audit: type=1326 audit(1725671592.398:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.932928][ T29] audit: type=1326 audit(1725671592.398:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 967.955873][ T29] audit: type=1326 audit(1725671592.398:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4597cef9 code=0x7ffc0000 [ 968.014527][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 968.024642][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 968.026066][ T1062] bridge_slave_1: left allmulticast mode [ 968.051443][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 968.055884][ T1062] bridge_slave_1: left promiscuous mode [ 968.074170][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 968.082985][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.150708][ T25] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 968.184979][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.205182][ T25] usb 5-1: Product: syz [ 968.223283][ T25] usb 5-1: Manufacturer: syz [ 968.224348][ T1062] bridge_slave_0: left allmulticast mode [ 968.229627][ T25] usb 5-1: SerialNumber: syz [ 968.244405][ T1062] bridge_slave_0: left promiscuous mode [ 968.260661][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.276541][ T25] usb 5-1: config 0 descriptor?? [ 968.337335][ T25] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 968.667774][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 968.917622][T11637] Bluetooth: hci4: command tx timeout [ 969.498103][ T5291] gspca_vc032x: reg_w err -71 [ 969.502966][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.509451][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.515097][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.559640][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.565347][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.571014][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.581030][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.590110][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.605547][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.614303][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.625639][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.631418][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.641211][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.641736][ T1062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.670301][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.678699][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.687528][ T1062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.692674][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.713362][ T5291] gspca_vc032x: I2c Bus Busy Wait 00 [ 969.719673][ T5291] gspca_vc032x: Unknown sensor... [ 969.725692][ T5291] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 969.747526][ T5291] usb 3-1: USB disconnect, device number 30 [ 969.753287][ T1062] bond0 (unregistering): Released all slaves [ 970.926875][ T1062] hsr_slave_0: left promiscuous mode [ 970.961491][ T1062] hsr_slave_1: left promiscuous mode [ 970.985554][T11637] Bluetooth: hci4: command tx timeout [ 971.006371][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.058876][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.075366][ T25] scsi host1: usb-storage 5-1:0.0 [ 971.113145][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.158913][ T25] usb 5-1: USB disconnect, device number 48 [ 971.177910][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.409488][ T1062] veth1_macvtap: left promiscuous mode [ 971.454694][ T1062] veth0_macvtap: left promiscuous mode [ 971.495725][ T1062] veth1_vlan: left promiscuous mode [ 971.505395][ T1062] veth0_vlan: left promiscuous mode [ 971.534629][T18812] loop9: detected capacity change from 0 to 7 [ 971.575573][T18812] Dev loop9: unable to read RDB block 7 [ 971.583879][T18812] loop9: unable to read partition table [ 971.608038][T18812] loop9: partition table beyond EOD, truncated [ 971.629700][T18812] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 971.845915][ T5286] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 972.038406][ T5286] usb 5-1: config 0 has no interfaces? [ 972.085955][ T5286] usb 5-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 972.104125][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.113917][ T5287] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 972.145735][ T5286] usb 5-1: Product: syz [ 972.150257][ T5286] usb 5-1: Manufacturer: syz [ 972.155502][ T5286] usb 5-1: SerialNumber: syz [ 972.165626][ T5286] usb 5-1: config 0 descriptor?? [ 972.372303][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.388323][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.436489][ T5287] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 972.471283][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.489909][T18828] netlink: 'syz.4.2825': attribute type 1 has an invalid length. [ 972.531738][ T5287] usb 1-1: config 0 descriptor?? [ 972.847161][T18837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.872276][T18837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.931469][ T58] usb 5-1: USB disconnect, device number 49 [ 973.065505][T11637] Bluetooth: hci4: command tx timeout [ 973.202660][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 973.780111][ T1062] team0 (unregistering): Port device team_slave_1 removed [ 973.894037][ T1062] team0 (unregistering): Port device team_slave_0 removed [ 974.825871][T18761] chnl_net:caif_netlink_parms(): no params data found [ 974.896620][T18844] netlink: 'syz.0.2827': attribute type 10 has an invalid length. [ 974.936555][T18844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.954014][T18844] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 974.963033][T18849] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2829'. [ 975.045658][T18590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 975.094755][ T5287] usbhid 1-1:0.0: can't add hid device: -71 [ 975.102779][T18590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 975.111822][ T5287] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 975.133169][ T5287] usb 1-1: USB disconnect, device number 122 [ 975.147430][T11637] Bluetooth: hci4: command tx timeout [ 975.346798][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 975.346819][ T29] audit: type=1326 audit(1725671600.298:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.474273][ T29] audit: type=1326 audit(1725671600.298:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.481880][T18590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 975.537203][ T29] audit: type=1326 audit(1725671600.328:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.575514][ T29] audit: type=1326 audit(1725671600.328:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.599562][ T29] audit: type=1326 audit(1725671600.328:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.622007][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.640006][T18590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 975.645362][ T29] audit: type=1326 audit(1725671600.348:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.669135][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.689350][ T29] audit: type=1326 audit(1725671600.348:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.712758][ T29] audit: type=1326 audit(1725671600.348:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.735749][ T29] audit: type=1326 audit(1725671600.348:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.758607][ T29] audit: type=1326 audit(1725671600.348:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967d57cef9 code=0x7ffc0000 [ 975.815757][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 975.866711][T18866] loop9: detected capacity change from 0 to 7 [ 975.944121][T18866] Dev loop9: unable to read RDB block 7 [ 975.962454][T18866] loop9: unable to read partition table [ 975.979438][T18866] loop9: partition table beyond EOD, truncated [ 976.001722][T18866] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 976.028768][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 976.100337][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 976.145521][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 976.150933][T18761] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.195483][T18761] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.204139][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 976.235933][T18761] bridge_slave_0: entered allmulticast mode [ 976.243425][T18761] bridge_slave_0: entered promiscuous mode [ 976.250182][ T25] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 976.269597][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.305543][T18761] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.315390][ T25] usb 3-1: Product: syz [ 976.320227][ T25] usb 3-1: Manufacturer: syz [ 976.333676][T18761] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.341418][ T25] usb 3-1: SerialNumber: syz [ 976.366001][T18761] bridge_slave_1: entered allmulticast mode [ 976.366189][ T25] usb 3-1: config 0 descriptor?? [ 976.415783][T18761] bridge_slave_1: entered promiscuous mode [ 976.428304][ T25] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 976.808217][T18761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.896353][T18761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.302782][T18761] team0: Port device team_slave_0 added [ 977.590607][ T1062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.750677][T18761] team0: Port device team_slave_1 added [ 978.024765][ T1062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.104900][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 978.122220][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 978.142742][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 978.158793][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 978.173095][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 978.181174][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 978.203760][T18761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.215402][T18761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.241417][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.258889][T18761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.380537][ T1062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.391423][ T25] scsi host1: usb-storage 3-1:0.0 [ 978.397940][T18761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.404972][T18761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.445452][ T5291] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 978.451106][T18761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.477633][ T25] usb 3-1: USB disconnect, device number 31 [ 978.561176][ T1062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.701228][ T5291] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 978.729704][ T5291] usb 5-1: config 0 has no interface number 0 [ 978.745884][ T5291] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 978.768329][ T5291] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 978.794683][ T5291] usb 5-1: config 0 interface 255 has no altsetting 0 [ 978.800499][T18761] hsr_slave_0: entered promiscuous mode [ 978.815401][ T5291] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 978.831957][T18761] hsr_slave_1: entered promiscuous mode [ 978.838990][T18761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.839041][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.854469][T18761] Cannot create hsr debugfs directory [ 978.896760][ T5291] usb 5-1: config 0 descriptor?? [ 978.937681][ T5291] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 979.041660][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.263895][T18890] can: request_module (can-proto-0) failed. [ 979.437836][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.588463][ T1062] bridge_slave_1: left allmulticast mode [ 979.599323][ T1062] bridge_slave_1: left promiscuous mode [ 979.609097][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.628375][ T1062] bridge_slave_0: left allmulticast mode [ 979.646243][ T1062] bridge_slave_0: left promiscuous mode [ 979.660602][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.265523][ T5241] Bluetooth: hci1: command tx timeout [ 980.730662][ T1062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.744449][ T1062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.758283][ T1062] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 980.772524][ T1062] bond0 (unregistering): Released all slaves [ 980.868578][T18934] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 980.931225][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.938439][ T5487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.223361][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.230605][ T5487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.273347][ T58] usb 5-1: USB disconnect, device number 50 [ 982.176755][ T1062] hsr_slave_0: left promiscuous mode [ 982.204027][ T1062] hsr_slave_1: left promiscuous mode [ 982.218927][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.240278][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.296368][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.314441][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.347770][ T5241] Bluetooth: hci1: command tx timeout [ 982.414463][ T1062] veth1_macvtap: left promiscuous mode [ 982.457812][ T1062] veth0_macvtap: left promiscuous mode [ 982.475823][ T1062] veth1_vlan: left promiscuous mode [ 982.504374][ T1062] veth0_vlan: left promiscuous mode [ 983.365757][T18984] FAULT_INJECTION: forcing a failure. [ 983.365757][T18984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.403189][T18984] CPU: 1 UID: 0 PID: 18984 Comm: syz.2.2847 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 983.414035][T18984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 983.424140][T18984] Call Trace: [ 983.427457][T18984] [ 983.430429][T18984] dump_stack_lvl+0x241/0x360 [ 983.435153][T18984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.440401][T18984] ? __pfx__printk+0x10/0x10 [ 983.445048][T18984] ? __pfx_lock_release+0x10/0x10 [ 983.450138][T18984] should_fail_ex+0x3b0/0x4e0 [ 983.454872][T18984] _copy_to_user+0x2f/0xb0 [ 983.459329][T18984] rng_dev_read+0x3be/0x6d0 [ 983.463951][T18984] ? __pfx_rng_dev_read+0x10/0x10 [ 983.469035][T18984] ? security_file_permission+0x7f/0xa0 [ 983.474612][T18984] ? rw_verify_area+0x52a/0x6b0 [ 983.479479][T18984] vfs_readv+0x6c2/0xa90 [ 983.483759][T18984] ? __pfx_rng_dev_read+0x10/0x10 [ 983.488803][T18984] ? __pfx_vfs_readv+0x10/0x10 [ 983.493596][T18984] ? __fget_files+0x29/0x470 [ 983.498213][T18984] __x64_sys_preadv+0x1c7/0x2d0 [ 983.503082][T18984] ? __pfx___x64_sys_preadv+0x10/0x10 [ 983.508471][T18984] ? do_syscall_64+0x100/0x230 [ 983.513257][T18984] ? do_syscall_64+0xb6/0x230 [ 983.517945][T18984] do_syscall_64+0xf3/0x230 [ 983.522475][T18984] ? clear_bhb_loop+0x35/0x90 [ 983.527169][T18984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.533075][T18984] RIP: 0033:0x7f967d57cef9 [ 983.537499][T18984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.557122][T18984] RSP: 002b:00007f967e442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 983.565550][T18984] RAX: ffffffffffffffda RBX: 00007f967d735f80 RCX: 00007f967d57cef9 [ 983.573557][T18984] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 983.581541][T18984] RBP: 00007f967e442090 R08: 0000000000000000 R09: 0000000000000000 [ 983.589609][T18984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 983.597676][T18984] R13: 0000000000000000 R14: 00007f967d735f80 R15: 00007f967d85fa28 [ 983.605671][T18984] [ 984.425642][ T5241] Bluetooth: hci1: command tx timeout [ 984.761411][ T1062] team0 (unregistering): Port device team_slave_1 removed [ 984.872573][ T1062] team0 (unregistering): Port device team_slave_0 removed [ 985.833839][T19032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2849'. [ 985.898957][T19036] team0: Device ipvlan1 failed to register rx_handler [ 986.017496][T18590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 986.101964][T18892] chnl_net:caif_netlink_parms(): no params data found [ 986.453533][T18590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.475421][ T5291] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 986.476770][T18892] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.493430][T18892] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.503605][T18892] bridge_slave_0: entered allmulticast mode [ 986.515606][T18892] bridge_slave_0: entered promiscuous mode [ 986.516619][ T5241] Bluetooth: hci1: command tx timeout [ 986.536338][T18761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 986.549384][T18761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 986.562013][T18761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 986.583678][T18892] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.606154][T18892] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.613832][T18892] bridge_slave_1: entered allmulticast mode [ 986.621616][T18892] bridge_slave_1: entered promiscuous mode [ 986.627990][ T5291] usb 3-1: device descriptor read/64, error -71 [ 986.658931][T18761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 986.709975][T18892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.738473][T18892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.794428][T18892] team0: Port device team_slave_0 added [ 986.808610][T18892] team0: Port device team_slave_1 added [ 986.881121][T18892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.889634][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.919812][ T5291] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 986.927515][T18892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.941529][T18892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.948788][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.977317][T18892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.062690][T18590] veth0_vlan: entered promiscuous mode [ 987.074582][T18892] hsr_slave_0: entered promiscuous mode [ 987.084424][T18892] hsr_slave_1: entered promiscuous mode [ 987.090293][ T5291] usb 3-1: device descriptor read/64, error -71 [ 987.098655][T18892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 987.107278][T18892] Cannot create hsr debugfs directory [ 987.168288][T18590] veth1_vlan: entered promiscuous mode [ 987.216868][ T5291] usb usb3-port1: attempt power cycle [ 987.419175][T18590] veth0_macvtap: entered promiscuous mode [ 987.482942][T18761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.492036][T18590] veth1_macvtap: entered promiscuous mode [ 987.593239][T18761] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.607185][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.619307][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.632602][ T5291] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 987.640730][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.652489][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.663454][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.675043][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.687149][ T5291] usb 3-1: device descriptor read/8, error -71 [ 987.695781][ T5465] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 987.703912][T18590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.715567][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.726338][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.736922][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.747607][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.757858][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.769274][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.781919][T18590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.820655][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.827993][ T5481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.840928][T18590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.851966][T18590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.864649][T18590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.876705][T18590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.885570][ T5465] usb 5-1: Using ep0 maxpacket: 8 [ 987.907734][ T5465] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 987.926661][ T5465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.942536][ T5465] usb 5-1: Product: syz [ 987.953057][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.955799][ T5291] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 987.960249][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.968049][ T5465] usb 5-1: Manufacturer: syz [ 987.990183][ T5465] usb 5-1: SerialNumber: syz [ 987.999858][ T5465] usb 5-1: config 0 descriptor?? [ 988.035757][ T5291] usb 3-1: device descriptor read/8, error -71 [ 988.176097][ T5291] usb usb3-port1: unable to enumerate USB device [ 988.244124][ T5465] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 988.270492][ T8454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.275839][T18892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 988.288230][ T8454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.313706][T18892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 988.342149][T18892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 988.364957][T18892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 988.393569][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.413067][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.480159][T18761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.726841][T18761] veth0_vlan: entered promiscuous mode [ 988.777739][T18761] veth1_vlan: entered promiscuous mode [ 988.818779][T18892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.894064][T18892] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.956616][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.963830][ T5487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.990410][T18761] veth0_macvtap: entered promiscuous mode [ 989.057828][T18761] veth1_macvtap: entered promiscuous mode [ 989.098767][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.106015][ T5481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.148895][T18761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.163159][T18761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.174951][T18761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.196670][T18761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.215309][T18761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.226718][T18761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.240303][T18761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.251033][T18761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.283753][T18761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.365637][T18761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.400709][T18761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.427434][T18761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.443411][T18761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.457318][T18761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.468362][T18761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.478569][T18761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.496477][T18761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.508734][T18761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.570346][T18761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.603169][T18761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.617128][T18761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.627894][T18761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.713927][ T5465] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 989.763135][ T5465] usb 5-1: USB disconnect, device number 51 [ 989.885374][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 989.999169][ T5480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.021926][ T5480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.065574][ T25] usb 3-1: device descriptor read/64, error -71 [ 990.147896][ T5490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.158111][T18892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.165701][ T5490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.365558][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 990.420297][T18892] veth0_vlan: entered promiscuous mode [ 990.468226][T18892] veth1_vlan: entered promiscuous mode [ 990.545840][ T25] usb 3-1: device descriptor read/64, error -71 [ 990.584463][T18892] veth0_macvtap: entered promiscuous mode [ 990.635674][T18892] veth1_macvtap: entered promiscuous mode [ 990.687368][ T25] usb usb3-port1: attempt power cycle [ 990.789749][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.830552][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.866182][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.912185][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.948765][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.990355][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.001955][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.013057][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.023385][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.046779][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.097614][T18892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.145687][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 991.167298][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.197145][ T25] usb 3-1: device descriptor read/8, error -71 [ 991.218856][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.258088][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.291535][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.316029][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.339850][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.384979][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.420292][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.450690][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.484914][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.495455][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 991.532341][T18892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.561686][ T25] usb 3-1: device descriptor read/8, error -71 [ 991.715085][T18892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.725828][ T25] usb usb3-port1: unable to enumerate USB device [ 991.775518][T18892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.805363][T18892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.814150][T18892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.045693][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2858'. [ 992.373180][T19084] ptrace attach of "./syz-executor exec"[19091] was attempted by ""[19084] [ 992.423430][T19084] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.431112][T19084] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.530369][T19086] bridge_slave_1: left allmulticast mode [ 992.549570][T19086] bridge_slave_1: left promiscuous mode [ 992.580255][T19086] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.650429][T19086] bridge_slave_0: left allmulticast mode [ 992.677644][T19086] bridge_slave_0: left promiscuous mode [ 992.715322][T19086] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.204167][ T5487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.239940][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.247220][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.911934][ T5487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.006814][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2867'. [ 994.034699][T19118] netlink: 'syz.1.2867': attribute type 10 has an invalid length. [ 994.063341][T19118] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.071164][T19118] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.143929][T19118] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.151213][T19118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.158843][T19118] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.166068][T19118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.254070][T19118] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 994.278658][T19122] netlink: 'syz.1.2867': attribute type 10 has an invalid length. [ 994.300571][T19122] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.309717][T19122] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.451397][ T5487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.515919][T19125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2869'. [ 994.660120][ T5487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.034109][ T5487] bridge_slave_1: left allmulticast mode [ 995.050665][ T5487] bridge_slave_1: left promiscuous mode [ 995.082138][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.171991][ T5487] bridge_slave_0: left allmulticast mode [ 995.196728][ T5487] bridge_slave_0: left promiscuous mode [ 995.235532][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.753219][ T5487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.790256][T19148] ================================================================== [ 997.798382][T19148] BUG: KASAN: slab-use-after-free in isolate_migratepages_block+0x2228/0x64f0 [ 997.807289][T19148] Read of size 8 at addr ffff888025baabf8 by task syz.2.2874/19148 [ 997.815212][T19148] [ 997.817569][T19148] CPU: 1 UID: 0 PID: 19148 Comm: syz.2.2874 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 997.828400][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 997.838485][T19148] Call Trace: [ 997.841788][T19148] [ 997.844750][T19148] dump_stack_lvl+0x241/0x360 [ 997.849476][T19148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 997.854892][T19148] ? __pfx__printk+0x10/0x10 [ 997.859525][T19148] ? _printk+0xd5/0x120 [ 997.863717][T19148] ? __virt_addr_valid+0x183/0x530 [ 997.868880][T19148] ? __virt_addr_valid+0x183/0x530 [ 997.874030][T19148] print_report+0x169/0x550 [ 997.878578][T19148] ? __virt_addr_valid+0x183/0x530 [ 997.883725][T19148] ? __virt_addr_valid+0x183/0x530 [ 997.888872][T19148] ? __virt_addr_valid+0x45f/0x530 [ 997.894015][T19148] ? __phys_addr+0xba/0x170 [ 997.898562][T19148] ? isolate_migratepages_block+0x2228/0x64f0 [ 997.904686][T19148] kasan_report+0x143/0x180 [ 997.909247][T19148] ? isolate_migratepages_block+0x2228/0x64f0 [ 997.915368][T19148] kasan_check_range+0x282/0x290 [ 997.920355][T19148] isolate_migratepages_block+0x2228/0x64f0 [ 997.926309][T19148] ? isolate_migratepages_block+0x2341/0x64f0 [ 997.932518][T19148] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 997.938812][T19148] ? __pageblock_pfn_to_page+0xd3/0x3c0 [ 997.944396][T19148] ? __pageblock_pfn_to_page+0xd3/0x3c0 [ 997.950087][T19148] compact_zone+0x32e6/0x4af0 [ 997.954834][T19148] ? __pfx_compact_zone+0x10/0x10 [ 997.959904][T19148] sysctl_compaction_handler+0x496/0x990 [ 997.965592][T19148] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 997.971800][T19148] ? __virt_addr_valid+0x183/0x530 [ 997.976950][T19148] ? __virt_addr_valid+0x183/0x530 [ 997.982091][T19148] ? __virt_addr_valid+0x45f/0x530 [ 997.987234][T19148] ? __check_object_size+0x49c/0x900 [ 997.992560][T19148] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 997.998758][T19148] proc_sys_call_handler+0x551/0x8b0 [ 998.004104][T19148] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 998.009970][T19148] vfs_write+0xa72/0xc90 [ 998.014261][T19148] ? __pfx_proc_sys_write+0x10/0x10 [ 998.019501][T19148] ? __pfx_vfs_write+0x10/0x10 [ 998.024322][T19148] __x64_sys_pwrite64+0x1aa/0x230 [ 998.029399][T19148] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 998.034996][T19148] ? do_syscall_64+0x100/0x230 [ 998.039808][T19148] ? do_syscall_64+0xb6/0x230 [ 998.044530][T19148] do_syscall_64+0xf3/0x230 [ 998.049073][T19148] ? clear_bhb_loop+0x35/0x90 [ 998.053816][T19148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.059766][T19148] RIP: 0033:0x7f967d57cef9 [ 998.064217][T19148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.083864][T19148] RSP: 002b:00007f967e442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 998.092325][T19148] RAX: ffffffffffffffda RBX: 00007f967d735f80 RCX: 00007f967d57cef9 [ 998.100333][T19148] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000003 [ 998.108344][T19148] RBP: 00007f967d5ef01e R08: 0000000000000000 R09: 0000000000000000 [ 998.116358][T19148] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 998.124375][T19148] R13: 0000000000000000 R14: 00007f967d735f80 R15: 00007f967d85fa28 [ 998.132409][T19148] [ 998.135459][T19148] [ 998.137813][T19148] Allocated by task 27: [ 998.141985][T19148] kasan_save_track+0x3f/0x80 [ 998.146718][T19148] __kasan_slab_alloc+0x66/0x80 [ 998.151616][T19148] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 998.157459][T19148] shmem_alloc_inode+0x28/0x40 [ 998.162263][T19148] new_inode+0x6e/0x310 [ 998.166557][T19148] shmem_get_inode+0x34a/0xd50 [ 998.171367][T19148] shmem_mknod+0x5f/0x1e0 [ 998.175748][T19148] vfs_mknod+0x36d/0x3b0 [ 998.180029][T19148] devtmpfs_work_loop+0x963/0x1040 [ 998.185175][T19148] devtmpfsd+0x4c/0x50 [ 998.189285][T19148] kthread+0x2f0/0x390 [ 998.193386][T19148] ret_from_fork+0x4b/0x80 [ 998.197852][T19148] ret_from_fork_asm+0x1a/0x30 [ 998.202654][T19148] [ 998.205001][T19148] Freed by task 16: [ 998.208835][T19148] kasan_save_track+0x3f/0x80 [ 998.213551][T19148] kasan_save_free_info+0x40/0x50 [ 998.218615][T19148] poison_slab_object+0xe0/0x150 [ 998.223596][T19148] __kasan_slab_free+0x37/0x60 [ 998.228405][T19148] kmem_cache_free+0x145/0x350 [ 998.233207][T19148] rcu_core+0xafd/0x1830 [ 998.237487][T19148] handle_softirqs+0x2c4/0x970 [ 998.242291][T19148] run_ksoftirqd+0xca/0x130 [ 998.246839][T19148] smpboot_thread_fn+0x544/0xa30 [ 998.251823][T19148] kthread+0x2f0/0x390 [ 998.255923][T19148] ret_from_fork+0x4b/0x80 [ 998.260384][T19148] ret_from_fork_asm+0x1a/0x30 [ 998.265198][T19148] [ 998.267544][T19148] Last potentially related work creation: [ 998.273277][T19148] kasan_save_stack+0x3f/0x60 [ 998.277994][T19148] __kasan_record_aux_stack+0xac/0xc0 [ 998.283403][T19148] call_rcu+0x167/0xa70 [ 998.287603][T19148] evict+0x88b/0x950 [ 998.291530][T19148] do_unlinkat+0x512/0x830 [ 998.295960][T19148] __x64_sys_unlink+0x47/0x50 [ 998.300649][T19148] do_syscall_64+0xf3/0x230 [ 998.305158][T19148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.311064][T19148] [ 998.313392][T19148] The buggy address belongs to the object at ffff888025baa730 [ 998.313392][T19148] which belongs to the cache shmem_inode_cache of size 1544 [ 998.328166][T19148] The buggy address is located 1224 bytes inside of [ 998.328166][T19148] freed 1544-byte region [ffff888025baa730, ffff888025baad38) [ 998.342145][T19148] [ 998.344475][T19148] The buggy address belongs to the physical page: [ 998.350912][T19148] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25ba8 [ 998.359710][T19148] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 998.368226][T19148] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 998.375789][T19148] page_type: 0xfdffffff(slab) [ 998.380472][T19148] raw: 00fff00000000040 ffff88801c6e7140 dead000000000122 0000000000000000 [ 998.389061][T19148] raw: 0000000000000000 0000000000130013 00000001fdffffff 0000000000000000 [ 998.397653][T19148] head: 00fff00000000040 ffff88801c6e7140 dead000000000122 0000000000000000 [ 998.406330][T19148] head: 0000000000000000 0000000000130013 00000001fdffffff 0000000000000000 [ 998.415012][T19148] head: 00fff00000000003 ffffea000096ea01 ffffffffffffffff 0000000000000000 [ 998.423721][T19148] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 998.432422][T19148] page dumped because: kasan: bad access detected [ 998.438848][T19148] page_owner tracks the page as allocated [ 998.444573][T19148] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27, tgid 27 (kdevtmpfs), ts 9074686825, free_ts 0 [ 998.464383][T19148] post_alloc_hook+0x1f3/0x230 [ 998.469168][T19148] get_page_from_freelist+0x2e4c/0x2f10 [ 998.474756][T19148] __alloc_pages_noprof+0x256/0x6c0 [ 998.479976][T19148] alloc_slab_page+0x5f/0x120 [ 998.484670][T19148] allocate_slab+0x5a/0x2f0 [ 998.489180][T19148] ___slab_alloc+0xcd1/0x14b0 [ 998.493862][T19148] __slab_alloc+0x58/0xa0 [ 998.498197][T19148] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 998.504024][T19148] shmem_alloc_inode+0x28/0x40 [ 998.508799][T19148] new_inode+0x6e/0x310 [ 998.512965][T19148] shmem_get_inode+0x34a/0xd50 [ 998.517733][T19148] shmem_mknod+0x5f/0x1e0 [ 998.522080][T19148] vfs_mknod+0x36d/0x3b0 [ 998.526341][T19148] devtmpfs_work_loop+0x963/0x1040 [ 998.531459][T19148] devtmpfsd+0x4c/0x50 [ 998.535541][T19148] kthread+0x2f0/0x390 [ 998.539612][T19148] page_owner free stack trace missing [ 998.544978][T19148] [ 998.547306][T19148] Memory state around the buggy address: [ 998.552935][T19148] ffff888025baaa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 998.561001][T19148] ffff888025baab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 998.569064][T19148] >ffff888025baab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 998.577137][T19148] ^ [ 998.585122][T19148] ffff888025baac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 998.593186][T19148] ffff888025baac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 998.601269][T19148] ================================================================== [ 998.999079][ T5487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.045853][ T5487] bond0 (unregistering): Released all slaves [ 999.471294][T19148] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 999.478557][T19148] CPU: 1 UID: 0 PID: 19148 Comm: syz.2.2874 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 999.489355][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 999.499440][T19148] Call Trace: [ 999.502748][T19148] [ 999.505707][T19148] dump_stack_lvl+0x241/0x360 [ 999.510428][T19148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 999.515675][T19148] ? __pfx__printk+0x10/0x10 [ 999.520294][T19148] ? preempt_schedule+0xe1/0xf0 [ 999.525159][T19148] ? vscnprintf+0x5d/0x90 [ 999.529505][T19148] panic+0x349/0x860 [ 999.533409][T19148] ? check_panic_on_warn+0x21/0xb0 [ 999.538619][T19148] ? __pfx_panic+0x10/0x10 [ 999.543047][T19148] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 999.549134][T19148] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 999.555554][T19148] ? print_report+0x502/0x550 [ 999.560267][T19148] check_panic_on_warn+0x86/0xb0 [ 999.565217][T19148] ? isolate_migratepages_block+0x2228/0x64f0 [ 999.571313][T19148] end_report+0x77/0x160 [ 999.575576][T19148] kasan_report+0x154/0x180 [ 999.580096][T19148] ? isolate_migratepages_block+0x2228/0x64f0 [ 999.586181][T19148] kasan_check_range+0x282/0x290 [ 999.591138][T19148] isolate_migratepages_block+0x2228/0x64f0 [ 999.597058][T19148] ? isolate_migratepages_block+0x2341/0x64f0 [ 999.603151][T19148] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 999.609418][T19148] ? __pageblock_pfn_to_page+0xd3/0x3c0 [ 999.614975][T19148] ? __pageblock_pfn_to_page+0xd3/0x3c0 [ 999.620573][T19148] compact_zone+0x32e6/0x4af0 [ 999.625289][T19148] ? __pfx_compact_zone+0x10/0x10 [ 999.630327][T19148] sysctl_compaction_handler+0x496/0x990 [ 999.635974][T19148] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 999.642220][T19148] ? __virt_addr_valid+0x183/0x530 [ 999.647339][T19148] ? __virt_addr_valid+0x183/0x530 [ 999.652465][T19148] ? __virt_addr_valid+0x45f/0x530 [ 999.657588][T19148] ? __check_object_size+0x49c/0x900 [ 999.662928][T19148] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 999.669102][T19148] proc_sys_call_handler+0x551/0x8b0 [ 999.674421][T19148] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 999.680252][T19148] vfs_write+0xa72/0xc90 [ 999.684545][T19148] ? __pfx_proc_sys_write+0x10/0x10 [ 999.689799][T19148] ? __pfx_vfs_write+0x10/0x10 [ 999.694692][T19148] __x64_sys_pwrite64+0x1aa/0x230 [ 999.699736][T19148] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 999.705293][T19148] ? do_syscall_64+0x100/0x230 [ 999.710069][T19148] ? do_syscall_64+0xb6/0x230 [ 999.714753][T19148] do_syscall_64+0xf3/0x230 [ 999.719379][T19148] ? clear_bhb_loop+0x35/0x90 [ 999.724091][T19148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.730004][T19148] RIP: 0033:0x7f967d57cef9 [ 999.734454][T19148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.754166][T19148] RSP: 002b:00007f967e442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 999.762622][T19148] RAX: ffffffffffffffda RBX: 00007f967d735f80 RCX: 00007f967d57cef9 [ 999.770634][T19148] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000003 [ 999.778615][T19148] RBP: 00007f967d5ef01e R08: 0000000000000000 R09: 0000000000000000 [ 999.786600][T19148] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 999.794584][T19148] R13: 0000000000000000 R14: 00007f967d735f80 R15: 00007f967d85fa28 [ 999.802570][T19148] [ 999.805711][T19148] Kernel Offset: disabled [ 999.810035][T19148] Rebooting in 86400 seconds..