last executing test programs: 16.632262518s ago: executing program 4 (id=159): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x4c, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2ac}]}, {0x18, 0x6, "237929fd6f100fb9585cd56cc4b49788a5686506"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x804}, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800700010063740000140002800800014000000002080002400000000b100001800900010068617368000000000900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x4009, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000001040)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = syz_usb_connect$cdc_ncm(0x3, 0x96, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x6, 0xb0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "6afc19e680"}, {0x5, 0x24, 0x0, 0x770e}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x71e, 0x10}, {0x6, 0x24, 0x1a, 0x12, 0x24}, [@mdlm={0x15, 0x24, 0x12, 0x834}, @obex={0x5, 0x24, 0x15, 0x6}, @obex={0x5, 0x24, 0x15, 0x6e}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x10, 0xe, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x1, 0xb8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0xa}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0x7, 0x4, 0x20, 0x6}, 0x9f, &(0x7f00000004c0)={0x5, 0xf, 0x9f, 0x4, [@generic={0x7d, 0x10, 0x3, "f0b066c4d01f7ac9a4869e6383f44f97ff7db90d828148f0e0b77c6dfbe615635ea41b3dc0898abc5b680dc238c2437e96a2890cae9fbf5ad41e1993e5d3f1f839751af0f8d37226dd7442739ae409c5c562ec6601f5cfd17519be970bfba6d23895d1c805e818b13e1e684aeb3ee750c93a4c51446c22ca95db"}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0xc3ef, 0xf000, 0x40, [0xff3fcf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x0, 0x8}, @ptm_cap={0x3}]}, 0x6, [{0xd1, &(0x7f00000007c0)=@string={0xd1, 0x3, "a52678adbfa98fe488f27c318f2ca6fa6a030fbe45b1294b8170077abefd05c40e8f47c3500ae6ceefb5c3a8166e35b3565c00e9aab11092ac7ddd815402973d589985ad3d1514ffbc604f360554ba615c3f93bfd1a6984e58de15b7f6a6a9bb3d471cfb8e69d8377852aac19acf5120be1b7ed956151a06876ee5ca9efad5430edf7fc04d3d6d5c6e649a16b4ea6eddca790a7c9a0c8a0194fd143222267f8c4274c82b577fe419ccbeb4cab4fbf137a38f3c6257a6402441467a0cb2a52dc765612d7f578ee306549dd53d3cbdce"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x406}}, {0x6d, &(0x7f00000005c0)=ANY=[@ANYBLOB="6d03222be8d725a9c2d3471131515ecec55486012c2e11c9d114fe629414a139a3d94d944f8d1e36918c5a7e90807064c4c9f49ab19356e9b35272c42710501b0b44a6c295f405a9e70351ff0f00001e03f0f75ecaffeaf8165090d5c289a823ef90bab4ba45066f4f74748e10"]}, {0xab, &(0x7f0000000680)=@string={0xab, 0x3, "ea179e42c3ab9822242dec58c8111c3a374ecb3ac1ba4b601615d82dd0494b732dddb84262a8cecad56bc17203e2aec77f6b8b5512c93d7aced0da29834506a91915eff3c6ffe9108897ad233e0418245517f55ca700d09cb6e3693e7dac4e6e72c3497af1706d28842ea7dd6e7eaa889650fb4b2b3eb2fea76fb2fef46db075f8ee90343f9af6f06d4374386d6d56d37c7a6357be825c6c5002c100e0b6351be6b9c5d899e103d98f"}}]}) syz_usb_disconnect(r7) 13.610197261s ago: executing program 1 (id=162): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118, &(0x7f0000000100)={0x0, 0x2, 0x10, 0xfffffffc, 0x3a6}, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=0x1, 0xffffffffffffffff, 0x3, 0x2010, 0x0, @value}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001040)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x20, &(0x7f0000000500)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000580)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0xfffffffc, 0x0, 0x1, [], [0x9], [0x81, 0x80000001, 0xffffffff], [0x0, 0x0, 0xfffffffffffffffd, 0x3]}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97020fc80400fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000003c0)={0xe0000000}) 10.753371548s ago: executing program 3 (id=168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x6, 0xffffffffffffffff, 0x0, 0x33b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) r1 = dup(0xffffffffffffffff) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="d8", 0xffffff50}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create1(0x0) 10.06623923s ago: executing program 1 (id=170): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x8c000, 0x1a2) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socket$alg(0x26, 0x5, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4f, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xd1, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0xcd}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x0, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0xe, 0x9}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x87, 0x7, 0x7, 0xff, 0x5}, 0x17, &(0x7f00000004c0)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x39, 0xd, 0x8001, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xd, 0x5, 0xd0a}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x4c0a}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0xc, 0x4, 0x44f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r3}, 0x38) 9.978636628s ago: executing program 4 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = io_uring_setup(0x5937, 0x0) io_uring_setup(0x4d12, &(0x7f0000000380)={0x0, 0xf0bc, 0x200, 0x1, 0x36c, 0x0, r2}) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000940), 0x0, 0xc050) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) sigaltstack(&(0x7f0000000a40)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f0000001580)={&(0x7f0000001500)=""/79, 0x80000002, 0x4f}, &(0x7f0000001680)={0x0}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x260, 0x0, 0x260, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000080)={&(0x7f0000000600)=[0xc, 0xb, 0x5, 0x6, 0xc3, 0xb7, 0x0, 0xfffffffc, 0xfffffffa, 0x797, 0x8, 0x3, 0x9, 0x80000000, 0xf, 0x400, 0x4, 0x0, 0x4, 0x2, 0x18, 0x40, 0x800, 0x6711, 0xfffffff7, 0x68, 0xb, 0x9, 0xb, 0x4, 0x8, 0x1, 0x2, 0x2, 0x6, 0x6ab, 0x1f800, 0x7, 0x4, 0x1, 0x10001, 0x95, 0x2, 0x5, 0xfff, 0xffff, 0x5, 0x1, 0x8c9b, 0x5, 0x5, 0x5e53, 0x1ed, 0x1000, 0x7f, 0x9, 0x7fffffff, 0x5, 0x4, 0x2, 0x0, 0x7, 0x30, 0x4e0a, 0xb, 0x91d8, 0xfffffff9, 0x5, 0x9, 0x2bc, 0x4, 0x9, 0x8001, 0x5cc46ebb, 0xffffd690, 0x9, 0x31, 0x0, 0x3, 0x0, 0x1, 0x250e, 0x9, 0x7fffffff, 0x1, 0x4, 0x2df, 0x101, 0x6c6d, 0xff, 0x9, 0x7, 0xb9, 0x3, 0x5, 0x5, 0x8, 0x9, 0xd, 0x3, 0x7f, 0x7, 0xf1, 0xffffed3e, 0x73a0, 0x10001, 0x9, 0x5, 0x9, 0x80, 0x4, 0x6, 0x1f8a, 0x6, 0x7ff, 0x6, 0x9, 0x4, 0x79cc, 0x401, 0x7, 0x6, 0x8, 0x2b, 0x0, 0x9, 0x200, 0x3, 0xd, 0x6449e90a, 0x0, 0x7fff, 0x2, 0x4, 0xfffffff1, 0x2, 0x3c, 0x7, 0x288f, 0xfff, 0x16, 0xa9, 0xd, 0x10, 0x6d0, 0x10, 0x80000000, 0xc00000, 0xc424, 0x9, 0x4, 0x7, 0x1000, 0x6, 0x401, 0x5c, 0x8, 0x3, 0x80000001, 0x7ff, 0x4a7, 0x8, 0x3, 0x3, 0x8, 0x6, 0x4, 0x8000, 0x876, 0x9, 0x7fb, 0x28bf, 0x8, 0x6, 0x2, 0x5, 0x5, 0x4, 0x401, 0x5, 0x6, 0x80, 0x4, 0x2, 0x10001, 0x1, 0x2, 0xeaf0, 0x7, 0x6, 0x5, 0x1, 0xed, 0x1, 0x9, 0x6, 0x1046, 0x1, 0x5, 0x8000, 0x8, 0xd, 0x80000000, 0x6, 0x2, 0x3, 0x5, 0x9, 0xfffffffd, 0x5, 0x0, 0x57174d70, 0x3, 0x7, 0x9, 0x1, 0x5, 0x9, 0x7fff, 0x1, 0x1, 0x1, 0xffff7fff, 0x2, 0x7fffffff, 0x9, 0x6, 0xd230, 0x9, 0x7, 0x9, 0x790c, 0x7fffffff, 0x3, 0x84, 0x557, 0x8000, 0xa5, 0xffff, 0x3ff, 0x6, 0x4, 0x7fffffff, 0x7, 0xe, 0x1, 0x7ff, 0x6, 0xd, 0xffff, 0x5, 0xe, 0xf83, 0x7, 0x4, 0xc8b, 0x4, 0x7, 0xa05d, 0x1, 0x8367, 0xc, 0x6a, 0x3b8, 0x5, 0x5, 0x8000, 0x3, 0xead9, 0x3, 0xc232, 0x1, 0x39, 0x8, 0x6, 0x79, 0x5, 0x7, 0x0, 0x9, 0x9, 0x1, 0x7, 0x0, 0xa8db, 0x100, 0x8, 0x1000, 0x3ff, 0xa, 0xffff, 0x6, 0x647f, 0x8, 0x800, 0x5, 0x778, 0x4, 0x9, 0x7503, 0x9, 0x90, 0x9, 0xfff, 0x4, 0x40, 0x7, 0x3594, 0x1, 0x9, 0x2, 0x6, 0x5, 0xaf7, 0x8, 0x3, 0xfffffff7, 0x1, 0xfffffff9, 0x3, 0x7, 0x0, 0x2, 0x7, 0x400, 0x9, 0x7fff, 0x3, 0x4, 0x10, 0x2, 0x6, 0x7ff, 0x914b, 0x8, 0xd5, 0x3, 0x3, 0xf, 0x4, 0x5, 0x1, 0x0, 0x400, 0x1, 0x401, 0x0, 0x2, 0x5, 0xa80, 0x2a591c00, 0x9, 0x5fdb, 0xa, 0xfffffff3, 0x6, 0x7f, 0x2, 0xfffffff7, 0x6, 0x5000, 0x7fff, 0x9, 0x0, 0xeb3e, 0x1, 0x6, 0xffff, 0x5, 0x23, 0x10, 0x2, 0x170, 0x2, 0x2, 0x1000, 0x2, 0x6, 0x3, 0x800, 0x5, 0x7, 0x2, 0x0, 0x4, 0x7ff, 0x3, 0x5, 0x3, 0xe5cf, 0x3, 0x6562, 0x6, 0x1, 0xc, 0x9, 0x7, 0x5, 0x80000000, 0x7, 0x1000, 0x4, 0x1, 0xfffffff8, 0x57, 0x6, 0xfffff8cc, 0xe3f, 0x9, 0x3, 0xd91f, 0xfffffffd, 0x4, 0x2, 0xd, 0x4, 0xffffff16, 0xc, 0x7fff, 0x400, 0xffffffff, 0x4, 0x2, 0x4, 0x6, 0x9, 0x4, 0x6, 0x6, 0x6, 0x5, 0x2, 0x4, 0x4, 0x9, 0x100000, 0x4, 0x800, 0x2, 0xffffff00, 0xd253, 0x6, 0xfffff3d1, 0x400, 0x4, 0x7, 0x0, 0x7, 0x1, 0x8000, 0xa, 0x4, 0x0, 0xc6, 0x7, 0x8, 0x5, 0x5, 0xd, 0xfffffffc, 0x6, 0x3d, 0x5, 0x9, 0xfffffffd, 0x2, 0xffc000, 0x6, 0xb, 0x0, 0x3, 0x2, 0x13a, 0x80, 0x0, 0x774, 0x7a8, 0x4, 0xffff78c0, 0x183d, 0x3, 0x80, 0x9, 0x1, 0x9, 0x4, 0x6, 0x0, 0x6, 0x4, 0x2, 0x80, 0xe, 0x6, 0x2, 0x49ac, 0x0, 0x5, 0x31a, 0x3, 0x5, 0x80000001, 0x3, 0x400, 0xfff, 0x4b, 0x1, 0x100, 0xfffffff7, 0xdb, 0x401, 0x3ff, 0x400, 0x7ff, 0x2, 0xd5, 0x3dae, 0x1, 0xfafa, 0x40, 0x100, 0x7f, 0x7, 0x7, 0x9, 0xa, 0x3, 0x6, 0xc, 0x5, 0x6, 0x9, 0x3, 0x0, 0x7fffffff, 0x5, 0x4, 0x4, 0x49f5641f, 0x14, 0x7, 0x0, 0x405c, 0x8, 0xffffffff, 0x0, 0x7f, 0x3, 0x3, 0x8, 0xfff, 0x6, 0x8, 0x1, 0x9, 0x8, 0xc08, 0x8b6, 0x80000001, 0x4, 0xed, 0xffffffff, 0xfffff20f, 0x8, 0x4e69c327, 0x4, 0x8, 0xf3, 0x2d, 0xa63, 0x1, 0x3, 0xb26, 0x9, 0x7c797a83, 0x7fffffff, 0x101, 0x8, 0xcf68, 0x7, 0xffffffff, 0x9, 0x4, 0x6, 0x40, 0x8, 0x7f, 0x3, 0xe, 0x2, 0x2, 0x0, 0xa4c, 0x9, 0x3, 0x8, 0x6f13, 0x39, 0x6, 0x10001, 0xf, 0x42, 0x0, 0x3, 0x3c, 0x7, 0x6, 0x6, 0x3, 0x80000000, 0xffffffff, 0x6, 0xe, 0xffffffff, 0x6, 0x10000, 0x45cdb920, 0x1, 0xffff, 0x100, 0xfffffff8, 0x2, 0xf, 0x0, 0xc0, 0x6be1, 0xa6, 0x200, 0xffffffff, 0x9, 0x7, 0x5, 0x4, 0xd, 0x0, 0xfffffffd, 0x8, 0x6e8a, 0x0, 0x6, 0x800, 0x1, 0x1, 0xfffffff9, 0xffffffa5, 0x1, 0x40, 0x2, 0x9, 0x3, 0xffffffff, 0x444, 0xa4d6, 0x5, 0x8d, 0x67e, 0xffff, 0x4, 0xe, 0x1ff, 0x6, 0x8001, 0x88, 0x10, 0xb, 0x9, 0x1000, 0x0, 0x10001, 0x9, 0x2, 0x9fd, 0x7f, 0x1, 0x2, 0x2, 0x5, 0x0, 0x0, 0x8001, 0x80000001, 0x97, 0xfffffffd, 0x80000000, 0x4, 0xfffffff7, 0x3, 0x1, 0x8000, 0x40, 0x9, 0x10, 0x9, 0x5, 0x4, 0x10000, 0xbc5, 0x8, 0x1000000, 0x80, 0xd, 0x3, 0xfffffff8, 0x6, 0x0, 0x8001, 0xe84, 0xb, 0x401, 0x8, 0x1, 0x3, 0x3, 0x4e38, 0x5, 0x7ca, 0x1, 0x3, 0x4, 0x100, 0xbc3, 0x8, 0x10001, 0x6, 0x7f, 0x5, 0xffffc841, 0x0, 0xffff, 0xfffeffff, 0x5, 0x0, 0x2, 0x5, 0x2ec, 0x7, 0xfffffffb, 0x1893, 0x1, 0x8, 0x7fff, 0x1, 0x9, 0x9, 0x6, 0xfffffff8, 0x0, 0x2, 0xac6, 0x2, 0xfffffbff, 0xb, 0x6, 0xfffffffb, 0xd, 0x4, 0xdf24, 0x5, 0x70d9bca6, 0x0, 0x8000, 0x40, 0x80000001, 0x100, 0x4, 0xd, 0x9, 0x40, 0x100, 0x5619, 0x5, 0xfffffff9, 0x578d, 0x5, 0x7fff, 0xffffffff, 0x12, 0x9, 0x80000001, 0x6, 0x5, 0x670, 0x1, 0x3, 0x6, 0x4, 0x7, 0xfff, 0x1, 0xfffffff6, 0x7e1, 0x7, 0xfff, 0x1c01, 0x4, 0x10, 0x3, 0xfffffff7, 0x51, 0x6, 0x1400, 0x6969, 0xe, 0x1, 0x6, 0x263b, 0x3, 0x4, 0xf804, 0x5f, 0x7, 0x8001, 0x3, 0x44b, 0xad, 0x200000, 0x0, 0x60, 0x9, 0x3, 0x8, 0x20, 0x5, 0x3a6ca053, 0x6, 0x2, 0xffffffff, 0x0, 0x1, 0xf, 0x2, 0x8, 0x7ff, 0x2, 0x401, 0x101, 0x2af, 0x34, 0x7, 0x1c, 0x5, 0xb, 0x45, 0x0, 0x4, 0xfffffffe, 0xfffffffe, 0x9, 0x101, 0x46, 0x3, 0x7, 0x527c, 0x3, 0x1, 0x4, 0x6e5, 0xfb, 0xfffffffc, 0x7ff, 0x80000000, 0x9, 0x6, 0x1a, 0x400, 0x2c9, 0x6, 0x9, 0x1503c8fa, 0x7fffffff, 0x10, 0x6, 0x3, 0x5, 0x8, 0xdb1, 0xfe, 0x9, 0x1, 0xffff0001, 0x4, 0x0, 0x3, 0x5, 0x4, 0x5, 0x1, 0xc0, 0xd, 0x80000001, 0x4, 0xfffffff8, 0x3, 0x0, 0x7, 0x1, 0x2, 0x101, 0x6, 0x1, 0x6, 0x9, 0x6, 0x92f3, 0x10000, 0x9, 0x9, 0x3, 0x4, 0x8, 0x2, 0x6, 0x6623, 0x1, 0x2, 0x6, 0xe9e, 0xffffffff, 0x12d, 0x2, 0x3ff, 0x8, 0xffff, 0x1, 0x7, 0x5, 0x7, 0xca, 0x1, 0xf8, 0x0, 0x4f7, 0xffff, 0x5826, 0x100, 0xb4bf, 0x8000, 0xffffffff, 0x7ff, 0x3, 0x8, 0xfffffff9, 0x10000000, 0xf, 0xff, 0xa, 0x6, 0x7, 0x3ff, 0x7, 0x1, 0xf, 0x7d58, 0x4, 0x4, 0xfffffffb, 0xb6, 0x9, 0x6, 0x6, 0x1ff, 0x1, 0x3ff, 0x6, 0x5, 0x6, 0x9, 0x2, 0xd73, 0x1, 0x1, 0x47, 0x7, 0x10000, 0x4f, 0x3, 0x6, 0x7, 0x9, 0x8, 0x0, 0xe3dd, 0x0, 0x8000, 0x7, 0x0, 0x7, 0x8001, 0x0, 0xabe6, 0x664, 0x8, 0x7, 0x5, 0xe, 0x1, 0xa, 0x2, 0x6, 0x1, 0x59, 0xfffffffa, 0x40, 0x4, 0xfff, 0x8, 0x2, 0x3, 0x7, 0x2, 0x7, 0x2, 0x8000, 0x4, 0x1, 0x6, 0x6, 0x5, 0x800, 0x6, 0x2, 0x1, 0x2608, 0xffff], 0x1, 0x400, 0xfffffff8}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9], 0x4c}}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'ip_vti0\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 9.57551126s ago: executing program 2 (id=173): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xad2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) 8.890143293s ago: executing program 1 (id=174): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x2, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000c8c00)={0x0, ""/256, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000640)={{r4, 0x8, 0xc00000, 0x2, 0xb2, 0x2, 0x7, 0xfffff800, 0x7, 0x3ff, 0x7, 0x0, 0x1, 0x0, 0xe}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000c8e00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c9000)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r4}, {r5}], 0x5, "779095e5a18ddc"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000ca9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000cabc0)={{0x0, 0xffffffff, 0x40, 0x101, 0x7ff, 0x9, 0x7f, 0x7, 0x401, 0x5, 0x4, 0xad, 0x7, 0x3d2a5b9a, 0x7}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000cac80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000cbc80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000cbe80)={0x0, 0x0, "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", "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"}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f00000c8c00)={0x0, ""/256, 0x0, 0x0}) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r14, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r15, 0xd0009411, &(0x7f0000000640)={{r16, 0x8, 0xc00000, 0x2, 0xb2, 0x2, 0x7, 0xfffff800, 0x7, 0x3ff, 0x7, 0x0, 0x1, 0x0, 0xe}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f00000c8e00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c9000)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r16}, {r17}], 0x5, "779095e5a18ddc"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000cce80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000cd080)={{0x0, 0x80000001, 0x53e7, 0xfff, 0x1e, 0x80000000, 0x2, 0x8836, 0xf, 0x5, 0x9, 0xfff, 0x81, 0x8001, 0x7}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000cd140)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa, "d5fa5183c3e4ce"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ce140)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "1794aa9a789f85"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000cf140)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, r6}, {r7, r8}, {r9, r10}, {r17, r18}, {r19, r20}, {}, {0x0, r21}], 0x5, "a7317a08059aa3"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x1, 0x1, 0x3, "61056d42ca48dcff251fe6ebd697d71a94da2996f8752dcd35930d0d91b75d6f", 0x33424752}) 8.790389647s ago: executing program 4 (id=175): socket$packet(0x11, 0x3, 0x300) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="08006b00b40000000a00180003000303030300002400238006000100fe"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) 8.638237787s ago: executing program 1 (id=176): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) 8.504048571s ago: executing program 3 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x68}}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xf0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x20048081) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a5fdad88000000000a000100aaaa"], 0x2c}}, 0x0) 8.163120549s ago: executing program 4 (id=178): r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x28300, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='xprtrdma_post_linv_err\x00'}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) socket$inet(0x2, 0x6, 0x401) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x40}) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') 6.874111279s ago: executing program 3 (id=179): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000002c0)={0x0, 0xd22b}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0xffffffff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='gfs2\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001a40)={r1, "4f26e74af3fef8cb2756919ae7defea6"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000006c0)=0x28) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvfrom$inet(r4, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_io_uring_setup(0x1ee2, &(0x7f0000000080)={0x0, 0xadf0, 0x13580, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x8, 0x0, @fd_index=0x4, 0x9, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x54, 0x96d7, 0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x18, 0xa21, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 5.989627171s ago: executing program 2 (id=180): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) 5.844300257s ago: executing program 4 (id=181): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x2a0, 0x460, 0x460, 0x2a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x128, 0x168, 0xd8000000, {0x9402}, [@common=@unspec=@limit={{0x48}, {0x28f5c, 0x4, 0xfff, 0xe94c, 0xe5, 0x200, 0x3}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@private1, @empty, [], [], 'pim6reg0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], @mld={0x47, 0x0, 0x0, 0x6, 0x8000, @loopback}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x802) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}}, 0x440c0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) msgsnd(0x0, &(0x7f0000000280)={0x2}, 0x8, 0x800) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/52) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ptrace$pokeuser(0x6, r4, 0x8, 0xfff) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r7, 0xee01, r8) keyctl$setperm(0x5, r7, 0x21081c22) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) 4.774735365s ago: executing program 0 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x88, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x1ff}}], [{@flag='rw'}]}) unshare(0x20000400) r0 = socket$kcm(0x10, 0x2, 0x0) unshare(0x2060980) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r1, 0x8b19, &(0x7f0000000100)="96fc120d3c5a8215bccbc71046421c7df8563e68451c0d7369d8cf1827551838222a22e7873d0abbf3e73c0718e3521f4532dfd74597b23f123f7bf6a55df431d00add1523da191d04e66ec9abaac0729d124574d30b85acaceb598ec5255fe1a410d12f6b") sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)}, 0x84) 4.48257599s ago: executing program 3 (id=183): syz_open_dev$vim2m(0x0, 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000011000000"], 0x24}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x21, &(0x7f00000001c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xee01}, {0x9}}, {{@in6=@private0}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000001480)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7000000) 4.322265351s ago: executing program 2 (id=184): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdir(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0xffffffff}}, 0x10) r5 = syz_open_dev$swradio(&(0x7f00000007c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000800)={0x1, 0x2, 0x9}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8840}, 0x12000000) socket$alg(0x26, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000000), 0x4) dup3(r0, r6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r7, 0x0, 0x0) 4.230438356s ago: executing program 1 (id=185): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) 3.454356245s ago: executing program 0 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = socket(0x18, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, &(0x7f0000000100)) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) write$sndseq(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$vim2m(0x0, 0x1002008, 0x2) (async, rerun: 64) fsopen(0x0, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) r3 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000000c0)=[0x2, 0xfc65]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x42, 0x481e}, 0xe5e8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0xda2, 0x8169, 0x6}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c000240"], 0xdc}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) 3.436813167s ago: executing program 4 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x6, 0xffffffffffffffff, 0x0, 0x33b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) r1 = dup(0xffffffffffffffff) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="d8", 0xffffff50}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create1(0x0) 3.309199007s ago: executing program 1 (id=188): socket$packet(0x11, 0x3, 0x300) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="08006b00b40000000a00180003000303030300002400238006000100fe"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) 3.200754745s ago: executing program 2 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x68}}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x20048081) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a5fdad88000000000a000100aaaa"], 0x2c}}, 0x0) 2.754548434s ago: executing program 0 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) 1.912488672s ago: executing program 0 (id=191): r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x28300, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='xprtrdma_post_linv_err\x00'}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) socket$inet(0x2, 0x6, 0x401) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x40}) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') 1.859614538s ago: executing program 2 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1700000055002f03020000000000000007"], 0x38}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439ed4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2b068d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6322d4d3e89d8d8fb5d51ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e00"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x3a, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2, {}, 0xffffff82}) 1.673714626s ago: executing program 0 (id=193): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000002c0)={0x0, 0xd22b}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0xffffffff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='gfs2\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001a40)={r1, "4f26e74af3fef8cb2756919ae7defea6"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000006c0)=0x28) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvfrom$inet(r4, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_io_uring_setup(0x1ee2, &(0x7f0000000080)={0x0, 0xadf0, 0x13580, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x8, 0x0, @fd_index=0x4, 0x9, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x54, 0x96d7, 0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x18, 0xa21, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 682.384263ms ago: executing program 2 (id=194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000003580), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 326.810312ms ago: executing program 3 (id=195): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100000000, 0x8b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bdb71167ae016a2624000008000300", @ANYRES32=r3, @ANYBLOB="1c002f80"], 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40880) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0x2, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) 86.687074ms ago: executing program 3 (id=196): writev(0xffffffffffffffff, &(0x7f00000024c0)=[{&(0x7f0000000340)="0b0bbe85fd2fa4cc82dc33f5e85cdb0cc20e70bbd453ffb9774bd133b2fa3e755e1fafdb84b037e6bcee4189529b0fc43dec369c123ed3c9a11cff5d4d3c4a9b1367a959751a5a7561dcc2f8caad60042aff6209a0ffbcf6e5d7fd51a5802059a74e10da8f642afdebaffdcb8750832590a9c811ea96a64d86ab4261ecb14e34056809e83ee34350bdb0137e253908510e849ac8a9806fab7c8eaa028221caf7e568dad18bf658537e38b0f4e3b48a516b7bc2da98e0bf7fecacb08db2cc43cfc2c7d67084951e9bdab23529c72dfd6c532229866639b49c3ab20988acfdc01304ac43a5d36256c96e96b0caccbed051b239bb89c49288e65742482e85dab28353866c4428339247c4e281b91ba6077d4dc600dd92ba5e4732bcb6e0a756193bac1fc57d01a122f3427204e8b350f19aa95254c30b8462f0aed4797d861ba8ee7d", 0x141}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0xd, 0xf}, 0x8) close(r2) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0dd86110100000000000000000000000000000000ff0200000000000000000000b6bc000000014e20"], 0x42) 0s ago: executing program 0 (id=197): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) open_tree(r2, &(0x7f0000000000)='./cgroup\x00', 0x80800) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.50' (ED25519) to the list of known hosts. [ 59.419623][ T5811] cgroup: Unknown subsys name 'net' [ 59.572170][ T5811] cgroup: Unknown subsys name 'cpuset' [ 59.580400][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.875636][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.186593][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.196185][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.204837][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.214107][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.222763][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.230867][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.238795][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.257079][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.283182][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.291798][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.297825][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.301041][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.314514][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.319364][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.322194][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.329582][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.356185][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.360416][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.364524][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.379776][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.380136][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.396056][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.401778][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.410936][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.421288][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.428937][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.437049][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.437961][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.453437][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.461590][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.820311][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 63.855682][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 64.006464][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 64.083028][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 64.102709][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.110909][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.118743][ T5829] bridge_slave_0: entered allmulticast mode [ 64.125407][ T5829] bridge_slave_0: entered promiscuous mode [ 64.133674][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.140989][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.148321][ T5832] bridge_slave_0: entered allmulticast mode [ 64.154868][ T5832] bridge_slave_0: entered promiscuous mode [ 64.184187][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 64.193830][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.201343][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.208784][ T5829] bridge_slave_1: entered allmulticast mode [ 64.215282][ T5829] bridge_slave_1: entered promiscuous mode [ 64.229782][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.236898][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.244880][ T5832] bridge_slave_1: entered allmulticast mode [ 64.251753][ T5832] bridge_slave_1: entered promiscuous mode [ 64.283645][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.334196][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.362613][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.404518][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.420845][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.428030][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.435724][ T5825] bridge_slave_0: entered allmulticast mode [ 64.443401][ T5825] bridge_slave_0: entered promiscuous mode [ 64.456458][ T5829] team0: Port device team_slave_0 added [ 64.480933][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.488027][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.495378][ T5825] bridge_slave_1: entered allmulticast mode [ 64.502476][ T5825] bridge_slave_1: entered promiscuous mode [ 64.518272][ T5829] team0: Port device team_slave_1 added [ 64.534299][ T5832] team0: Port device team_slave_0 added [ 64.575383][ T5832] team0: Port device team_slave_1 added [ 64.589901][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.596998][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.605378][ T5831] bridge_slave_0: entered allmulticast mode [ 64.612246][ T5831] bridge_slave_0: entered promiscuous mode [ 64.620879][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.628000][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.635714][ T5831] bridge_slave_1: entered allmulticast mode [ 64.642585][ T5831] bridge_slave_1: entered promiscuous mode [ 64.656291][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.664380][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.671805][ T5821] bridge_slave_0: entered allmulticast mode [ 64.678790][ T5821] bridge_slave_0: entered promiscuous mode [ 64.710013][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.721822][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.731623][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.739122][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.746281][ T5821] bridge_slave_1: entered allmulticast mode [ 64.753270][ T5821] bridge_slave_1: entered promiscuous mode [ 64.761043][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.767998][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.794190][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.806330][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.813728][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.840016][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.863131][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.887973][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.895362][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.922440][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.940464][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.947441][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.973703][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.986158][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.022541][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.051620][ T5825] team0: Port device team_slave_0 added [ 65.061135][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.102673][ T5831] team0: Port device team_slave_0 added [ 65.111207][ T5831] team0: Port device team_slave_1 added [ 65.118681][ T5825] team0: Port device team_slave_1 added [ 65.135491][ T5821] team0: Port device team_slave_0 added [ 65.143718][ T5821] team0: Port device team_slave_1 added [ 65.188494][ T5829] hsr_slave_0: entered promiscuous mode [ 65.194718][ T5829] hsr_slave_1: entered promiscuous mode [ 65.215790][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.225904][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.255602][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.287040][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.294387][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.320368][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.331966][ T5840] Bluetooth: hci1: command tx timeout [ 65.336079][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.345513][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.372090][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.384356][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.391699][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.418226][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.419873][ T5840] Bluetooth: hci0: command tx timeout [ 65.438448][ T5832] hsr_slave_0: entered promiscuous mode [ 65.445425][ T5832] hsr_slave_1: entered promiscuous mode [ 65.452192][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.460450][ T5832] Cannot create hsr debugfs directory [ 65.466469][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.474911][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.501187][ T5840] Bluetooth: hci2: command tx timeout [ 65.504625][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.506814][ T5823] Bluetooth: hci3: command tx timeout [ 65.517585][ T5828] Bluetooth: hci4: command tx timeout [ 65.525451][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.535562][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.561939][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.662771][ T5825] hsr_slave_0: entered promiscuous mode [ 65.672205][ T5825] hsr_slave_1: entered promiscuous mode [ 65.679039][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.686621][ T5825] Cannot create hsr debugfs directory [ 65.704264][ T5831] hsr_slave_0: entered promiscuous mode [ 65.711282][ T5831] hsr_slave_1: entered promiscuous mode [ 65.717249][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.725047][ T5831] Cannot create hsr debugfs directory [ 65.779665][ T5821] hsr_slave_0: entered promiscuous mode [ 65.785914][ T5821] hsr_slave_1: entered promiscuous mode [ 65.795632][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.803432][ T5821] Cannot create hsr debugfs directory [ 66.053564][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.083915][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.107457][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.135006][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.158923][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.168763][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.184254][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.209429][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.264293][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.273733][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.285841][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.311817][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.406108][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.416490][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.449850][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.465634][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.502914][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.540641][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.556481][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.580203][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.605364][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.615210][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.623651][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.633413][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.653837][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.661220][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.685029][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.700713][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.707926][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.741287][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.748549][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.765280][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.772438][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.790671][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.817587][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.824883][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.837958][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.845172][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.897855][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.909525][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.939990][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.959132][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.049353][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.106161][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.147486][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.180696][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.187816][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.242677][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.249922][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.273137][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.280346][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.311250][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.322497][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.349255][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.356374][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.409204][ T5828] Bluetooth: hci1: command tx timeout [ 67.422379][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.459999][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.490225][ T5828] Bluetooth: hci0: command tx timeout [ 67.522322][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.569336][ T5828] Bluetooth: hci3: command tx timeout [ 67.572572][ T5840] Bluetooth: hci4: command tx timeout [ 67.580386][ T5823] Bluetooth: hci2: command tx timeout [ 67.624171][ T5825] veth0_vlan: entered promiscuous mode [ 67.679991][ T5829] veth0_vlan: entered promiscuous mode [ 67.695476][ T5825] veth1_vlan: entered promiscuous mode [ 67.722489][ T5829] veth1_vlan: entered promiscuous mode [ 67.794245][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.842454][ T5829] veth0_macvtap: entered promiscuous mode [ 67.892812][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.911596][ T5825] veth0_macvtap: entered promiscuous mode [ 67.920566][ T5829] veth1_macvtap: entered promiscuous mode [ 67.933811][ T5825] veth1_macvtap: entered promiscuous mode [ 67.956306][ T5831] veth0_vlan: entered promiscuous mode [ 67.996225][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.007380][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.021793][ T5832] veth0_vlan: entered promiscuous mode [ 68.041809][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.053590][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.062418][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.075175][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.086856][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.098703][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.109718][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.123010][ T5832] veth1_vlan: entered promiscuous mode [ 68.137672][ T5831] veth1_vlan: entered promiscuous mode [ 68.152812][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.164089][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.177122][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.196706][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.205891][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.217137][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.227325][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.286190][ T5821] veth0_vlan: entered promiscuous mode [ 68.299597][ T5831] veth0_macvtap: entered promiscuous mode [ 68.336960][ T5831] veth1_macvtap: entered promiscuous mode [ 68.345120][ T5832] veth0_macvtap: entered promiscuous mode [ 68.363304][ T5821] veth1_vlan: entered promiscuous mode [ 68.377372][ T5832] veth1_macvtap: entered promiscuous mode [ 68.416536][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.432867][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.444348][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.455470][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.466622][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.491472][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.500291][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.510926][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.521786][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.532510][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.543765][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.554885][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.569657][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.579354][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.588086][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.597686][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.625282][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.636271][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.646258][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.656970][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.667208][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.677864][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.689614][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.726176][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.737369][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.748518][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.759196][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.769489][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.779979][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.791360][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.808582][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.816451][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.858048][ T5821] veth0_macvtap: entered promiscuous mode [ 68.883165][ T5821] veth1_macvtap: entered promiscuous mode [ 68.895342][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.904436][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.913240][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.922063][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.937048][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.947886][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.960123][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.970212][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.031568][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.044821][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.056480][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.070886][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.081437][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.092150][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.102100][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.113082][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.129385][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.137666][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.147636][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.164153][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.172371][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.192648][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.203232][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.213779][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.224274][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.234150][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.244677][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.256188][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.285704][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.295953][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.297046][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.321216][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.338043][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.383269][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.402743][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.426358][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.460489][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.495096][ T5823] Bluetooth: hci1: command tx timeout [ 69.568437][ T5823] Bluetooth: hci0: command tx timeout [ 69.590839][ T29] audit: type=1326 audit(1739271409.017:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e958cde9 code=0x7ffc0000 [ 69.635321][ T29] audit: type=1326 audit(1739271409.017:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03e958cde9 code=0x7ffc0000 [ 69.665313][ T5823] Bluetooth: hci3: command tx timeout [ 69.673006][ T5823] Bluetooth: hci2: command tx timeout [ 69.680066][ T5823] Bluetooth: hci4: command tx timeout [ 69.691569][ T29] audit: type=1326 audit(1739271409.017:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e958cde9 code=0x7ffc0000 [ 69.713997][ T29] audit: type=1326 audit(1739271409.037:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03e958cde9 code=0x7ffc0000 [ 70.689900][ T29] audit: type=1326 audit(1739271409.037:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e958cde9 code=0x7ffc0000 [ 70.711126][ T29] audit: type=1326 audit(1739271409.047:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03e9583da7 code=0x7ffc0000 [ 70.732201][ T29] audit: type=1326 audit(1739271409.047:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03e9528fb9 code=0x7ffc0000 [ 71.265092][ T29] audit: type=1326 audit(1739271409.047:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03e9583da7 code=0x7ffc0000 [ 71.278318][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.293388][ T29] audit: type=1326 audit(1739271409.047:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03e9528fb9 code=0x7ffc0000 [ 71.323916][ T29] audit: type=1326 audit(1739271409.047:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03e9583da7 code=0x7ffc0000 [ 71.358437][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.387578][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.421513][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.516499][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.541422][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.568571][ T5840] Bluetooth: hci1: command tx timeout [ 71.658344][ T5840] Bluetooth: hci0: command tx timeout [ 71.694602][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.728523][ T5840] Bluetooth: hci4: command tx timeout [ 71.729812][ T5823] Bluetooth: hci2: command tx timeout [ 71.734600][ T5828] Bluetooth: hci3: command tx timeout [ 71.813129][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.820612][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.852363][ T5931] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.888657][ T5872] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 71.912515][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.940896][ T5872] usb 2-1: config 0 descriptor?? [ 71.964313][ T5872] cp210x 2-1:0.0: cp210x converter detected [ 73.020472][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.067867][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.068492][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.108788][ T5907] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 73.238282][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 73.251260][ T5873] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 73.272776][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.281303][ T5873] usb 3-1: Product: syz [ 73.285614][ T5873] usb 3-1: Manufacturer: syz [ 73.290509][ T5873] usb 3-1: SerialNumber: syz [ 73.307412][ T5873] r8152-cfgselector 3-1: Unknown version 0x0000 [ 73.315964][ T5922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.326964][ T5873] r8152-cfgselector 3-1: config 0 descriptor?? [ 73.332227][ T5922] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 73.478365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.508349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.519124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.551546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.566586][ T5872] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 73.577971][ T5872] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 73.594468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.598244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.611848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.648142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.656881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.668240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.724164][ T5872] usb 2-1: cp210x converter now attached to ttyUSB0 [ 73.772575][ T5872] usb 2-1: USB disconnect, device number 2 [ 73.782489][ T5873] r8152-cfgselector 3-1: Unknown version 0x0000 [ 73.802514][ T5873] r8152-cfgselector 3-1: bad CDC descriptors [ 73.819100][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 73.844898][ T5873] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 73.893458][ T5872] cp210x 2-1:0.0: device disconnected [ 74.218648][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.027570][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.063758][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 75.077913][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.098429][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.118244][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 75.135906][ T25] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 75.167164][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.187363][ T25] usb 5-1: config 0 descriptor?? [ 75.980071][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 76.470610][ T25] hid-u2fzero 0003:20A0:4287.0001: hidraw0: USB HID vff.fd Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 76.519908][ T25] hid-u2fzero 0003:20A0:4287.0001: NitroKey U2F LED initialised [ 76.567462][ T25] hid-u2fzero 0003:20A0:4287.0001: NitroKey U2F RNG initialised [ 76.601950][ T25] usb 5-1: USB disconnect, device number 2 [ 76.793268][ T5989] xt_TPROXY: Can be used only with -p tcp or -p udp [ 76.855487][ T5989] loop2: detected capacity change from 0 to 7 [ 78.509301][ T5989] Dev loop2: unable to read RDB block 7 [ 78.537120][ T5989] loop2: unable to read partition table [ 78.579696][ T5989] loop2: partition table beyond EOD, truncated [ 78.603590][ T5989] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.712770][ T5829] audit_log_start: 59 callbacks suppressed [ 78.712784][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.725662][ T29] audit: type=1400 audit(1739271418.117:71): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="*" requested=r pid=5997 comm="syz.3.25" path="/sys/fs/smackfs/logging" dev="smackfs" ino=10 [ 78.726547][ T5829] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 78.746041][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.764067][ T6002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.771030][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.777796][ C0] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 78.785462][ C0] audit: backlog limit exceeded [ 78.791162][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.797674][ C0] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 78.805408][ C0] audit: backlog limit exceeded [ 78.827980][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 79.058226][ T5875] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 79.108295][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.243332][ T5875] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 79.248599][ T5907] usb 1-1: device descriptor read/64, error -71 [ 79.252922][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.290629][ T5875] usb 5-1: config 0 descriptor?? [ 79.418342][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.518419][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.605202][ T5875] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 79.768477][ T5907] usb 1-1: device descriptor read/64, error -71 [ 79.822094][ T5875] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 79.935077][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.948757][ T5907] usb usb1-port1: attempt power cycle [ 80.056437][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.077975][ T5875] [drm:udl_init] *ERROR* Selecting channel failed [ 80.117044][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 80.162982][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.176852][ T5875] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 80.196185][ T5875] [drm] Initialized udl on minor 2 [ 80.204363][ T8] usb 2-1: config 0 descriptor?? [ 80.221173][ T5875] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 80.245767][ T5875] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 80.255371][ T974] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 80.274699][ T5875] usb 5-1: USB disconnect, device number 3 [ 80.284892][ T974] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 80.328263][ T5907] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.355699][ T974] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 80.369240][ T5907] usb 1-1: device descriptor read/8, error -71 [ 80.465034][ T8] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x3 [ 80.510198][ T8] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 80.611760][ T5907] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.617891][ T6020] syz.4.30: attempt to access beyond end of device [ 80.617891][ T6020] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 80.634677][ T6020] gfs2: error -5 reading superblock [ 80.774804][ T8] cp2112 0003:10C4:EA90.0002: error requesting version [ 80.788287][ T5907] usb 1-1: device descriptor read/8, error -71 [ 80.800891][ T8] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 80.855391][ T8] usb 2-1: USB disconnect, device number 3 [ 80.899262][ T5907] usb usb1-port1: unable to enumerate USB device [ 81.559182][ T6025] Zero length message leads to an empty skb [ 82.053930][ T51] cfg80211: failed to load regulatory.db [ 82.869939][ T6041] tty tty25: ldisc open failed (-12), clearing slot 24 [ 83.119050][ T6045] xt_TPROXY: Can be used only with -p tcp or -p udp [ 83.195422][ T6045] loop2: detected capacity change from 0 to 7 [ 83.208320][ T6045] Dev loop2: unable to read RDB block 7 [ 83.214281][ T6045] loop2: unable to read partition table [ 83.221891][ T6045] loop2: partition table beyond EOD, truncated [ 83.228919][ T6045] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.718955][ T29] kauditd_printk_skb: 1895 callbacks suppressed [ 83.718972][ T29] audit: type=1400 audit(1739271423.147:1820): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=6048 comm="syz-executor" name="oom_score_adj" dev="proc" ino=7581 [ 83.778306][ T29] audit: type=1400 audit(1739271423.147:1821): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=6048 comm="syz-executor" path="/proc/29/oom_score_adj" dev="proc" ino=7581 [ 83.885506][ T6050] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 83.893589][ T6050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.908458][ T5875] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 84.327054][ T29] audit: type=1400 audit(1739271423.147:1822): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6048 comm="syz-executor" name="8" dev="tmpfs" ino=56 [ 84.407368][ T29] audit: type=1400 audit(1739271423.147:1823): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6048 comm="syz-executor" name="8" dev="tmpfs" ino=56 [ 84.451958][ T5875] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 84.507321][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.515868][ T29] audit: type=1400 audit(1739271423.147:1824): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=6048 comm="syz-executor" name="8" dev="tmpfs" ino=56 [ 84.546057][ T5875] usb 3-1: config 0 descriptor?? [ 84.563511][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.571716][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.585332][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.591942][ C0] audit: audit_lost=53 audit_rate_limit=0 audit_backlog_limit=64 [ 84.599711][ C0] audit: backlog limit exceeded [ 84.972977][ T6057] netlink: 800 bytes leftover after parsing attributes in process `syz.1.41'. [ 84.985349][ T6057] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.41'. [ 85.328523][ T5875] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 85.359003][ T5875] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 85.408304][ T5875] [drm:udl_init] *ERROR* Selecting channel failed [ 85.444490][ T6055] kAFS: Can only specify source 'none' with -o dyn [ 85.485067][ T5875] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 85.518203][ T5875] [drm] Initialized udl on minor 2 [ 85.548337][ T5875] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 85.558332][ T5875] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 85.566330][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 85.587225][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 85.601989][ T5875] usb 3-1: USB disconnect, device number 3 [ 85.623521][ T6062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.43'. [ 87.564815][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 87.954973][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 88.790053][ T29] kauditd_printk_skb: 1990 callbacks suppressed [ 88.790100][ T29] audit: type=1400 audit(1739271428.217:3343): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5875 comm="kworker/0:6" saddr=10.128.0.169 src=30008 daddr=10.128.10.50 dest=54082 netif=eth0 [ 88.825776][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.844600][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.851275][ T5821] audit: audit_lost=212 audit_rate_limit=0 audit_backlog_limit=64 [ 88.883631][ T5821] audit: backlog limit exceeded [ 88.898841][ T5832] audit: audit_lost=213 audit_rate_limit=0 audit_backlog_limit=64 [ 88.898970][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.898992][ C0] audit: audit_lost=214 audit_rate_limit=0 audit_backlog_limit=64 [ 88.899006][ C0] audit: backlog limit exceeded [ 88.907142][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.072352][ T6090] netlink: 11 bytes leftover after parsing attributes in process `syz.2.51'. [ 89.239823][ T6095] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.304659][ T6095] loop2: detected capacity change from 0 to 7 [ 89.405067][ T6095] Dev loop2: unable to read RDB block 7 [ 89.413213][ T6095] loop2: unable to read partition table [ 89.423222][ T6095] loop2: partition table beyond EOD, truncated [ 89.430260][ T6095] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 90.319177][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.358281][ T5907] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.360244][ T974] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.542049][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.578429][ T5907] usb 3-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 90.631404][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.639145][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.645118][ T5907] usb 3-1: config 0 descriptor?? [ 90.768635][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 90.784693][ T974] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 91.184736][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.194902][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.208534][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.262143][ T974] usb 1-1: config 0 descriptor?? [ 91.296577][ T5875] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.309691][ T6104] FAULT_INJECTION: forcing a failure. [ 91.309691][ T6104] name failslab, interval 1, probability 0, space 0, times 1 [ 91.315717][ T5875] usb 4-1: config 0 has no interface number 0 [ 91.351807][ T5875] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 91.361050][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.378718][ T5875] usb 4-1: Product: syz [ 91.383188][ T5875] usb 4-1: Manufacturer: syz [ 91.387932][ T5875] usb 4-1: SerialNumber: syz [ 91.396516][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.2.56 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 91.396540][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 91.396563][ T6104] Call Trace: [ 91.396569][ T6104] [ 91.396576][ T6104] dump_stack_lvl+0x241/0x360 [ 91.396609][ T6104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.396630][ T6104] ? __pfx__printk+0x10/0x10 [ 91.396653][ T6104] ? fs_reclaim_acquire+0x93/0x130 [ 91.396669][ T6104] ? __pfx___might_resched+0x10/0x10 [ 91.396689][ T6104] should_fail_ex+0x40a/0x550 [ 91.396711][ T6104] should_failslab+0xac/0x100 [ 91.396732][ T6104] __kmalloc_noprof+0xdd/0x4c0 [ 91.396751][ T6104] ? tomoyo_encode+0x26f/0x540 [ 91.396770][ T6104] tomoyo_encode+0x26f/0x540 [ 91.396790][ T6104] tomoyo_realpath_from_path+0x59e/0x5e0 [ 91.396815][ T6104] tomoyo_path_number_perm+0x236/0x860 [ 91.396836][ T6104] ? rcu_read_lock_any_held+0xb7/0x160 [ 91.396851][ T6104] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 91.396872][ T6104] ? tomoyo_path_number_perm+0x206/0x860 [ 91.396892][ T6104] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.396911][ T6104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.396933][ T6104] ? sb_end_write+0xe9/0x1c0 [ 91.396952][ T6104] ? vfs_write+0x7fa/0xd10 [ 91.396995][ T6104] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.397017][ T6104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.397039][ T6104] security_file_ioctl+0xc6/0x2a0 [ 91.397061][ T6104] __se_sys_ioctl+0x46/0x170 [ 91.397078][ T6104] do_syscall_64+0xf3/0x230 [ 91.397098][ T6104] ? clear_bhb_loop+0x35/0x90 [ 91.397120][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.397138][ T6104] RIP: 0033:0x7fdfb398c9eb [ 91.397159][ T6104] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 91.397170][ T6104] RSP: 002b:00007fdfb4856f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.397187][ T6104] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fdfb398c9eb [ 91.397197][ T6104] RDX: 00007fdfb4857ff0 RSI: 0000000080085502 RDI: 0000000000000005 [ 91.397207][ T6104] RBP: 00007fdfb4859090 R08: 0000000000000000 R09: 0000000000000000 [ 91.397216][ T6104] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 91.397225][ T6104] R13: 0000000000000000 R14: 00007fdfb3ba5fa0 R15: 00007fff0b724cb8 [ 91.397232][ T5875] usb 4-1: config 0 descriptor?? [ 91.397247][ T6104] [ 91.397282][ T6104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.412342][ T5875] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 91.668750][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.677470][ T5907] usbhid 3-1:0.0: can't add hid device: -71 [ 91.680153][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.697130][ T5907] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 91.719113][ T5907] usb 3-1: USB disconnect, device number 4 [ 91.722690][ T974] usbhid 1-1:0.0: can't add hid device: -71 [ 91.742141][ T974] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 91.754928][ T974] usb 1-1: USB disconnect, device number 7 [ 91.895482][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.914724][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.319379][ T5875] gspca_spca1528: reg_w err -71 [ 93.324354][ T5875] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 93.339334][ T5875] usb 4-1: USB disconnect, device number 2 [ 93.632272][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.640434][ T974] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.839647][ T29] kauditd_printk_skb: 2468 callbacks suppressed [ 93.839752][ T29] audit: type=1400 audit(1739271433.207:5623): lsm=SMACK fn=smack_post_notification action=granted subject="_" object="_" requested=w pid=6133 comm="syz.4.64" [ 93.950162][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.017429][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 94.104054][ T974] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 94.161995][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.378390][ T29] audit: type=1400 audit(1739271433.237:5624): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6127 comm="syz.0.63" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 94.398321][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.403821][ T974] usb 1-1: config 0 descriptor?? [ 94.413624][ T8] usb 3-1: config 0 descriptor?? [ 94.421661][ T8] cp210x 3-1:0.0: cp210x converter detected [ 94.440845][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.448057][ T5829] audit: audit_lost=278 audit_rate_limit=0 audit_backlog_limit=64 [ 94.448158][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.456209][ T29] audit: type=1400 audit(1739271433.247:5625): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6127 comm="syz.0.63" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 94.462400][ C0] audit: audit_lost=279 audit_rate_limit=0 audit_backlog_limit=64 [ 94.462417][ C0] audit: backlog limit exceeded [ 94.463198][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.483210][ T6143] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.651666][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 94.678355][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 94.844563][ T6146] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.855221][ T6146] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.882258][ T974] wacom 0003:056A:0094.0003: unknown main item tag 0x0 [ 94.897565][ T974] wacom 0003:056A:0094.0003: unknown main item tag 0x0 [ 94.904699][ T974] wacom 0003:056A:0094.0003: unknown main item tag 0x0 [ 94.916015][ T974] wacom 0003:056A:0094.0003: unknown main item tag 0x0 [ 94.924276][ T6146] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.926475][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.940446][ T974] wacom 0003:056A:0094.0003: unknown main item tag 0x0 [ 94.948283][ T974] wacom 0003:056A:0094.0003: Using device in hidraw-only mode [ 94.948902][ T6146] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.959235][ T974] wacom 0003:056A:0094.0003: hidraw0: USB HID v2.00 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 94.967977][ T6130] netlink: 'syz.2.62': attribute type 12 has an invalid length. [ 94.988631][ T6146] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.022546][ T6146] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.040613][ T8] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 95.095105][ T8] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 95.102474][ T5903] usb 1-1: USB disconnect, device number 8 [ 95.164061][ T8] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 95.169062][ T6146] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.252216][ T6146] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.270180][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 95.278936][ T6146] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.309818][ T8] usb 3-1: USB disconnect, device number 5 [ 95.327991][ T6146] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.368460][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 95.382149][ T8] cp210x 3-1:0.0: device disconnected [ 95.388080][ T6146] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.479247][ T6146] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.563010][ T6146] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 95.572179][ T6146] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 95.960047][ T6162] warning: `syz.0.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.778152][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.009425][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.250406][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.328510][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.332601][ T6173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.423878][ T6167] capability: warning: `syz.3.73' uses deprecated v2 capabilities in a way that may be insecure [ 97.628247][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 98.848735][ T29] kauditd_printk_skb: 2980 callbacks suppressed [ 98.848785][ T29] audit: type=1400 audit(1739271438.267:7416): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6179 comm="syz.0.78" path="/dev/ptmx" dev="devtmpfs" ino=615 [ 98.868192][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.876345][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.895378][ T5492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.905732][ T5492] audit: audit_lost=677 audit_rate_limit=0 audit_backlog_limit=64 [ 98.907214][ T5829] audit: audit_lost=678 audit_rate_limit=0 audit_backlog_limit=64 [ 98.913673][ T5492] audit: backlog limit exceeded [ 98.914010][ T5492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.933378][ T5492] audit: audit_lost=679 audit_rate_limit=0 audit_backlog_limit=64 [ 98.941383][ T5492] audit: backlog limit exceeded [ 99.118675][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.149378][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.388324][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.408218][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.658610][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 100.658505][ T5903] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.699101][ T51] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.852986][ T5907] hid-generic 0000:0046:A40ABAA4.0004: hidraw0: HID v923fca.12 Device [syz0] on [ 100.929274][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.033738][ T51] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 101.043939][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 101.085901][ T6207] 9pnet_fd: Insufficient options for proto=fd [ 101.086553][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.118504][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.169558][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.191672][ T51] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 101.216823][ T5903] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 511 [ 101.229961][ T51] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 101.238362][ T5903] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 101.252121][ T51] usb 5-1: Manufacturer: syz [ 101.262625][ T5903] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.443637][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.448460][ T51] usb 5-1: config 0 descriptor?? [ 101.488604][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.518426][ T5903] usb 1-1: config 1 interface 0 has no altsetting 0 [ 101.529898][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.618271][ T51] rc_core: IR keymap rc-hauppauge not found [ 101.631742][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.649979][ T51] Registered IR keymap rc-empty [ 101.779239][ T51] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 101.789508][ T5903] usb 1-1: Product: syz [ 101.794293][ T5903] usb 1-1: Manufacturer: syz [ 101.799070][ T5903] usb 1-1: SerialNumber: syz [ 101.805294][ T51] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 101.816907][ T5903] usb 1-1: can't set config #1, error -71 [ 101.834947][ T5903] usb 1-1: USB disconnect, device number 9 [ 104.240454][ T29] kauditd_printk_skb: 2152 callbacks suppressed [ 104.240471][ T29] audit: type=1400 audit(1739271443.127:9124): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6223 comm="syz.1.88" name="newroot" dev="tmpfs" ino=2 [ 104.267449][ T29] audit: type=1400 audit(1739271443.127:9125): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6223 comm="syz.1.88" name="/" dev="devtmpfs" ino=1 [ 104.871458][ T8] usb 5-1: USB disconnect, device number 4 [ 104.884998][ T6231] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.906177][ T6231] loop2: detected capacity change from 0 to 7 [ 104.913629][ T29] audit: type=1400 audit(1739271443.127:9126): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6223 comm="syz.1.88" name="char" dev="devtmpfs" ino=1320 [ 104.919631][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.933368][ T6231] Dev loop2: unable to read RDB block 7 [ 104.945641][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.946142][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.952201][ C0] audit: audit_lost=831 audit_rate_limit=0 audit_backlog_limit=64 [ 104.952219][ C0] audit: backlog limit exceeded [ 104.952540][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.960166][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.985427][ T6231] loop2: unable to read partition table [ 105.021214][ T6231] loop2: partition table beyond EOD, truncated [ 105.031394][ T6231] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.369127][ T974] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.561090][ T974] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 106.598549][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.627193][ T974] usb 5-1: config 0 descriptor?? [ 107.680538][ T974] kaweth 5-1:0.0: Firmware present in device. [ 108.080592][ T974] kaweth 5-1:0.0: Statistics collection: 0 [ 108.086854][ T974] kaweth 5-1:0.0: Multicast filter limit: 0 [ 108.196913][ T974] kaweth 5-1:0.0: MTU: 0 [ 108.219395][ T974] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 108.227687][ T6271] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.297797][ T29] kauditd_printk_skb: 2227 callbacks suppressed [ 109.297839][ T29] audit: type=1400 audit(1739271448.707:10761): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6275 comm="syz.2.103" name="22" dev="tmpfs" ino=131 [ 109.727254][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.734994][ T6250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.758269][ T5825] audit: audit_lost=1035 audit_rate_limit=0 audit_backlog_limit=64 [ 109.766247][ T5825] audit: backlog limit exceeded [ 109.777860][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.788000][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.788145][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.794653][ C0] audit: audit_lost=1036 audit_rate_limit=0 audit_backlog_limit=64 [ 109.801380][ T6250] audit: audit_lost=1037 audit_rate_limit=0 audit_backlog_limit=64 [ 109.889971][ T974] kaweth 5-1:0.0: kaweth interface created at eth1 [ 111.245436][ T974] usb 5-1: USB disconnect, device number 5 [ 111.800934][ T6296] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 112.368319][ T5907] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.353402][ T5907] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 113.570808][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.616546][ T5907] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.250034][ T5907] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 114.296398][ T5907] usb 5-1: Manufacturer: syz [ 114.309752][ T29] kauditd_printk_skb: 1881 callbacks suppressed [ 114.309802][ T29] audit: type=1400 audit(1739271453.737:12130): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 114.347755][ T5907] usb 5-1: config 0 descriptor?? [ 114.370705][ T29] audit: type=1400 audit(1739271453.757:12131): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 114.390501][ T29] audit: type=1400 audit(1739271453.757:12132): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=719 [ 114.402156][ T6318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.409988][ T29] audit: type=1400 audit(1739271453.757:12133): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="005" dev="devtmpfs" ino=732 [ 114.435404][ T29] audit: type=1400 audit(1739271453.757:12134): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27 comm="kdevtmpfs" name="005" dev="devtmpfs" ino=732 [ 114.491095][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.491253][ T6318] audit: audit_lost=1209 audit_rate_limit=0 audit_backlog_limit=64 [ 114.497834][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.497859][ C0] audit: audit_lost=1210 audit_rate_limit=0 audit_backlog_limit=64 [ 114.618275][ T5907] rc_core: IR keymap rc-hauppauge not found [ 114.625452][ T5907] Registered IR keymap rc-empty [ 114.636126][ T5907] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 114.662415][ T5907] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 114.724786][ T6319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.738254][ T6319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.744972][ T6319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.752463][ T6319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.758806][ T6319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.788388][ T5827] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 115.024452][ T6331] 9pnet_fd: Insufficient options for proto=fd [ 116.067556][ T5827] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 116.079407][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.092782][ T5827] usb 1-1: config 0 descriptor?? [ 116.353756][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.120'. [ 116.454509][ T6335] nbd2: detected capacity change from 0 to 12 [ 116.506929][ T6339] block nbd2: Send control failed (result -89) [ 116.543639][ T6339] block nbd2: Request send failed, requeueing [ 116.595072][ T5840] block nbd2: Receive control failed (result -32) [ 116.605554][ T10] block nbd2: Dead connection, failed to find a fallback [ 116.612966][ T10] block nbd2: shutting down sockets [ 116.619279][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.628940][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 116.637408][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.643745][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.678816][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 116.690265][ T5827] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 116.698613][ T5827] [drm] Initialized udl on minor 2 [ 116.748709][ T974] usb 5-1: USB disconnect, device number 6 [ 116.767335][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.777232][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 116.778559][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.783418][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.789367][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.933858][ T5827] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 117.085220][ T5827] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 117.181369][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 117.203520][ T5907] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 117.345211][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.358612][ T5827] usb 1-1: USB disconnect, device number 10 [ 117.365117][ T5907] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 117.378286][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 117.397650][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.439188][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 117.470045][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.479546][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 117.487594][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.497025][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 117.536508][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.557046][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 117.567150][ T6339] ldm_validate_partition_table(): Disk read failed. [ 117.578820][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.598814][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 117.606960][ T6339] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.636130][ T6339] Buffer I/O error on dev nbd2, logical block 0, async page read [ 117.646804][ T6339] Dev nbd2: unable to read RDB block 0 [ 117.657241][ T6339] nbd2: unable to read partition table [ 117.665331][ T6339] nbd2: partition table beyond EOD, truncated [ 119.038158][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 119.271286][ T6366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.302014][ T6366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.358888][ T6366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.366615][ T6366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.373464][ T29] kauditd_printk_skb: 2605 callbacks suppressed [ 119.373479][ T29] audit: type=1400 audit(1739271458.797:14625): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6375 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 119.949907][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.950095][ T29] audit: type=1400 audit(1739271458.797:14626): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6375 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 119.977000][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.983566][ C0] audit: audit_lost=1249 audit_rate_limit=0 audit_backlog_limit=64 [ 119.991482][ C0] audit: backlog limit exceeded [ 119.996568][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.003128][ C0] audit: audit_lost=1250 audit_rate_limit=0 audit_backlog_limit=64 [ 120.011058][ C0] audit: backlog limit exceeded [ 120.016046][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.024395][ T6366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.248829][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.285393][ T5875] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 121.398188][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.408621][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.415801][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.670715][ T5875] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 121.690528][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.703823][ T5875] usb 4-1: config 0 descriptor?? [ 121.718277][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.208321][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 122.254951][ T8] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 122.263850][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.289961][ T8] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 122.301580][ T8] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 122.319344][ T8] usb 3-1: Manufacturer: syz [ 122.337452][ T8] usb 3-1: config 0 descriptor?? [ 122.448267][ T8] rc_core: IR keymap rc-hauppauge not found [ 122.469687][ T8] Registered IR keymap rc-empty [ 122.476485][ T5875] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 122.483927][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 122.498390][ T5875] [drm] Initialized udl on minor 2 [ 122.505457][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 122.525256][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 122.739016][ T5875] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 122.747728][ T5875] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 122.757462][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.765971][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 122.782483][ T5875] usb 4-1: USB disconnect, device number 3 [ 124.012217][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.143'. [ 124.379927][ T29] kauditd_printk_skb: 2712 callbacks suppressed [ 124.379966][ T29] audit: type=1400 audit(1739271463.807:16819): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5829 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 124.672419][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.680667][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.778395][ T5829] audit: audit_lost=1425 audit_rate_limit=0 audit_backlog_limit=64 [ 124.786414][ T5825] audit: audit_lost=1426 audit_rate_limit=0 audit_backlog_limit=64 [ 124.811019][ T5829] audit: backlog limit exceeded [ 124.818182][ T29] audit: type=1400 audit(1739271463.837:16820): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5829 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 124.840295][ T5825] audit: backlog limit exceeded [ 124.845283][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.845305][ C0] audit: audit_lost=1427 audit_rate_limit=0 audit_backlog_limit=64 [ 124.925026][ T51] usb 3-1: USB disconnect, device number 6 [ 126.052322][ T6433] syz.3.146 uses obsolete (PF_INET,SOCK_PACKET) [ 126.088285][ T6421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.094336][ T6421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.140617][ T6421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.178271][ T6421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.195143][ T6421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.706357][ T6442] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 126.714778][ T6442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.588292][ T5875] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 127.668296][ T974] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.768559][ T5875] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 127.777658][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.789041][ T5875] usb 1-1: config 0 descriptor?? [ 127.848298][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 127.860129][ T974] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 127.878247][ T974] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 128.139866][ T974] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 128.149844][ T974] usb 2-1: config 250 has no interface number 0 [ 128.156246][ T974] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 128.168361][ T974] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 128.179575][ T974] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.715621][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.721952][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 128.728082][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.734207][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.740383][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.747276][ T51] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.157217][ T5875] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 129.165162][ T974] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.175855][ T5875] [drm] Initialized udl on minor 2 [ 129.181150][ T974] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 129.468316][ T6465] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 129.702243][ T29] kauditd_printk_skb: 3117 callbacks suppressed [ 129.702280][ T29] audit: type=1400 audit(1739271469.077:18752): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6462 comm="syz.3.160" saddr=10.128.0.169 src=30008 daddr=10.128.10.50 dest=54082 netif=eth0 [ 129.738883][ T5875] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 129.750385][ T5875] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 129.758930][ T974] usb 2-1: config 250 interface 228 has no altsetting 0 [ 129.768364][ T974] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 129.779475][ T5873] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 129.789798][ T974] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 130.046398][ T5873] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 130.073158][ T5875] usb 1-1: USB disconnect, device number 11 [ 130.114570][ T974] usb 2-1: Product: syz [ 130.119023][ T29] audit: type=1400 audit(1739271469.127:18753): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=6462 comm="syz.3.160" opid=6462 ocomm="syz.3.160" [ 130.244246][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.258362][ T974] usb 2-1: SerialNumber: syz [ 130.275406][ T5829] audit: audit_lost=1823 audit_rate_limit=0 audit_backlog_limit=64 [ 130.289385][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.303755][ T27] audit: audit_lost=1824 audit_rate_limit=0 audit_backlog_limit=64 [ 130.313187][ T5829] audit: backlog limit exceeded [ 130.322190][ T29] audit: type=1400 audit(1739271469.157:18754): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6449 comm="syz.0.154" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 130.349520][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.356343][ T27] audit: backlog limit exceeded [ 130.377830][ T974] hub 2-1:250.228: bad descriptor, ignoring hub [ 130.405163][ T974] hub 2-1:250.228: probe with driver hub failed with error -5 [ 130.541930][ T974] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 130.698365][ T974] usb 2-1: USB disconnect, device number 4 [ 130.722280][ T5832] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 130.753689][ T974] usblp0: removed [ 130.815219][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 130.815243][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 130.815251][ T5832] Call Trace: [ 130.815257][ T5832] [ 130.815264][ T5832] dump_stack_lvl+0x241/0x360 [ 130.815294][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.815315][ T5832] ? __pfx__printk+0x10/0x10 [ 130.815331][ T5832] ? ___ratelimit+0x4be/0x690 [ 130.815363][ T5832] ? __pfx____ratelimit+0x10/0x10 [ 130.815383][ T5832] dump_header+0xdb/0x6e0 [ 130.815402][ T5832] oom_kill_process+0x3b8/0x950 [ 130.815420][ T5832] out_of_memory+0xf34/0x12f0 [ 130.815434][ T5832] ? mem_cgroup_out_of_memory+0xf7/0x3c0 [ 130.815453][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 130.815475][ T5832] ? __pfx_out_of_memory+0x10/0x10 [ 130.815490][ T5832] ? __pfx_lock_release+0x10/0x10 [ 130.815513][ T5832] mem_cgroup_out_of_memory+0x264/0x3c0 [ 130.815532][ T5832] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 130.815553][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 130.815568][ T5832] ? memcg1_oom_prepare+0x393/0x460 [ 130.815592][ T5832] try_charge_memcg+0xc99/0x1150 [ 130.815621][ T5832] ? __pfx_try_charge_memcg+0x10/0x10 [ 130.815654][ T5832] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 130.815669][ T5832] charge_memcg+0x9f/0x170 [ 130.815685][ T5832] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 130.815704][ T5832] __read_swap_cache_async+0x3ba/0x6d0 [ 130.815727][ T5832] ? __pfx___read_swap_cache_async+0x10/0x10 [ 130.815748][ T5832] swap_cluster_readahead+0x59c/0x710 [ 130.815767][ T5832] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 130.815786][ T5832] ? __pfx_lock_release+0x10/0x10 [ 130.815812][ T5832] swapin_readahead+0x1ba/0xd30 [ 130.815826][ T5832] ? filemap_get_entry+0x328/0x3b0 [ 130.815848][ T5832] ? __pfx_swapin_readahead+0x10/0x10 [ 130.815861][ T5832] ? __pfx_lock_release+0x10/0x10 [ 130.815882][ T5832] ? __filemap_get_folio+0x9a8/0xae0 [ 130.815903][ T5832] ? swap_cache_get_folio+0xa5/0x3c0 [ 130.815920][ T5832] do_swap_page+0x5c4/0x5c40 [ 130.815967][ T5832] ? do_swap_page+0x1ee/0x5c40 [ 130.815984][ T5832] ? __pfx_do_swap_page+0x10/0x10 [ 130.816003][ T5832] ? __pfx_validate_chain+0x10/0x10 [ 130.816026][ T5832] ? rcu_is_watching+0x15/0xb0 [ 130.816046][ T5832] ? ___pte_offset_map+0x2c4/0x380 [ 130.816066][ T5832] ? __pfx____pte_offset_map+0x10/0x10 [ 130.816084][ T5832] ? __pfx_default_wake_function+0x10/0x10 [ 130.816104][ T5832] ? __pfx_validate_chain+0x10/0x10 [ 130.816125][ T5832] ? pte_offset_map_rw_nolock+0xc4/0x140 [ 130.816145][ T5832] __handle_mm_fault+0x13dd/0x70f0 [ 130.816182][ T5832] ? __pfx___handle_mm_fault+0x10/0x10 [ 130.816201][ T5832] ? lock_vma_under_rcu+0x34b/0x790 [ 130.816229][ T5832] ? __pfx_reacquire_held_locks+0x10/0x10 [ 130.816257][ T5832] ? mtree_range_walk+0x6fd/0x8e0 [ 130.816274][ T5832] ? lock_vma_under_rcu+0x1dd/0x790 [ 130.816293][ T5832] ? __pfx_lock_release+0x10/0x10 [ 130.816308][ T5832] ? lock_vma_under_rcu+0x34b/0x790 [ 130.816340][ T5832] ? lock_vma_under_rcu+0x1dd/0x790 [ 130.816358][ T5832] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 130.816375][ T5832] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 130.816395][ T5832] handle_mm_fault+0x2c1/0x7e0 [ 130.816421][ T5832] exc_page_fault+0x459/0x8b0 [ 130.816445][ T5832] asm_exc_page_fault+0x26/0x30 [ 130.816465][ T5832] RIP: 0033:0x7fb8ab38cd8a [ 130.816481][ T5832] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 9b 63 ff ff 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 32 00 00 90 [ 130.816491][ T5832] RSP: 002b:00007ffeff223af0 EFLAGS: 00010206 [ 130.816523][ T5832] RAX: 0000000000000000 RBX: 0000000000000061 RCX: 0000000000000000 [ 130.816531][ T5832] RDX: 75e8e68921963f00 RSI: 0000000000000000 RDI: 000055556e5ae808 [ 130.816540][ T5832] RBP: 00007ffeff223b5c R08: 0000000000000000 R09: 0000000000000000 [ 130.816548][ T5832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 130.816556][ T5832] R13: 00000000000927c0 R14: 000000000001faaa R15: 00007ffeff223bb0 [ 130.816575][ T5832] [ 130.816583][ T5832] memory: usage 307200kB, limit 307200kB, failcnt 6097 [ 132.024064][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.163'. [ 132.104776][ T51] usb 3-1: device not accepting address 7, error -71 [ 132.114143][ T5832] memory+swap: usage 1676kB, limit 9007199254740988kB, failcnt 0 [ 132.131935][ T5832] kmem: usage 828kB, limit 9007199254740988kB, failcnt 0 [ 132.156013][ T5832] Memory cgroup stats for /syz4: [ 132.241833][ T5832] cache 270336 [ 132.652014][ T6474] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 132.659685][ T6474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.681891][ T5832] rss 159744 [ 132.685141][ T5832] rss_huge 0 [ 132.778436][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.861939][ T5832] shmem 8192 [ 132.865284][ T5832] mapped_file 90112 [ 132.869230][ T5832] dirty 32768 [ 132.912192][ T5832] writeback 0 [ 132.929573][ T25] usb 5-1: device descriptor read/64, error -71 [ 132.962163][ T5832] workingset_refault_anon 1085 [ 133.050343][ T5832] workingset_refault_file 98 [ 133.068065][ T5832] swap 409600 [ 133.124432][ T5832] swapcached 151552 [ 133.180556][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 133.183231][ T5832] pgpgin 48618 [ 133.209182][ T5832] pgpgout 48506 [ 133.212708][ T5832] pgfault 50730 [ 133.234581][ T5832] pgmajfault 165 [ 133.249457][ T5832] inactive_anon 196608 [ 133.252344][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.253655][ T5832] active_anon 0 [ 133.260414][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.364635][ T25] usb 5-1: device descriptor read/64, error -71 [ 133.441171][ T5832] inactive_file 262144 [ 133.445422][ T5832] active_file 0 [ 133.482587][ T5832] unevictable 0 [ 133.486223][ T5832] hierarchical_memory_limit 314572800 [ 133.519243][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 133.539914][ T25] usb usb5-port1: attempt power cycle [ 133.548269][ T5832] hierarchical_memsw_limit 9223372036854771712 [ 133.632122][ T5832] total_cache 270336 [ 133.656842][ T5832] total_rss 159744 [ 133.674800][ T5832] total_rss_huge 0 [ 133.712831][ T5832] total_shmem 8192 [ 133.766522][ T5832] total_mapped_file 90112 [ 133.824548][ T5832] total_dirty 32768 [ 133.841254][ T5832] total_writeback 0 [ 133.845200][ T5832] total_workingset_refault_anon 1085 [ 133.887965][ T5832] total_workingset_refault_file 98 [ 133.908264][ T5832] total_swap 409600 [ 133.912445][ T5832] total_swapcached 151552 [ 133.916834][ T5832] total_pgpgin 48618 [ 133.948266][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.952634][ T5832] total_pgpgout 48506 [ 133.978290][ T5832] total_pgfault 50730 [ 133.982695][ T5832] total_pgmajfault 165 [ 133.986927][ T5832] total_inactive_anon 196608 [ 133.999330][ T25] usb 5-1: device descriptor read/8, error -71 [ 134.008201][ T5832] total_active_anon 0 [ 134.012433][ T5832] total_inactive_file 262144 [ 134.017688][ T5832] total_active_file 0 [ 134.037609][ T6494] 9pnet_fd: Insufficient options for proto=fd [ 134.058223][ T5832] total_unevictable 0 [ 134.062381][ T5832] anon_cost 23 [ 134.076311][ T5832] file_cost 0 [ 134.082863][ T5832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.159,pid=6459,uid=0 [ 134.106498][ T5832] Memory cgroup out of memory: Killed process 6459 (syz.4.159) total-vm:104088kB, anon-rss:924kB, file-rss:23176kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 134.818480][ T29] kauditd_printk_skb: 2129 callbacks suppressed [ 134.818521][ T29] audit: type=1400 audit(1739271474.167:20211): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=6497 comm="syz.4.171" opid=6497 ocomm="syz.4.171" [ 134.924434][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.112467][ T29] audit: type=1400 audit(1739271474.197:20212): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6502 comm="syz.2.173" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 135.303724][ T29] audit: type=1400 audit(1739271474.287:20213): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6502 comm="syz.2.173" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 135.323303][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.335298][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.342370][ T6503] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.369793][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.374989][ T6500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.377186][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.389400][ T6500] audit: audit_lost=2054 audit_rate_limit=0 audit_backlog_limit=64 [ 135.389422][ T6500] audit: backlog limit exceeded [ 135.418995][ T5875] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 135.428207][ T5907] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 135.448684][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.481613][ T5875] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 135.495799][ T5875] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 135.519560][ T5875] usb 3-1: Manufacturer: syz [ 135.535983][ T5875] usb 3-1: config 0 descriptor?? [ 135.583399][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.175'. [ 135.689099][ T5875] rc_core: IR keymap rc-hauppauge not found [ 135.705778][ T5875] Registered IR keymap rc-empty [ 135.732745][ T5875] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 135.976251][ T5907] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 135.993487][ T5875] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 136.026997][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.660930][ T5907] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 136.671311][ T5907] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 136.679403][ T5907] usb 1-1: Manufacturer: syz [ 136.689592][ T5907] usb 1-1: config 0 descriptor?? [ 137.138288][ T6523] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 137.146716][ T6523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.511313][ T5907] rc_core: IR keymap rc-hauppauge not found [ 137.525196][ T5907] Registered IR keymap rc-empty [ 137.536336][ T5907] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 138.164189][ T51] usb 3-1: USB disconnect, device number 9 [ 138.334625][ T5907] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input9 [ 138.960628][ T6533] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 139.415710][ T51] usb 1-1: USB disconnect, device number 12 [ 139.806739][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080d [ 139.835780][ T29] kauditd_printk_skb: 2072 callbacks suppressed [ 139.835797][ T29] audit: type=1400 audit(1739271479.257:21654): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6538 comm="syz.0.182" name="26" dev="tmpfs" ino=155 [ 139.853636][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.866928][ T29] audit: type=1400 audit(1739271479.277:21655): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5825 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 139.869923][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.892983][ T29] audit: type=1400 audit(1739271479.277:21656): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5825 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 139.893303][ C0] audit: audit_lost=2267 audit_rate_limit=0 audit_backlog_limit=64 [ 139.915238][ T6540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.920330][ C0] audit: backlog limit exceeded [ 139.927138][ T29] audit: type=1400 audit(1739271479.277:21657): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5825 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 139.938618][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.148069][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 141.695630][ T6568] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 141.703507][ T6568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.308450][ T6569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 143.820319][ T5828] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 143.829113][ T5828] Bluetooth: hci4: Injecting HCI hardware error event [ 143.837894][ T5828] Bluetooth: hci4: hardware error 0x00 [ 144.209018][ T6588] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 144.221720][ T6588] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 144.230170][ T6588] CPU: 0 UID: 0 PID: 6588 Comm: syz.3.196 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 144.240769][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.250960][ T6588] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 144.256450][ T6588] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 4b b6 7f 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 38 b1 88 00 48 be 00 00 00 00 00 fc [ 144.276193][ T6588] RSP: 0018:ffffc9000bb07870 EFLAGS: 00010006 [ 144.282439][ T6588] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 144.290401][ T6588] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 144.298363][ T6588] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 144.306327][ T6588] R10: dffffc0000000000 R11: fffffbfff203466f R12: ffff888031c6bc00 [ 144.314311][ T6588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 144.322307][ T6588] FS: 00007f03e73f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 144.331242][ T6588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.337815][ T6588] CR2: 000000110c4462a4 CR3: 000000007d992000 CR4: 00000000003526f0 [ 144.345778][ T6588] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.353743][ T6588] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.361709][ T6588] Call Trace: [ 144.364980][ T6588] [ 144.367907][ T6588] ? __die_body+0x5f/0xb0 [ 144.372280][ T6588] ? die_addr+0xb0/0xe0 [ 144.376538][ T6588] ? exc_general_protection+0x3dd/0x5d0 [ 144.382180][ T6588] ? asm_exc_general_protection+0x26/0x30 [ 144.387903][ T6588] ? __lock_acquire+0x6a/0x2100 [ 144.392834][ T6588] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.399161][ T6588] ? trace_irq_disable+0x2c/0x120 [ 144.404177][ T6588] ? lockdep_hardirqs_on+0x99/0x150 [ 144.409383][ T6588] lock_acquire+0x1ed/0x550 [ 144.413879][ T6588] ? add_wait_queue+0x46/0x180 [ 144.418635][ T6588] ? queue_work_on+0x22f/0x380 [ 144.423391][ T6588] ? queue_work_on+0x25f/0x380 [ 144.428145][ T6588] ? __pfx_lock_acquire+0x10/0x10 [ 144.433160][ T6588] ? __local_bh_enable_ip+0x168/0x200 [ 144.438531][ T6588] ? __pfx_queue_work_on+0x10/0x10 [ 144.443631][ T6588] ? __local_bh_enable_ip+0x168/0x200 [ 144.449003][ T6588] ? vsock_loopback_send_pkt+0xb6/0x100 [ 144.454564][ T6588] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 144.460282][ T6588] ? do_raw_spin_unlock+0x13c/0x8b0 [ 144.465480][ T6588] _raw_spin_lock_irqsave+0xd5/0x120 [ 144.470799][ T6588] ? add_wait_queue+0x46/0x180 [ 144.475563][ T6588] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 144.481543][ T6588] ? virtio_transport_send_pkt_info+0xd13/0x10b0 [ 144.487873][ T6588] add_wait_queue+0x46/0x180 [ 144.492565][ T6588] virtio_transport_release+0x4c4/0xce0 [ 144.498137][ T6588] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.504113][ T6588] ? __pfx_virtio_transport_release+0x10/0x10 [ 144.510173][ T6588] ? __pfx_woken_wake_function+0x10/0x10 [ 144.515933][ T6588] ? __local_bh_enable_ip+0x168/0x200 [ 144.521356][ T6588] ? __vsock_release+0xa4/0x4f0 [ 144.526221][ T6588] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 144.531944][ T6588] ? __vsock_release+0x3b/0x4f0 [ 144.536801][ T6588] __vsock_release+0xf1/0x4f0 [ 144.541473][ T6588] vsock_release+0x97/0x100 [ 144.545997][ T6588] sock_close+0xbc/0x240 [ 144.550231][ T6588] ? __pfx_sock_close+0x10/0x10 [ 144.555077][ T6588] __fput+0x3e9/0x9f0 [ 144.559087][ T6588] __x64_sys_close+0x7f/0x110 [ 144.563760][ T6588] do_syscall_64+0xf3/0x230 [ 144.568261][ T6588] ? clear_bhb_loop+0x35/0x90 [ 144.572951][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.578932][ T6588] RIP: 0033:0x7f03e958cde9 [ 144.583357][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.602958][ T6588] RSP: 002b:00007f03e73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 144.611543][ T6588] RAX: ffffffffffffffda RBX: 00007f03e97a5fa0 RCX: 00007f03e958cde9 [ 144.619521][ T6588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 144.627590][ T6588] RBP: 00007f03e960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.635641][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.643623][ T6588] R13: 0000000000000000 R14: 00007f03e97a5fa0 R15: 00007ffe4ffe5a28 [ 144.651590][ T6588] [ 144.654595][ T6588] Modules linked in: [ 144.658490][ T6588] ---[ end trace 0000000000000000 ]--- [ 144.663932][ T6588] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 144.669394][ T6588] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 4b b6 7f 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 38 b1 88 00 48 be 00 00 00 00 00 fc [ 144.689092][ T6588] RSP: 0018:ffffc9000bb07870 EFLAGS: 00010006 [ 144.695158][ T6588] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 144.703126][ T6588] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 144.711097][ T6588] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 144.719079][ T6588] R10: dffffc0000000000 R11: fffffbfff203466f R12: ffff888031c6bc00 [ 144.727043][ T6588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 144.735004][ T6588] FS: 00007f03e73f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 144.743926][ T6588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.750505][ T6588] CR2: 000000110c4462a4 CR3: 000000007d992000 CR4: 00000000003526f0 [ 144.758467][ T6588] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.766510][ T6588] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.774924][ T6588] Kernel panic - not syncing: Fatal exception [ 144.781115][ T6588] Kernel Offset: disabled [ 144.785426][ T6588] Rebooting in 86400 seconds..