last executing test programs: 29.388929037s ago: executing program 4 (id=1894): unshare(0x60480) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x24}]}, 0x10) 28.791770829s ago: executing program 4 (id=1897): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000000)=@ceph_nfs_fh={0x18, 0xfb, {0xfbffffff}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x83010000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=@getlink={0x1f0, 0x12, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x10820, 0x1001}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14}, {0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'rose0\x00'}, {0x14, 0x35, 'netdevsim0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5e23}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xa97}, @IFLA_TXQLEN={0x8, 0xd, 0x10000}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "177b8b4c243de0c496988d121661acf1"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "87ffa97b583ad2d8c3d0b87231f9ba48"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dc2845cc7abf4f347e2fdc98a1136c7a"}]}, @IFLA_VFINFO_LIST={0xdc, 0x16, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffa, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x728, 0xc75, 0x80000000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x7ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10c981d6, 0xfffffffa}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0xa3, 0x9fd6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x2, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x7fff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0xd6de07b403540a78) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r7, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 15.334652386s ago: executing program 4 (id=1897): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000000)=@ceph_nfs_fh={0x18, 0xfb, {0xfbffffff}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x83010000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=@getlink={0x1f0, 0x12, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x10820, 0x1001}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14}, {0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'rose0\x00'}, {0x14, 0x35, 'netdevsim0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5e23}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xa97}, @IFLA_TXQLEN={0x8, 0xd, 0x10000}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "177b8b4c243de0c496988d121661acf1"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "87ffa97b583ad2d8c3d0b87231f9ba48"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dc2845cc7abf4f347e2fdc98a1136c7a"}]}, @IFLA_VFINFO_LIST={0xdc, 0x16, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffa, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x728, 0xc75, 0x80000000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x7ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10c981d6, 0xfffffffa}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0xa3, 0x9fd6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x2, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x7fff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0xd6de07b403540a78) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r7, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14.06926478s ago: executing program 4 (id=1944): mknod$loop(0x0, 0x0, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000a4d2ff40f3054f02241b0102030109021b0001000000000d040000014eaf320009050a004ff0f69c61d91af8290000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x579000, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d001280d09178d2da3477ec73a38ffffcd82caf103bc848e79022290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f0000001e010680f65e"], 0x184}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) getgroups(0x2, &(0x7f00000005c0)=[0xee00, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0\x00'}) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1400, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x180a9, 0x0) renameat2(r9, &(0x7f0000000640)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x0, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) 10.812553324s ago: executing program 4 (id=1960): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000540)={0x40, 0x8, 0x3d, {0x3d, 0x11, "472fe85994adaaca57ed7cf4746dfe3826f6c30db1e92cfe1784ece3122e8602c593722a3336cf9cdc87d1ed775b82bea68a298672b970dec09ff1"}}, &(0x7f00000001c0)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "88c0b5985ba6ab9b51490af2b18e8f5f8e2ac0166e000f11067c16f11762d82e922d72ea8d10fd3e4bd1bfbe"}}, &(0x7f00000006c0)={0x0, 0xf, 0x48, {0x5, 0xf, 0x48, 0x1, [@generic={0x43, 0x10, 0x3, "1d76de32990b2146d5dcf167e261ba7936cb59f0c83028a7f6f9787613d5de8598411a10763f9c16df25d2dbf0bd4e8cccc32536a82c27f72deed5be96b259e1"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x0, 0xfa, "926f46d1", "b0c3ecc7"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xea, 0x2, 0x7, 0x8, 0x5, 0x0, 0xa}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0xc, 0x6a, "0ad320fba5f163a9ee26cf80fe62ee7b90018acad6de117afbec5030594f319d13887d01094dd0e3a24d95e8a91c06c647cb5efca95cb598419643f4edcfbeea51ca8eed1bd7fd1c0427de420f53bfc35cc49dcdb2fe2b701da46646557a82d8356c82f821480d03ac04"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x6e0, 0x10, [0xf87f]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000940)={0x40, 0xb, 0x2, "2611"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x5e}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "e3a1"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000b80)={0x40, 0x1c, 0x1}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x81}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000480)=@framed={{}, [@printk={@llx}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0xd7, 0x60, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "db3ba3"}, {0x5, 0x24, 0x0, 0x101}, {0x6, 0x24, 0xf, 0x1, 0x4, 0x6, 0x7, 0xff}, {0x6, 0x24, 0x1a, 0x1ed, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xfb, 0x30, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x79, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0xf, 0x8}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x4, 0x3, 0xbd, 0x8, 0x2}, 0x1d, &(0x7f0000000200)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12c, 0x2, 0x0, 0xff, 0x73}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x83e}}, {0x3f, &(0x7f0000000180)=@string={0x3f, 0x3, "c89505302534cb0903cb678ce06e760410f8a56a2bdd81b7dbee7956751b6f4a6c14c6bb1ea6e97efc769c1dc397ee154e2b62c54a1fb90d3268ec1bd2"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000200)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000d00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 10.550931707s ago: executing program 4 (id=1964): pipe(0x0) io_setup(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000004c0)={0x300009000, &(0x7f0000000180), &(0x7f0000000300), 0x0, {0xfffffffd}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, {r0}}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r2, &(0x7f00000005c0)={@icreq={{0x0, 0x9, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x5}, @val=&(0x7f0000000400)="9b595bae98be832bcabbfbb16d4b89"}, 0x88, 0x0, 0x0, 0x0) r3 = socket(0x40000000002, 0x3, 0x9) setsockopt(r3, 0xff, 0x1, 0x0, 0x32) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x8, 0x4, @private2, @loopback, 0x700, 0x8700, 0xeb}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000001c0)}) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4024000) sendmsg$nl_route(r3, &(0x7f0000002080)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000002000)=@ipmr_newroute={0x58, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x0, 0x5, 0xff, 0x3, 0x0, 0xa, 0xc00}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @empty}}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x2, 0xf7, r6}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xa, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) preadv2(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/150, 0x96}], 0x1, 0x9, 0xfffffffc, 0x14) 9.450086654s ago: executing program 2 (id=1966): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) 9.33461336s ago: executing program 2 (id=1968): pipe(0x0) io_setup(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000004c0)={0x300009000, &(0x7f0000000180), &(0x7f0000000300), 0x0, {0xfffffffd}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, {r0}}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket(0x1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r2, &(0x7f00000005c0)={@icreq={{0x0, 0x9, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x5}, @val=&(0x7f0000000400)="9b595bae98be832bcabbfbb16d4b89"}, 0x88, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x32) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x8, 0x4, @private2, @loopback, 0x700, 0x8700, 0xeb}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000001c0)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000002000)=@ipmr_newroute={0x58, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x0, 0x5, 0xff, 0x3, 0x0, 0xa, 0xc00}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @empty}}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x2, 0xf7, r5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) preadv2(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/150, 0x96}], 0x1, 0x9, 0xfffffffc, 0x14) 6.982748686s ago: executing program 0 (id=1970): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x1003, 0x4) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x148, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x0, 0x0, 0x1a, 0x0, 0x0, 0x9, 0x600000}}}, @common=@dst={{0x48}, {0x0, 0x0, 0x41}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000580)={'fscrypt:', @desc1}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x37}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e26, @local}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {}, 0x0, 0x0, &(0x7f0000000080)="f2c01c749a6e22ebe511fee120f0139864d81dd99415d8d6d1a8c5e59b4655dd520cf09ed464f626de6c985a8964e198fcada7", 0x33, 0x0, 0x0, 0x0, 0x100000, 0xfffffffb, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) 4.684229401s ago: executing program 1 (id=1977): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000abd1a0407b0726228bca000000010902120001000000000904"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x1) (async) sendfile(r2, r1, 0x0, 0x1) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.071890383s ago: executing program 2 (id=1978): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) 4.025600648s ago: executing program 3 (id=1979): read$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x0, 0x0, 0x700}}) 3.83300558s ago: executing program 2 (id=1980): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="35c90070c78d17", @ANYRES16=r1, @ANYBLOB="1dc300000000fbdbdf2504000000"], 0x14}}, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) io_uring_setup(0x5f4e, &(0x7f00000000c0)) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) connect$rxrpc(r3, &(0x7f0000001bc0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) syz_usb_control_io(r2, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001040)={0x0, 0x9, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x34}}, 0x0) (async) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/154, 0x9a}], 0x1}}], 0x1, 0x12141, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="18030000100013070000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000040000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x22004810}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) 3.795580516s ago: executing program 0 (id=1981): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r0, 0x1, 0x22, &(0x7f0000000780)=""/63, &(0x7f00000007c0)=0x3f) 3.609466822s ago: executing program 3 (id=1982): iopl(0x3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x20010, 0xffffffffffffffff, 0xd81cf000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x5760, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001c00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x1}, 0x20) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.604715249s ago: executing program 0 (id=1983): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000038000000720a00ff000000007900580e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000c5cf000000000000009500000800000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 3.554725595s ago: executing program 0 (id=1984): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x1, 0xffffffffffffffff, @prog_fd=r0}, 0x20) getpid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x0, 0xb, 0x148, 0x98, 0x148, 0x128, 0x242, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r4, 0x0}) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080)=0x87f2, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1f}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009f0f5b4035121800eef0000000010902120001000000000904000000a7dd2d00"], 0x0) r9 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r9, 0xc054561d, &(0x7f0000000480)={0xff, "b6a2c453d4f3fe50f28b755c44da257751c6170b224d342a8ed2013e37411cfb"}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x300, &(0x7f0000000300)}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) 2.501329389s ago: executing program 1 (id=1985): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4, &(0x7f00000002c0)={0x0, 0x0, 0x40}, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) io_uring_setup(0xb5b9, &(0x7f0000000100)={0x0, 0x0, 0x10}) io_uring_setup(0x5c46, &(0x7f0000000100)) syz_open_dev$vbi(&(0x7f0000000380), 0x3, 0x2) syz_io_uring_setup(0x24f7, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0xdb6, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x24fa, &(0x7f0000000180), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x12) openat$nullb(0xffffff9c, &(0x7f0000007300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_dev$mouse(&(0x7f0000000600), 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.22905509s ago: executing program 1 (id=1986): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x7}, {0x0, 0x4}]}) r5 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180), 0x404, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r8, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000240)={0x1, 0x7f, 0x0, 0x7}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private1}, 0x1c) r11 = syz_io_uring_setup(0x7065, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000180)=0x3) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r14, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x5}, @in6={0xa, 0x4e21, 0xffff, @empty, 0x80000000}], 0x38) io_uring_enter(r11, 0x2def, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x1000, @local, 0x7}]}, &(0x7f0000000100)=0x7) shutdown(r10, 0x1) 1.806445751s ago: executing program 3 (id=1987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) finit_module(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/84, 0x54, 0x9, 0xfffffffa, 0x1, 0x6, 0x8000}}, 0x120) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "d7008ee5f956c7482988e2c286e056db244106ef1a9aba8b534d3b7a7a831710c8d9171bc53898903dc8e7fd1c7736f1ec8a44536ee2de488921361e92c8492cf2090f6ceb8995a2fd0fc187c798293ef6f0158c259527b2040533aff2aba00ba70eb543ce914b55d99fa2976938b36c0db658af8c1749e2db0143aa8df5d90fc1e6be903f0c31a440a92657a071b9bc"}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001800000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000001000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc40700a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64c490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e1700000000000000000000000000000832b99df00000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cb5ee3a7c9ef89edbdf42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2bca0f4557869ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54aba40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be206af7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c708e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec29066d9bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883be00900009ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0x5c, 0x0, &(0x7f00000002c0)="b9fef0076805268c98be14f0655847", 0x0, 0xdc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0xffffffffffffffff) 1.569306463s ago: executing program 3 (id=1988): pipe(0x0) io_setup(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000004c0)={0x300009000, &(0x7f0000000180), &(0x7f0000000300), 0x0, {0xfffffffd}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, {r0}}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket(0x1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r2, &(0x7f00000005c0)={@icreq={{0x0, 0x9, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x5}, @val=&(0x7f0000000400)="9b595bae98be832bcabbfbb16d4b89"}, 0x88, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x32) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x8, 0x4, @private2, @loopback, 0x700, 0x8700, 0xeb}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000001c0)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000002000)=@ipmr_newroute={0x58, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x0, 0x5, 0xff, 0x3, 0x0, 0xa, 0xc00}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @empty}}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x2, 0xf7, r5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) preadv2(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/150, 0x96}], 0x1, 0x9, 0xfffffffc, 0x14) 1.210889752s ago: executing program 1 (id=1989): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000200)) 994.293929ms ago: executing program 2 (id=1990): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) 801.890073ms ago: executing program 2 (id=1991): socket$kcm(0x10, 0x0, 0x0) (async) socket(0x0, 0x3, 0x3a) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000b00)={0x0, 0x0, 0x2, "ca19"}, 0x0, 0x0}) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x40, 0x1, 0xcd, {0xcd, 0xe, "5b44b05c25af2481acbd78b3f07ac393b5dc568c6d77081eb408465f4d0e24c9bfa011e7552fb538c4e840b2eb23795f6a0c25f74cdda7785d39f6f4d747cea8aaa113550de600711078d0b3be8494629b347bc3d64471b35545cc0b9e00496d99c3c3cb9fd947646eb0e523c5e73d2a8195ac5a9e7d584f2b2c605cac238a394afa0755f65099365c0978d81332f11ff533d916f8e76890d3afa1359a1927f152270e85730a18362dce5fec46bb48428d5b1d2c006e4d2b2d95367b4c4a7c3d17b8c47b57e265c456b746"}}, &(0x7f0000000200)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "b5db0c3cfae4c306017311d677d43f94900ecffb6b14219d41ac6a94e112983d17953176c50d78b22e0225aced6d503e6215d6318345ceb62b5295f0d6942e17f6b02b05efbbf850c87c4a66a147a928d4c5461db52b90fc89550f1a2e537d6d2e60ff1b125a8f5e380ebd7151f67cd8078b6eee16bd6546101c3065119804554c3e0dbc4f6972996258631873489a63ea4f5618a0673cd2fb7271fcfb1cef17175f3d"}}, &(0x7f0000000300)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x3, "0e78"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x5, "95531325"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xff, 0x1, {0x22, 0x8ca}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x5, 0x8b, "65c3ec84b13f8fcd0a0a2365e7e685cfd40980fd5a5ae8c533b610f8c7c867d86630949c64d46577e24e3bd30a067cca7b87c7213bd7ee6c0492d9db763fc0f3078542471e137b3fddae4f79c54bb8e445077b44a5617df10b81e5593ef9016e26aa21dfd135e4749682ecf19d0ef99cc00fb4faf3606ed02f39b2fefbba75800c6f649a92add0e137c717"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x1, 0x22, "1b6c7ebcf88d9d879eaa429b331540d36099fd9b326b73eb1e56da0c539236db4f40"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xf}}) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) getdents64(r4, &(0x7f0000000380)=""/186, 0xba) (async) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x158, 0x0, 0x0, [{{}, {0x0, 0x0, 0x10, 0x0, '.\'\xfcx\x8e\xe6!\xb5\x01\x00\xa0\xb4\x19\xa8\x02\x1c'}}, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {0x0, 0x0, 0x1, 0x0, '{'}}]}, 0x0, 0x0}) (async) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ffe}], 0x1, 0x88, 0xfffffffe) (async) r6 = socket$netlink(0x10, 0x3, 0x15) readv(0xffffffffffffffff, 0x0, 0x0) (async) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100a20035000000560000022500000019000a00100000ad07fd17e5ffff080c38005100000000000a", 0x39}], 0xc) 563.9402ms ago: executing program 3 (id=1992): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49", 0x0, 0x81}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000002c0), 0x4) r1 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x9, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4$ax25(r5, 0x0, &(0x7f00000000c0), 0x80800) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r5}, 0x18) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r8, 0x0, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f0000000180)="bdd42e85128a8870e25768259c050f0cc928344e547f005e562f8820f6d6abb408a457a3c2848baf34777b1e1028ded43109f3ffebd48771fa5fd1daef00d8ece070b9c435f365a4", &(0x7f0000000240)=@tcp6=r7, 0x1}, 0x20) 432.348877ms ago: executing program 0 (id=1993): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x90}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 300.523417ms ago: executing program 0 (id=1994): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0xfffffecc) splice(r3, 0x0, r2, 0x0, 0x4ffe2, 0xe) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000017c000/0x2000)=nil) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4}]}, 0x18}}, 0x0) munlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) fchdir(r5) open(&(0x7f0000000040)='./file0\x00', 0xc0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80020, 0x0) mbind(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1, 0x400c, 0x2) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 242.460421ms ago: executing program 3 (id=1995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008864"], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0x100000, 0x2c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x0, r7}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x1, r7, 0x0, r5}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x100000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @empty, 0x401}, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, r10}}, 0x48) 190.66187ms ago: executing program 1 (id=1996): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4, &(0x7f00000002c0)={0x0, 0x0, 0x40}, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) io_uring_setup(0xb5b9, &(0x7f0000000100)={0x0, 0x0, 0x10}) io_uring_setup(0x5c46, &(0x7f0000000100)) syz_open_dev$vbi(&(0x7f0000000380), 0x3, 0x2) syz_io_uring_setup(0x24f7, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0xdb6, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x24fa, &(0x7f0000000180), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x12) openat$nullb(0xffffff9c, &(0x7f0000007300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_dev$mouse(&(0x7f0000000600), 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1997): iopl(0x3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x20010, 0xffffffffffffffff, 0xd81cf000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x5760, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001c00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x1}, 0x20) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) kernel console output (not intermixed with test programs): y_hcd [ 568.888844][ T5215] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 568.908891][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 568.986322][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 569.198287][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 569.339603][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 569.468698][ T5215] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 569.564038][ T5263] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 569.639007][T12660] fuse: Unknown parameter 'user_id00000000000000000000' [ 569.722935][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 569.733014][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 569.742987][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 569.743147][ T5263] usb 4-1: device descriptor read/64, error -71 [ 569.754419][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 570.123029][ T5263] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 570.183934][ T5215] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 570.191373][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 570.208089][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 570.237634][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 570.265973][ T5215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 570.310161][ T5215] usb 3-1: string descriptor 0 read error: -22 [ 570.325353][ T5215] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 570.379827][ T5263] usb 4-1: device descriptor read/64, error -71 [ 570.399116][ T5215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.453366][ T5215] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 570.504549][ T5263] usb usb4-port1: attempt power cycle [ 570.836014][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 570.917737][ T5215] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 571.654104][ T5263] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 571.658498][ T5295] usb 3-1: USB disconnect, device number 66 [ 571.801208][T12684] fuse: Unknown parameter 'user_i00000000000000000000' [ 571.814140][ T5215] usb 2-1: unable to get BOS descriptor or descriptor too short [ 571.830455][ T5215] usb 2-1: not running at top speed; connect to a high speed hub [ 571.849927][ T5215] usb 2-1: string descriptor 0 read error: -22 [ 571.857602][ T5215] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 571.877230][ T5215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.916098][ T5215] usb 2-1: config 0 descriptor?? [ 571.928734][ T5215] gspca_main: spca501-2.14.0 probing 0497:c001 [ 571.946848][ T5263] usb 4-1: device not accepting address 61, error -71 [ 572.138832][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.170325][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.303352][ T5215] gspca_spca501: reg write: error -71 [ 572.330015][ T5215] spca501 2-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 572.343511][ T5215] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 572.356132][ T5215] usb 2-1: USB disconnect, device number 56 [ 572.484192][ T5295] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 572.874937][ T5295] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 572.886727][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.898408][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.909301][ T5295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 572.974290][ T5295] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 572.983863][ T5295] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 573.136634][ T5295] usb 3-1: Manufacturer: syz [ 573.155873][ T5295] usb 3-1: config 0 descriptor?? [ 573.598105][ T5295] usbhid 3-1:0.0: can't add hid device: -71 [ 573.629915][ T5295] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 573.835144][ T5295] usb 3-1: USB disconnect, device number 67 [ 575.017072][T12724] fuse: Unknown parameter 'user_i00000000000000000000' [ 575.502907][T10899] Bluetooth: hci3: command 0x2016 tx timeout [ 575.982893][ T5263] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 575.987830][ T5266] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 576.152923][ T5266] usb 2-1: device descriptor read/64, error -71 [ 576.182899][ T5263] usb 3-1: Using ep0 maxpacket: 32 [ 576.190309][ T5263] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 576.199900][ T5263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.219162][ T5263] usb 3-1: config 0 descriptor?? [ 576.230720][ T5263] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 576.423114][ T5266] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 576.460360][ T5215] usb 3-1: USB disconnect, device number 68 [ 576.583346][ T5266] usb 2-1: device descriptor read/64, error -71 [ 576.705810][ T5266] usb usb2-port1: attempt power cycle [ 576.872907][ T5263] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 577.072878][ T5263] usb 5-1: Using ep0 maxpacket: 8 [ 577.080405][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.091371][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.101135][ T5263] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 577.110508][ T5263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.120946][ T5263] usb 5-1: config 0 descriptor?? [ 577.122913][ T5266] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 577.163499][ T5266] usb 2-1: device descriptor read/8, error -71 [ 577.297458][ T1168] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 577.448282][ T5266] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 577.488731][ T5266] usb 2-1: device descriptor read/8, error -71 [ 577.522877][ T1168] usb 3-1: Using ep0 maxpacket: 8 [ 577.530384][ T1168] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 577.539598][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.554450][ T1168] usb 3-1: config 0 descriptor?? [ 577.561176][ T5263] lenovo 0003:17EF:6067.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.4-1/input0 [ 577.613129][ T5266] usb usb2-port1: unable to enumerate USB device [ 577.781072][ T5266] usb 5-1: USB disconnect, device number 44 [ 578.414366][ T1168] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 578.476664][ T1168] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 578.490779][T12762] FAULT_INJECTION: forcing a failure. [ 578.490779][T12762] name failslab, interval 1, probability 0, space 0, times 0 [ 578.514017][T12762] CPU: 1 UID: 0 PID: 12762 Comm: syz.4.1747 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 578.524803][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 578.534869][T12762] Call Trace: [ 578.538146][T12762] [ 578.541069][T12762] dump_stack_lvl+0x241/0x360 [ 578.545759][T12762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.550944][T12762] ? __pfx__printk+0x10/0x10 [ 578.555519][T12762] ? fs_reclaim_acquire+0x93/0x140 [ 578.560611][T12762] ? __pfx___might_resched+0x10/0x10 [ 578.565897][T12762] should_fail_ex+0x3b0/0x4e0 [ 578.570596][T12762] ? tomoyo_encode+0x26f/0x540 [ 578.575382][T12762] should_failslab+0xac/0x100 [ 578.580081][T12762] ? tomoyo_encode+0x26f/0x540 [ 578.584854][T12762] __kmalloc_noprof+0xd8/0x400 [ 578.589606][T12762] tomoyo_encode+0x26f/0x540 [ 578.594201][T12762] tomoyo_realpath_from_path+0x59e/0x5e0 [ 578.596847][ T1168] asix 3-1:0.0: probe with driver asix failed with error -71 [ 578.599849][T12762] tomoyo_path_number_perm+0x23a/0x880 [ 578.612662][T12762] ? tomoyo_path_number_perm+0x208/0x880 [ 578.618303][T12762] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.624311][T12762] ? __fget_files+0x29/0x470 [ 578.628899][T12762] ? __fget_files+0x3f6/0x470 [ 578.633564][T12762] ? __fget_files+0x29/0x470 [ 578.638152][T12762] security_file_ioctl+0x75/0xb0 [ 578.643085][T12762] __se_sys_ioctl+0x47/0x170 [ 578.647664][T12762] do_syscall_64+0xf3/0x230 [ 578.652158][T12762] ? clear_bhb_loop+0x35/0x90 [ 578.656828][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.662714][T12762] RIP: 0033:0x7f1cac577299 [ 578.667123][T12762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.686730][T12762] RSP: 002b:00007f1cad38f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.695140][T12762] RAX: ffffffffffffffda RBX: 00007f1cac705f80 RCX: 00007f1cac577299 [ 578.703099][T12762] RDX: 0000000020000180 RSI: 00000000c01864b0 RDI: 0000000000000003 [ 578.711056][T12762] RBP: 00007f1cad38f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 578.719015][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.726973][T12762] R13: 000000000000000b R14: 00007f1cac705f80 R15: 00007ffd37547608 [ 578.734945][T12762] [ 578.751625][ T1168] usb 3-1: USB disconnect, device number 69 [ 578.803022][T12762] ERROR: Out of memory at tomoyo_realpath_from_path. [ 579.155376][T12771] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1748'. [ 579.238321][T12771] netlink: del zone limit has 8 unknown bytes [ 579.353994][T12774] bridge0: port 3(hsr0) entered blocking state [ 579.360608][T12774] bridge0: port 3(hsr0) entered disabled state [ 579.367325][T12774] hsr0: entered allmulticast mode [ 579.372378][T12774] hsr_slave_0: entered allmulticast mode [ 579.388400][T12774] hsr_slave_1: entered allmulticast mode [ 579.425364][T12776] fuse: Unknown parameter 'd' [ 579.430464][T12774] hsr0: entered promiscuous mode [ 579.439653][T12776] 9pnet_fd: Insufficient options for proto=fd [ 579.447477][T12774] bridge0: port 3(hsr0) entered blocking state [ 579.454136][T12774] bridge0: port 3(hsr0) entered forwarding state [ 579.962997][ T5295] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 580.082964][ T1168] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 580.082976][ T5266] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 580.167038][ T5295] usb 3-1: Using ep0 maxpacket: 32 [ 580.174002][ T5295] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 580.183390][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.193477][ T5295] usb 3-1: config 0 descriptor?? [ 580.202294][ T5295] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 580.246075][ T1168] usb 2-1: device descriptor read/64, error -71 [ 580.287318][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 580.298396][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.312019][ T5266] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 580.321377][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.331591][ T5266] usb 4-1: Product: syz [ 580.336997][ T5266] usb 4-1: Manufacturer: syz [ 580.341612][ T5266] usb 4-1: SerialNumber: syz [ 580.348174][ T5266] usb 4-1: config 0 descriptor?? [ 580.356714][ T5266] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 580.416104][ T5266] usb 3-1: USB disconnect, device number 70 [ 580.512891][ T1168] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 580.580650][ T5316] usb 4-1: USB disconnect, device number 63 [ 580.662886][ T1168] usb 2-1: device descriptor read/64, error -71 [ 580.793720][ T1168] usb usb2-port1: attempt power cycle [ 581.213157][ T1168] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 581.231979][T12801] FAULT_INJECTION: forcing a failure. [ 581.231979][T12801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.245852][T12801] CPU: 0 UID: 0 PID: 12801 Comm: syz.3.1760 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 581.256620][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 581.266660][T12801] Call Trace: [ 581.269927][T12801] [ 581.272842][T12801] dump_stack_lvl+0x241/0x360 [ 581.277508][T12801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.282692][T12801] ? __pfx__printk+0x10/0x10 [ 581.287274][T12801] should_fail_ex+0x3b0/0x4e0 [ 581.291934][T12801] _copy_from_user+0x2f/0xe0 [ 581.296512][T12801] sctp_setsockopt+0xcc/0x11c0 [ 581.301260][T12801] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 581.307139][T12801] do_sock_setsockopt+0x3af/0x720 [ 581.312158][T12801] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 581.317716][T12801] ? __fget_files+0x29/0x470 [ 581.322308][T12801] ? __fget_files+0x3f6/0x470 [ 581.326990][T12801] __sys_setsockopt+0x1ae/0x250 [ 581.331830][T12801] __x64_sys_setsockopt+0xb5/0xd0 [ 581.336842][T12801] do_syscall_64+0xf3/0x230 [ 581.341331][T12801] ? clear_bhb_loop+0x35/0x90 [ 581.345996][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.351880][T12801] RIP: 0033:0x7fdae8b77299 [ 581.356279][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.375867][T12801] RSP: 002b:00007fdae98c2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 581.384264][T12801] RAX: ffffffffffffffda RBX: 00007fdae8d06058 RCX: 00007fdae8b77299 [ 581.392217][T12801] RDX: 0000000000000019 RSI: 0000000000000084 RDI: 0000000000000004 [ 581.400168][T12801] RBP: 00007fdae98c20a0 R08: 0000000000000008 R09: 0000000000000000 [ 581.408121][T12801] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.416084][T12801] R13: 000000000000006e R14: 00007fdae8d06058 R15: 00007ffc1949bd38 [ 581.424050][T12801] [ 581.454621][ T1168] usb 2-1: device descriptor read/8, error -71 [ 581.733033][ T1168] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 581.840395][ T1168] usb 2-1: device descriptor read/8, error -71 [ 581.963172][ T1168] usb usb2-port1: unable to enumerate USB device [ 582.040917][T12813] FAULT_INJECTION: forcing a failure. [ 582.040917][T12813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.083157][T12813] CPU: 0 UID: 0 PID: 12813 Comm: syz.4.1764 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 582.093949][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 582.104005][T12813] Call Trace: [ 582.107268][T12813] [ 582.110184][T12813] dump_stack_lvl+0x241/0x360 [ 582.114946][T12813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.120139][T12813] ? __pfx__printk+0x10/0x10 [ 582.124713][T12813] ? __pfx_lock_release+0x10/0x10 [ 582.129724][T12813] should_fail_ex+0x3b0/0x4e0 [ 582.134384][T12813] _copy_from_user+0x2f/0xe0 [ 582.138958][T12813] vcs_write+0x4f8/0x12d0 [ 582.143283][T12813] ? __lock_acquire+0x137a/0x2040 [ 582.148343][T12813] ? __pfx_vcs_write+0x10/0x10 [ 582.153112][T12813] ? bpf_lsm_file_permission+0x9/0x10 [ 582.158472][T12813] ? security_file_permission+0x7f/0xa0 [ 582.164002][T12813] ? rw_verify_area+0x1d2/0x6b0 [ 582.168839][T12813] ? __pfx_vcs_write+0x10/0x10 [ 582.173587][T12813] vfs_write+0x2a2/0xc90 [ 582.177819][T12813] ? __pfx_vfs_write+0x10/0x10 [ 582.182585][T12813] ? __fget_files+0x29/0x470 [ 582.187165][T12813] ? __fget_files+0x3f6/0x470 [ 582.191828][T12813] ? __fget_files+0x29/0x470 [ 582.196412][T12813] ksys_write+0x1a0/0x2c0 [ 582.200729][T12813] ? __pfx_ksys_write+0x10/0x10 [ 582.205565][T12813] ? do_syscall_64+0x100/0x230 [ 582.210314][T12813] ? do_syscall_64+0xb6/0x230 [ 582.214982][T12813] do_syscall_64+0xf3/0x230 [ 582.219470][T12813] ? clear_bhb_loop+0x35/0x90 [ 582.224137][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.230023][T12813] RIP: 0033:0x7f1cac577299 [ 582.234439][T12813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.254032][T12813] RSP: 002b:00007f1cad38f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 582.262440][T12813] RAX: ffffffffffffffda RBX: 00007f1cac705f80 RCX: 00007f1cac577299 [ 582.270406][T12813] RDX: 0000000000003001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 582.278366][T12813] RBP: 00007f1cad38f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 582.286318][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.294273][T12813] R13: 000000000000000b R14: 00007f1cac705f80 R15: 00007ffd37547608 [ 582.302235][T12813] [ 582.912078][T12825] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1766'. [ 583.022675][T12825] netlink: del zone limit has 8 unknown bytes [ 583.715902][ T5264] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 584.293023][ T5264] usb 2-1: Using ep0 maxpacket: 32 [ 584.321688][ T5264] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 584.371926][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.422645][ T5264] usb 2-1: config 0 descriptor?? [ 584.435956][ T5264] go7007 2-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 584.640647][ T5264] usb 2-1: USB disconnect, device number 65 [ 584.670887][T12861] FAULT_INJECTION: forcing a failure. [ 584.670887][T12861] name failslab, interval 1, probability 0, space 0, times 0 [ 584.687843][T12861] CPU: 1 UID: 0 PID: 12861 Comm: syz.2.1775 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 584.698619][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 584.708679][T12861] Call Trace: [ 584.711962][T12861] [ 584.714879][T12861] dump_stack_lvl+0x241/0x360 [ 584.719542][T12861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.724727][T12861] ? __pfx__printk+0x10/0x10 [ 584.729303][T12861] ? ref_tracker_alloc+0x332/0x490 [ 584.734396][T12861] should_fail_ex+0x3b0/0x4e0 [ 584.739054][T12861] ? skb_clone+0x20c/0x390 [ 584.743463][T12861] should_failslab+0xac/0x100 [ 584.748132][T12861] ? skb_clone+0x20c/0x390 [ 584.752530][T12861] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 584.757893][T12861] skb_clone+0x20c/0x390 [ 584.762125][T12861] __netlink_deliver_tap+0x3cc/0x7c0 [ 584.767401][T12861] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.772583][T12861] netlink_deliver_tap+0x19d/0x1b0 [ 584.777682][T12861] netlink_unicast+0x7be/0x990 [ 584.782435][T12861] ? __pfx_netlink_unicast+0x10/0x10 [ 584.787704][T12861] ? __virt_addr_valid+0x183/0x530 [ 584.792806][T12861] ? __check_object_size+0x49c/0x900 [ 584.798073][T12861] ? bpf_lsm_netlink_send+0x9/0x10 [ 584.803170][T12861] netlink_sendmsg+0x8e4/0xcb0 [ 584.807933][T12861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.813205][T12861] ? __import_iovec+0x536/0x820 [ 584.818044][T12861] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 584.823312][T12861] ? security_socket_sendmsg+0x87/0xb0 [ 584.828764][T12861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.834042][T12861] __sock_sendmsg+0x221/0x270 [ 584.838709][T12861] ____sys_sendmsg+0x525/0x7d0 [ 584.843464][T12861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.848741][T12861] __sys_sendmsg+0x2b0/0x3a0 [ 584.853314][T12861] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.858401][T12861] ? vfs_write+0x7c4/0xc90 [ 584.862846][T12861] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 584.869177][T12861] ? do_syscall_64+0x100/0x230 [ 584.873937][T12861] ? do_syscall_64+0xb6/0x230 [ 584.878601][T12861] do_syscall_64+0xf3/0x230 [ 584.883097][T12861] ? clear_bhb_loop+0x35/0x90 [ 584.887765][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.893661][T12861] RIP: 0033:0x7f0972b77299 [ 584.898056][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.917649][T12861] RSP: 002b:00007f09738b6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.926047][T12861] RAX: ffffffffffffffda RBX: 00007f0972d05f80 RCX: 00007f0972b77299 [ 584.934001][T12861] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 584.941953][T12861] RBP: 00007f09738b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 584.949907][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.957860][T12861] R13: 000000000000000b R14: 00007f0972d05f80 R15: 00007ffe94c50528 [ 584.965823][T12861] [ 585.263007][ T5316] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 585.463718][ T5316] usb 5-1: Using ep0 maxpacket: 8 [ 585.558421][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.606236][ T5264] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 585.640303][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.665489][ T5316] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 585.723119][ T1168] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 585.730733][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.773297][ T5316] usb 5-1: config 0 descriptor?? [ 585.860197][ T5264] usb 2-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 585.878831][ T5264] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.931160][ T1168] usb 4-1: device descriptor read/64, error -71 [ 586.211782][ T5264] usb 2-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 586.318624][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.393308][ T5264] usb 2-1: Product: syz [ 586.397623][ T5264] usb 2-1: Manufacturer: syz [ 586.402429][ T5264] usb 2-1: SerialNumber: syz [ 586.408431][T12872] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1781'. [ 586.419896][T12872] netlink: del zone limit has 8 unknown bytes [ 586.430669][ T5264] usb 2-1: config 0 descriptor?? [ 586.455132][T12862] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1776'. [ 586.500065][ T5316] usbhid 5-1:0.0: can't add hid device: -71 [ 586.506218][ T5316] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 586.533392][ T1168] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 586.543457][ T5316] usb 5-1: USB disconnect, device number 45 [ 586.701568][ T1168] usb 4-1: device descriptor read/64, error -71 [ 586.833255][ T1168] usb usb4-port1: attempt power cycle [ 586.935920][ T5215] usb 2-1: USB disconnect, device number 66 [ 587.242851][ T1168] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 587.273947][ T1168] usb 4-1: device descriptor read/8, error -71 [ 587.433824][ T945] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 587.543068][ T1168] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 587.574695][ T1168] usb 4-1: device descriptor read/8, error -71 [ 587.588217][T12896] FAULT_INJECTION: forcing a failure. [ 587.588217][T12896] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 587.601718][T12896] CPU: 1 UID: 0 PID: 12896 Comm: syz.1.1789 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 587.612487][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 587.622528][T12896] Call Trace: [ 587.625790][T12896] [ 587.628707][T12896] dump_stack_lvl+0x241/0x360 [ 587.633370][T12896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.638548][T12896] ? __pfx__printk+0x10/0x10 [ 587.643129][T12896] should_fail_ex+0x3b0/0x4e0 [ 587.647788][T12896] prepare_alloc_pages+0x1da/0x5d0 [ 587.652886][T12896] __alloc_pages_noprof+0x166/0x6c0 [ 587.658067][T12896] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 587.663776][T12896] alloc_pages_mpol_noprof+0x3e8/0x680 [ 587.669219][T12896] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 587.675184][T12896] ? alloc_pages_noprof+0xef/0x170 [ 587.680293][T12896] get_free_pages_noprof+0xc/0x30 [ 587.685325][T12896] vcs_write+0xf3/0x12d0 [ 587.689553][T12896] ? __lock_acquire+0x137a/0x2040 [ 587.694570][T12896] ? __pfx_vcs_write+0x10/0x10 [ 587.699316][T12896] ? bpf_lsm_file_permission+0x9/0x10 [ 587.704671][T12896] ? security_file_permission+0x7f/0xa0 [ 587.710199][T12896] ? rw_verify_area+0x1d2/0x6b0 [ 587.713205][ T1168] usb usb4-port1: unable to enumerate USB device [ 587.715028][T12896] ? __pfx_vcs_write+0x10/0x10 [ 587.726089][T12896] vfs_write+0x2a2/0xc90 [ 587.730320][T12896] ? __pfx_vfs_write+0x10/0x10 [ 587.735065][T12896] ? __fget_files+0x29/0x470 [ 587.739634][T12896] ? __fget_files+0x3f6/0x470 [ 587.744295][T12896] ? __fget_files+0x29/0x470 [ 587.748873][T12896] ksys_write+0x1a0/0x2c0 [ 587.752878][ T5316] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 587.753181][T12896] ? __pfx_ksys_write+0x10/0x10 [ 587.765536][T12896] ? do_syscall_64+0x100/0x230 [ 587.770285][T12896] ? do_syscall_64+0xb6/0x230 [ 587.774946][T12896] do_syscall_64+0xf3/0x230 [ 587.779427][T12896] ? clear_bhb_loop+0x35/0x90 [ 587.784093][T12896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.789970][T12896] RIP: 0033:0x7f34bd177299 [ 587.794367][T12896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.813950][T12896] RSP: 002b:00007f34bde6c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.822341][T12896] RAX: ffffffffffffffda RBX: 00007f34bd305f80 RCX: 00007f34bd177299 [ 587.830289][T12896] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 587.838242][T12896] RBP: 00007f34bde6c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 587.846197][T12896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.854147][T12896] R13: 000000000000000b R14: 00007f34bd305f80 R15: 00007fff48909018 [ 587.862102][T12896] [ 587.894523][ T945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.921679][ T945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.938968][ T5316] usb 3-1: Using ep0 maxpacket: 32 [ 587.952876][ T945] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 587.960892][ T5316] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 587.968825][ T945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.972624][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.003149][ T945] usb 5-1: config 0 descriptor?? [ 588.003912][ T5316] usb 3-1: config 0 descriptor?? [ 588.024748][ T5316] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 588.222650][ T945] usbhid 5-1:0.0: can't add hid device: -71 [ 588.235044][ T5316] usb 3-1: USB disconnect, device number 71 [ 588.243632][ T945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 588.263525][ T945] usb 5-1: USB disconnect, device number 46 [ 588.431528][T12914] FAULT_INJECTION: forcing a failure. [ 588.431528][T12914] name failslab, interval 1, probability 0, space 0, times 0 [ 588.444547][T12914] CPU: 0 UID: 0 PID: 12914 Comm: syz.3.1796 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 588.455327][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 588.465366][T12914] Call Trace: [ 588.468629][T12914] [ 588.471545][T12914] dump_stack_lvl+0x241/0x360 [ 588.476210][T12914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.481387][T12914] ? __pfx__printk+0x10/0x10 [ 588.485962][T12914] ? __kmalloc_noprof+0xb0/0x400 [ 588.490880][T12914] ? __pfx___might_resched+0x10/0x10 [ 588.496162][T12914] should_fail_ex+0x3b0/0x4e0 [ 588.500839][T12914] ? bpf_test_init+0xe1/0x180 [ 588.505513][T12914] should_failslab+0xac/0x100 [ 588.510184][T12914] ? bpf_test_init+0xe1/0x180 [ 588.514853][T12914] __kmalloc_noprof+0xd8/0x400 [ 588.519613][T12914] bpf_test_init+0xe1/0x180 [ 588.524111][T12914] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 588.529474][T12914] ? __pfx_lock_acquire+0x10/0x10 [ 588.534495][T12914] ? __pfx_lock_release+0x10/0x10 [ 588.539516][T12914] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 588.545316][T12914] ? __fget_files+0x29/0x470 [ 588.549903][T12914] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 588.555702][T12914] bpf_prog_test_run+0x33a/0x3b0 [ 588.560633][T12914] __sys_bpf+0x48d/0x810 [ 588.564868][T12914] ? __pfx___sys_bpf+0x10/0x10 [ 588.569632][T12914] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.575607][T12914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.581928][T12914] ? do_syscall_64+0x100/0x230 [ 588.586691][T12914] __x64_sys_bpf+0x7c/0x90 [ 588.591099][T12914] do_syscall_64+0xf3/0x230 [ 588.595596][T12914] ? clear_bhb_loop+0x35/0x90 [ 588.600269][T12914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.606161][T12914] RIP: 0033:0x7fdae8b77299 [ 588.610569][T12914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.630164][T12914] RSP: 002b:00007fdae98e3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 588.638570][T12914] RAX: ffffffffffffffda RBX: 00007fdae8d05f80 RCX: 00007fdae8b77299 [ 588.646532][T12914] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 588.654493][T12914] RBP: 00007fdae98e30a0 R08: 0000000000000000 R09: 0000000000000000 [ 588.662452][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.670409][T12914] R13: 000000000000000b R14: 00007fdae8d05f80 R15: 00007ffc1949bd38 [ 588.678383][T12914] [ 588.705822][ T5268] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 588.914465][ T5268] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 588.921987][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 588.937493][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.956818][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.971210][ T5268] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 588.978834][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 588.989024][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.999127][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 589.014732][ T5268] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 589.022230][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 589.032618][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 589.044621][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 589.063668][ T5268] usb 2-1: string descriptor 0 read error: -22 [ 589.070194][ T5268] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 589.079436][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.093422][ T5268] adutux 2-1:168.0: interrupt endpoints not found [ 589.164274][T12926] fuse: Bad value for 'fd' [ 589.383312][ T5264] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 589.949593][ T5264] usb 5-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 589.960238][ T5264] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.976574][ T5264] usb 5-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 589.985937][ T5264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.994018][ T5264] usb 5-1: Product: syz [ 589.998189][ T5264] usb 5-1: Manufacturer: syz [ 590.019908][ T5264] usb 5-1: SerialNumber: syz [ 590.060553][ T5264] usb 5-1: config 0 descriptor?? [ 590.106941][ T5215] usb 2-1: USB disconnect, device number 67 [ 590.954379][ T5215] usb 5-1: USB disconnect, device number 47 [ 591.043046][ T5316] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 591.162230][ T61] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 591.203684][ T5316] usb 4-1: device descriptor read/64, error -71 [ 591.273012][ T5264] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 591.472972][ T5264] usb 2-1: Using ep0 maxpacket: 32 [ 591.484501][ T5316] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 591.508418][ T5264] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 591.547790][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.598366][ T5264] usb 2-1: config 0 descriptor?? [ 591.620172][ T5264] go7007 2-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 591.683305][ T5316] usb 4-1: device descriptor read/64, error -71 [ 591.803470][ T5316] usb usb4-port1: attempt power cycle [ 591.824909][ T1168] usb 2-1: USB disconnect, device number 68 [ 592.052393][T12656] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.190763][T12656] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.233270][ T5316] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 592.273650][ T5316] usb 4-1: device descriptor read/8, error -71 [ 592.336492][T12656] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.409109][T12656] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.553604][ T5316] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 592.572642][T12656] team0: left allmulticast mode [ 592.577939][T12656] team_slave_0: left allmulticast mode [ 592.590585][T12656] team_slave_1: left allmulticast mode [ 592.599432][T12656] team0: left promiscuous mode [ 592.611532][T12656] team_slave_0: left promiscuous mode [ 592.613518][ T5316] usb 4-1: device descriptor read/8, error -71 [ 592.617633][T12656] team_slave_1: left promiscuous mode [ 592.630029][T12656] bridge0: port 3(team0) entered disabled state [ 592.649637][T12656] bridge_slave_1: left allmulticast mode [ 592.661412][T12656] bridge_slave_1: left promiscuous mode [ 592.669861][T12656] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.682556][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.691529][T12656] bridge_slave_0: left allmulticast mode [ 592.694580][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.715103][T12656] bridge_slave_0: left promiscuous mode [ 592.721034][T12656] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.746433][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.753185][ T5316] usb usb4-port1: unable to enumerate USB device [ 592.761223][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.773887][ T5217] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 592.781565][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 593.137873][T12656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.149221][T12656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.159784][T12656] bond0 (unregistering): Released all slaves [ 593.341190][T12980] chnl_net:caif_netlink_parms(): no params data found [ 593.610518][T12980] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.835188][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.872575][T12980] bridge_slave_0: entered allmulticast mode [ 593.886628][T12980] bridge_slave_0: entered promiscuous mode [ 593.910222][T12980] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.943038][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.950233][T12980] bridge_slave_1: entered allmulticast mode [ 593.966686][T12980] bridge_slave_1: entered promiscuous mode [ 594.056344][T12980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.070841][T12980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.084052][T12998] netlink: 'syz.3.1826': attribute type 4 has an invalid length. [ 594.091788][T12998] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1826'. [ 594.152024][T12656] hsr_slave_0: left promiscuous mode [ 594.176208][T12656] hsr_slave_1: left promiscuous mode [ 594.185319][T12656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.192734][T12656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.201646][T12656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.209879][T12656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.257871][T12656] veth1_macvtap: left promiscuous mode [ 594.263586][T12656] veth0_macvtap: left promiscuous mode [ 594.269344][T12656] veth1_vlan: left promiscuous mode [ 594.279647][T12656] veth0_vlan: left promiscuous mode [ 594.782966][ T1168] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 594.805564][T12656] team0 (unregistering): Port device team_slave_1 removed [ 594.850633][T12656] team0 (unregistering): Port device team_slave_0 removed [ 594.867359][T10899] Bluetooth: hci0: command tx timeout [ 594.976766][ T1168] usb 2-1: Using ep0 maxpacket: 32 [ 595.001084][ T1168] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 595.025443][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.041261][ T1168] usb 2-1: config 0 descriptor?? [ 595.059746][ T1168] go7007 2-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 595.308564][T13002] netlink: 'syz.2.1827': attribute type 4 has an invalid length. [ 595.318624][T13002] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1827'. [ 595.335186][ T5316] usb 2-1: USB disconnect, device number 69 [ 595.395399][T12980] team0: Port device team_slave_0 added [ 595.417861][T12980] team0: Port device team_slave_1 added [ 595.473693][T12980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.480872][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.509430][T12980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.539485][T12980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.553711][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.567442][T13019] ucma_write: process 436 (syz.0.1834) changed security contexts after opening file descriptor, this is not allowed. [ 595.586358][T12980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.689199][T12980] hsr_slave_0: entered promiscuous mode [ 595.698865][T12980] hsr_slave_1: entered promiscuous mode [ 595.717106][ T1168] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 595.913196][ T945] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 595.979741][T13027] fuse: Unknown parameter '0x0000000000000004' [ 596.124550][ T945] usb 3-1: Using ep0 maxpacket: 8 [ 596.146236][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.174878][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.184541][T13029] tipc: Enabling of bearer rejected, failed to enable media [ 596.194992][ T945] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 596.195151][ T1168] usb 4-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 596.214357][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.216635][ T945] usb 3-1: config 0 descriptor?? [ 596.243175][ T1168] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.259174][T13029] netlink: 'syz.1.1837': attribute type 2 has an invalid length. [ 596.268885][ T1168] usb 4-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 596.278037][ T1168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.288404][ T1168] usb 4-1: Product: syz [ 596.292589][ T1168] usb 4-1: Manufacturer: syz [ 596.297318][ T1168] usb 4-1: SerialNumber: syz [ 596.304211][ T1168] usb 4-1: config 0 descriptor?? [ 596.322964][ C1] hrtimer: interrupt took 495137 ns [ 596.473986][T12980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 596.483863][T12980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 596.501854][T12980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 596.511957][T12980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 596.668356][T13021] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1833'. [ 596.711231][ T945] usbhid 3-1:0.0: can't add hid device: -71 [ 596.837751][T12980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.856187][ T945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 596.983809][T10899] Bluetooth: hci0: command tx timeout [ 597.008991][T12980] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.010195][ T945] usb 3-1: USB disconnect, device number 72 [ 597.342437][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.349700][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.418136][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.425349][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.981295][T12980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.132419][ T5268] usb 4-1: USB disconnect, device number 72 [ 598.713312][T12980] veth0_vlan: entered promiscuous mode [ 598.736982][T12980] veth1_vlan: entered promiscuous mode [ 598.794606][T12980] veth0_macvtap: entered promiscuous mode [ 598.808550][T12980] veth1_macvtap: entered promiscuous mode [ 598.829010][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.842106][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.856972][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.867789][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.892830][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.904631][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.915680][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.926376][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.936311][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.954144][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.966024][T12980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.980310][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.990923][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.000902][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.014592][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.025558][T10899] Bluetooth: hci0: command tx timeout [ 599.031112][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.041789][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.052651][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.065150][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.073022][ T5268] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 599.079371][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.095287][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.114319][T12980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.175930][T12980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.195076][T12980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.209440][T12980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.219493][T12980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.274453][ T5268] usb 2-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 599.299042][ T5268] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.318857][ T5268] usb 2-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 599.328154][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.337672][ T5268] usb 2-1: Product: syz [ 599.359543][ T5268] usb 2-1: Manufacturer: syz [ 599.370694][ T5268] usb 2-1: SerialNumber: syz [ 599.377763][ T5268] usb 2-1: config 0 descriptor?? [ 599.399395][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.411829][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.435881][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.446940][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.542193][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.553185][ T945] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 599.707503][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.753996][ T945] usb 3-1: Using ep0 maxpacket: 8 [ 599.763461][ T945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 599.782500][ T945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 599.798045][ T945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 599.835570][ T945] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.855053][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.871279][ T945] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 599.894639][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.977063][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.090784][T13077] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1849'. [ 600.148478][ T945] usb 3-1: usb_control_msg returned -71 [ 600.160120][ T945] usbtmc 3-1:16.0: can't read capabilities [ 600.183210][ T945] usb 3-1: USB disconnect, device number 73 [ 600.189417][ T52] hsr0: left allmulticast mode [ 600.206074][ T52] hsr_slave_0: left allmulticast mode [ 600.221654][ T52] hsr_slave_1: left allmulticast mode [ 600.238002][ T52] hsr0: left promiscuous mode [ 600.243289][ T5217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.248884][ T52] bridge0: port 3(hsr0) entered disabled state [ 600.265606][ T52] bridge_slave_1: left allmulticast mode [ 600.271343][ T5217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.283277][ T52] bridge_slave_1: left promiscuous mode [ 600.288915][ T5217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.296106][ T5266] usb 2-1: USB disconnect, device number 70 [ 600.302711][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.306851][ T5217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.319866][ T5217] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 600.321774][ T52] bridge_slave_0: left allmulticast mode [ 600.327209][ T5217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.338704][ T52] bridge_slave_0: left promiscuous mode [ 600.345787][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.700201][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.754321][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.784846][ T52] bond0 (unregistering): (slave team0): Releasing backup interface [ 600.826550][ T52] bond0 (unregistering): Released all slaves [ 600.973863][T13087] FAULT_INJECTION: forcing a failure. [ 600.973863][T13087] name failslab, interval 1, probability 0, space 0, times 0 [ 600.986639][T13087] CPU: 1 UID: 0 PID: 13087 Comm: syz.4.1852 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 600.997408][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 601.007453][T13087] Call Trace: [ 601.010722][T13087] [ 601.013642][T13087] dump_stack_lvl+0x241/0x360 [ 601.018318][T13087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.023512][T13087] ? __pfx__printk+0x10/0x10 [ 601.028099][T13087] ? ref_tracker_alloc+0x332/0x490 [ 601.033205][T13087] should_fail_ex+0x3b0/0x4e0 [ 601.037875][T13087] ? skb_clone+0x20c/0x390 [ 601.042281][T13087] should_failslab+0xac/0x100 [ 601.046958][T13087] ? skb_clone+0x20c/0x390 [ 601.051375][T13087] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 601.056743][T13087] skb_clone+0x20c/0x390 [ 601.061166][T13087] __netlink_deliver_tap+0x3cc/0x7c0 [ 601.066474][T13087] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.071669][T13087] netlink_deliver_tap+0x19d/0x1b0 [ 601.076775][T13087] netlink_unicast+0x7be/0x990 [ 601.081537][T13087] ? __pfx_netlink_unicast+0x10/0x10 [ 601.086814][T13087] ? __pfx___check_heap_object+0x10/0x10 [ 601.092452][T13087] ? __check_object_size+0x49c/0x900 [ 601.097745][T13087] ? bpf_lsm_netlink_send+0x9/0x10 [ 601.102859][T13087] netlink_sendmsg+0x8e4/0xcb0 [ 601.107639][T13087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.112924][T13087] ? __import_iovec+0x536/0x820 [ 601.117773][T13087] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 601.123051][T13087] ? security_socket_sendmsg+0x87/0xb0 [ 601.128517][T13087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.133802][T13087] __sock_sendmsg+0x221/0x270 [ 601.138488][T13087] ____sys_sendmsg+0x525/0x7d0 [ 601.143255][T13087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.148542][T13087] __sys_sendmsg+0x2b0/0x3a0 [ 601.153125][T13087] ? __pfx___sys_sendmsg+0x10/0x10 [ 601.158223][T13087] ? __schedule+0x17b6/0x4a10 [ 601.162924][T13087] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 601.169251][T13087] ? do_syscall_64+0x100/0x230 [ 601.174011][T13087] ? do_syscall_64+0xb6/0x230 [ 601.178679][T13087] do_syscall_64+0xf3/0x230 [ 601.183176][T13087] ? clear_bhb_loop+0x35/0x90 [ 601.187853][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.193737][T13087] RIP: 0033:0x7feccd377299 [ 601.198147][T13087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.217747][T13087] RSP: 002b:00007fecce12a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.226155][T13087] RAX: ffffffffffffffda RBX: 00007feccd506130 RCX: 00007feccd377299 [ 601.234123][T13087] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 601.242085][T13087] RBP: 00007fecce12a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 601.250045][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.258006][T13087] R13: 000000000000006e R14: 00007feccd506130 R15: 00007ffda665a0a8 [ 601.265980][T13087] [ 601.276551][ T5217] Bluetooth: hci0: command tx timeout [ 601.484394][ T46] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 601.782900][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 601.824603][ T46] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 601.863842][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.887053][ T46] usb 3-1: config 0 descriptor?? [ 601.896088][ T46] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 602.173848][ T5266] usb 3-1: USB disconnect, device number 74 [ 602.351176][ T52] hsr_slave_0: left promiscuous mode [ 602.374865][ T52] hsr_slave_1: left promiscuous mode [ 602.383721][ T5217] Bluetooth: hci1: command tx timeout [ 602.406181][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.455912][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.468371][ T5263] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 602.496264][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.521035][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.645066][ T52] veth1_macvtap: left promiscuous mode [ 602.672590][ T52] veth0_macvtap: left promiscuous mode [ 602.688172][ T5263] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 602.711981][ T52] veth1_vlan: left promiscuous mode [ 602.729146][ T52] veth0_vlan: left promiscuous mode [ 602.742257][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 602.822256][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 602.873877][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 603.102331][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 603.158004][ T5263] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 603.176854][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 603.205153][T13104] FAULT_INJECTION: forcing a failure. [ 603.205153][T13104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.220819][T13104] CPU: 0 UID: 0 PID: 13104 Comm: syz.0.1858 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 603.231601][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 603.241661][T13104] Call Trace: [ 603.244936][T13104] [ 603.247859][T13104] dump_stack_lvl+0x241/0x360 [ 603.252532][T13104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.257724][T13104] ? __pfx__printk+0x10/0x10 [ 603.262312][T13104] ? __pfx_lock_release+0x10/0x10 [ 603.267337][T13104] should_fail_ex+0x3b0/0x4e0 [ 603.272011][T13104] _copy_to_user+0x2f/0xb0 [ 603.276423][T13104] pagemap_read+0x5be/0x910 [ 603.280933][T13104] ? __pfx_pagemap_read+0x10/0x10 [ 603.285960][T13104] ? rw_verify_area+0x520/0x6b0 [ 603.290807][T13104] ? __pfx_pagemap_read+0x10/0x10 [ 603.295829][T13104] vfs_read+0x204/0xbc0 [ 603.299975][T13104] ? __pfx_lock_release+0x10/0x10 [ 603.304998][T13104] ? __pfx_vfs_read+0x10/0x10 [ 603.309665][T13104] ? __fget_files+0x29/0x470 [ 603.314251][T13104] ? __fget_files+0x3f6/0x470 [ 603.318916][T13104] ? __fget_files+0x29/0x470 [ 603.323508][T13104] __x64_sys_pread64+0x1aa/0x230 [ 603.328438][T13104] ? __pfx___x64_sys_pread64+0x10/0x10 [ 603.333887][T13104] ? do_syscall_64+0x100/0x230 [ 603.338648][T13104] ? do_syscall_64+0xb6/0x230 [ 603.343322][T13104] do_syscall_64+0xf3/0x230 [ 603.347824][T13104] ? clear_bhb_loop+0x35/0x90 [ 603.352501][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.358388][T13104] RIP: 0033:0x7f4f70177299 [ 603.362799][T13104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.382400][T13104] RSP: 002b:00007f4f71035048 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 603.390812][T13104] RAX: ffffffffffffffda RBX: 00007f4f70305f80 RCX: 00007f4f70177299 [ 603.398775][T13104] RDX: 0000000000019000 RSI: 000000002001a240 RDI: 0000000000000005 [ 603.406744][T13104] RBP: 00007f4f710350a0 R08: 0000000000000000 R09: 0000000000000000 [ 603.414706][T13104] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000001 [ 603.422664][T13104] R13: 000000000000000b R14: 00007f4f70305f80 R15: 00007fff293e1f38 [ 603.430642][T13104] [ 603.447126][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 603.463242][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 603.484379][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 603.508344][ T5263] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 603.535119][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 603.551847][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 603.565965][T13115] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1860'. [ 603.581283][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 603.602275][ T5263] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 603.619059][ T5263] usb 5-1: string descriptor 0 read error: -22 [ 603.629169][ T5263] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 603.638607][ T5263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.667909][ T5263] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 603.985725][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1856'. [ 604.209603][ T52] team0 (unregistering): Port device team_slave_1 removed [ 604.265558][ T52] team0 (unregistering): Port device team_slave_0 removed [ 604.313028][ T5263] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 604.463189][ T5217] Bluetooth: hci1: command tx timeout [ 604.508877][ T5263] usb 2-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 604.545017][ T5263] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.581053][ T5263] usb 2-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 604.590565][ T5263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.600102][ T5263] usb 2-1: Product: syz [ 604.618116][ T5263] usb 2-1: Manufacturer: syz [ 604.693995][ T5263] usb 2-1: SerialNumber: syz [ 604.940579][ T5263] usb 2-1: config 0 descriptor?? [ 605.684604][T13078] chnl_net:caif_netlink_parms(): no params data found [ 605.708476][ T5266] usb 5-1: USB disconnect, device number 48 [ 605.733045][ T1168] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 605.842312][T13147] 9pnet_fd: Insufficient options for proto=fd [ 605.869765][ T46] usb 2-1: USB disconnect, device number 71 [ 605.937884][T13078] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.945553][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.953497][T13078] bridge_slave_0: entered allmulticast mode [ 605.955081][ T1168] usb 3-1: Using ep0 maxpacket: 32 [ 605.960614][T13078] bridge_slave_0: entered promiscuous mode [ 605.974797][T13078] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.982252][T13078] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.990523][T13078] bridge_slave_1: entered allmulticast mode [ 605.995159][ T1168] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 605.997939][T13078] bridge_slave_1: entered promiscuous mode [ 606.039599][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.081773][ T1168] usb 3-1: config 0 descriptor?? [ 606.090435][ T1168] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 606.115413][T13078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.142160][T13078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.197570][T13078] team0: Port device team_slave_0 added [ 606.234308][T13078] team0: Port device team_slave_1 added [ 606.284978][T13078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.293152][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.300221][ T8] usb 3-1: USB disconnect, device number 75 [ 606.322146][T13078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.339655][T13078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.376354][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.420615][T13078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.563238][ T5217] Bluetooth: hci1: command tx timeout [ 606.617038][T13078] hsr_slave_0: entered promiscuous mode [ 606.737342][T13078] hsr_slave_1: entered promiscuous mode [ 606.755942][T13078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.777602][T13078] Cannot create hsr debugfs directory [ 607.667667][ T5215] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 607.684894][T13078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 607.707216][T13078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 607.728172][T13078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 607.745827][T13078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 607.862990][ T5215] usb 5-1: Using ep0 maxpacket: 8 [ 607.875401][ T5215] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.883127][T13078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.893992][ T5215] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.908767][ T5215] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.919192][ T5215] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.923896][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.934695][ T5215] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.950380][ T5215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.004320][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.011450][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.036666][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.043809][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.102060][T13078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.212232][ T5215] usb 5-1: usb_control_msg returned -71 [ 608.218406][ T5215] usbtmc 5-1:16.0: can't read capabilities [ 608.243340][ T5215] usb 5-1: USB disconnect, device number 49 [ 608.349416][T13078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.412657][T13078] veth0_vlan: entered promiscuous mode [ 608.426436][T13078] veth1_vlan: entered promiscuous mode [ 608.454397][T13078] veth0_macvtap: entered promiscuous mode [ 608.468943][T13078] veth1_macvtap: entered promiscuous mode [ 608.497685][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.508337][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.518225][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.528696][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.538661][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.549625][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.559741][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.571167][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.581865][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.592470][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.606977][T13078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.620899][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.631742][ T5217] Bluetooth: hci1: command tx timeout [ 608.632043][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.647417][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.658098][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.668125][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.680443][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.682982][ T945] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 608.691146][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.708811][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.729254][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.739871][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.759223][T13078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.772128][T13078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.793014][T13078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.802471][T13078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.818130][T13078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.863331][ T5263] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 608.883303][ T945] usb 2-1: Using ep0 maxpacket: 8 [ 608.904303][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.936054][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.967092][ T945] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 608.997575][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.998227][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.016787][ T945] usb 2-1: config 0 descriptor?? [ 609.026206][T13192] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 609.028912][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.062881][T13192] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 609.068325][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.073067][ T5263] usb 3-1: Using ep0 maxpacket: 8 [ 609.081001][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.104123][ T5263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.130434][ T5263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.156627][ T5263] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 609.171408][ T5263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.200826][ T5263] usb 3-1: config 0 descriptor?? [ 609.433980][T13185] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1877'. [ 609.497041][ T5263] usbhid 3-1:0.0: can't add hid device: -71 [ 609.511025][T13181] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.1876'. [ 609.525418][ T5263] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 609.561199][ T5263] usb 3-1: USB disconnect, device number 76 [ 609.679681][ T945] usbhid 2-1:0.0: can't add hid device: -71 [ 609.685900][ T945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 609.697713][ T945] usb 2-1: USB disconnect, device number 72 [ 610.092193][T13202] FAULT_INJECTION: forcing a failure. [ 610.092193][T13202] name failslab, interval 1, probability 0, space 0, times 0 [ 610.113246][ T5215] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 610.123867][T13202] CPU: 0 UID: 0 PID: 13202 Comm: syz.3.1883 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 610.134661][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 610.144731][T13202] Call Trace: [ 610.148021][T13202] [ 610.150968][T13202] dump_stack_lvl+0x241/0x360 [ 610.155676][T13202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.160899][T13202] ? __pfx__printk+0x10/0x10 [ 610.165522][T13202] should_fail_ex+0x3b0/0x4e0 [ 610.170222][T13202] should_failslab+0xac/0x100 [ 610.174918][T13202] ? __hw_addr_add_ex+0x1a8/0x610 [ 610.179962][T13202] __kmalloc_cache_noprof+0x6c/0x2c0 [ 610.185280][T13202] __hw_addr_add_ex+0x1a8/0x610 [ 610.190159][T13202] dev_addr_init+0x143/0x230 [ 610.194771][T13202] ? __pfx_dev_addr_init+0x10/0x10 [ 610.199910][T13202] alloc_netdev_mqs+0x2a1/0x1000 [ 610.204853][T13202] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 610.210326][T13202] ? security_capable+0x90/0xb0 [ 610.215208][T13202] rtnl_create_link+0x2f9/0xc20 [ 610.220086][T13202] rtnl_newlink+0x1423/0x20a0 [ 610.224779][T13202] ? rtnl_newlink+0xae1/0x20a0 [ 610.229580][T13202] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.234623][T13202] ? __pfx___mutex_trylock_common+0x10/0x10 [ 610.240538][T13202] ? rcu_is_watching+0x15/0xb0 [ 610.245324][T13202] ? trace_contention_end+0x3c/0x120 [ 610.250627][T13202] ? __mutex_lock+0x2ef/0xd70 [ 610.255341][T13202] ? __pfx_lock_release+0x10/0x10 [ 610.260397][T13202] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.265430][T13202] rtnetlink_rcv_msg+0x73f/0xcf0 [ 610.270365][T13202] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 610.275474][T13202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.280934][T13202] ? ref_tracker_free+0x643/0x7e0 [ 610.285959][T13202] netlink_rcv_skb+0x1e3/0x430 [ 610.290730][T13202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.296184][T13202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.301480][T13202] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.306672][T13202] netlink_unicast+0x7f0/0x990 [ 610.311438][T13202] ? __pfx_netlink_unicast+0x10/0x10 [ 610.316718][T13202] ? __virt_addr_valid+0x183/0x530 [ 610.321823][T13202] ? __check_object_size+0x49c/0x900 [ 610.327104][T13202] ? bpf_lsm_netlink_send+0x9/0x10 [ 610.332210][T13202] netlink_sendmsg+0x8e4/0xcb0 [ 610.336982][T13202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.342271][T13202] ? __import_iovec+0x536/0x820 [ 610.347119][T13202] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 610.352399][T13202] ? security_socket_sendmsg+0x87/0xb0 [ 610.357852][T13202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.363132][T13202] __sock_sendmsg+0x221/0x270 [ 610.367807][T13202] ____sys_sendmsg+0x525/0x7d0 [ 610.372569][T13202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.377857][T13202] __sys_sendmsg+0x2b0/0x3a0 [ 610.382442][T13202] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.387546][T13202] ? vfs_write+0x7c4/0xc90 [ 610.391987][T13202] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.398314][T13202] ? do_syscall_64+0x100/0x230 [ 610.403076][T13202] ? do_syscall_64+0xb6/0x230 [ 610.407748][T13202] do_syscall_64+0xf3/0x230 [ 610.412244][T13202] ? clear_bhb_loop+0x35/0x90 [ 610.416925][T13202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.422819][T13202] RIP: 0033:0x7fe1c3577299 [ 610.427238][T13202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.446838][T13202] RSP: 002b:00007fe1c433f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.455248][T13202] RAX: ffffffffffffffda RBX: 00007fe1c3705f80 RCX: 00007fe1c3577299 [ 610.463212][T13202] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 610.471174][T13202] RBP: 00007fe1c433f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 610.479135][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.487097][T13202] R13: 000000000000000b R14: 00007fe1c3705f80 R15: 00007ffe3b4d2248 [ 610.495074][T13202] [ 610.537842][ T5215] usb 5-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 610.564484][ T5215] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.598762][ T5215] usb 5-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 610.610825][ T5215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.630355][ T5215] usb 5-1: Product: syz [ 610.640270][ T5215] usb 5-1: Manufacturer: syz [ 610.650379][ T5215] usb 5-1: SerialNumber: syz [ 610.663774][ T5215] usb 5-1: config 0 descriptor?? [ 610.873103][ T5263] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 611.057197][ T5263] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 611.077274][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 611.170329][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 611.573738][ T945] usb 5-1: USB disconnect, device number 50 [ 611.594236][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 611.606445][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 611.617736][ T5263] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 611.625849][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 611.636294][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 611.649719][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 611.661354][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 611.672573][ T5263] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 611.673310][ T5215] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 611.680333][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 611.700347][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 611.710459][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 611.723083][ T5263] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 611.737212][ T5263] usb 3-1: string descriptor 0 read error: -22 [ 611.749181][ T5263] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 611.758745][ T5263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.774160][ T5263] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 611.882866][ T5215] usb 4-1: Using ep0 maxpacket: 8 [ 611.929011][ T5215] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.940183][ T5215] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.953711][ T5215] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.966102][ T5215] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.990983][ T5215] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 612.000971][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 612.001503][ T5215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.021889][ T8] usb 3-1: USB disconnect, device number 77 [ 612.196428][ T5263] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 612.248221][ T5215] usb 4-1: usb_control_msg returned -71 [ 612.272143][ T5215] usbtmc 4-1:16.0: can't read capabilities [ 612.314957][ T5215] usb 4-1: USB disconnect, device number 73 [ 613.214289][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.435861][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.505346][ T945] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 613.550103][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.673375][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.712933][ T945] usb 3-1: Using ep0 maxpacket: 8 [ 613.725404][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.768341][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.822730][ T945] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 613.841238][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.872061][ T945] usb 3-1: config 0 descriptor?? [ 613.976097][ T35] bridge_slave_1: left allmulticast mode [ 613.999671][ T35] bridge_slave_1: left promiscuous mode [ 614.023382][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.088473][ T35] bridge_slave_0: left allmulticast mode [ 614.107472][ T35] bridge_slave_0: left promiscuous mode [ 614.131554][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.324408][T13245] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1895'. [ 614.356737][T10899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 614.370374][T10899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 614.379837][ T945] usbhid 3-1:0.0: can't add hid device: -71 [ 614.386483][T10899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 614.396249][ T945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 614.405807][T10899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 614.413974][T10899] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 614.421294][T10899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 614.437999][ T945] usb 3-1: USB disconnect, device number 78 [ 615.166122][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.184237][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.205547][ T35] bond0 (unregistering): Released all slaves [ 615.266649][ T5215] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 615.474729][ T5215] usb 3-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 615.491019][ T5215] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.506973][ T5215] usb 3-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 615.518378][ T5215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.526773][ T5215] usb 3-1: Product: syz [ 615.531851][ T5215] usb 3-1: Manufacturer: syz [ 615.537569][ T5215] usb 3-1: SerialNumber: syz [ 615.553483][ T5215] usb 3-1: config 0 descriptor?? [ 615.721828][ T35] hsr_slave_0: left promiscuous mode [ 615.727424][ T5263] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 615.748395][ T35] hsr_slave_1: left promiscuous mode [ 615.773874][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.790844][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.800801][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.816258][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.869129][ T35] veth1_macvtap: left promiscuous mode [ 615.883093][ T35] veth0_macvtap: left promiscuous mode [ 615.889055][ T35] veth1_vlan: left promiscuous mode [ 615.902923][ T35] veth0_vlan: left promiscuous mode [ 615.923274][ T5263] usb 2-1: Using ep0 maxpacket: 8 [ 615.931772][ T5263] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.961073][ T5263] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.982694][ T5263] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.008467][ T5263] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.037627][ T5263] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.067631][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.314584][ T5263] usb 2-1: usb_control_msg returned -71 [ 616.332892][ T5263] usbtmc 2-1:16.0: can't read capabilities [ 616.362521][ T5263] usb 2-1: USB disconnect, device number 74 [ 616.464480][T10899] Bluetooth: hci0: command tx timeout [ 616.731234][ T35] team0 (unregistering): Port device team_slave_1 removed [ 616.774252][ T35] team0 (unregistering): Port device team_slave_0 removed [ 617.421808][T13283] FAULT_INJECTION: forcing a failure. [ 617.421808][T13283] name failslab, interval 1, probability 0, space 0, times 0 [ 617.429111][T13239] usb 3-1: USB disconnect, device number 79 [ 617.440869][T13283] CPU: 1 UID: 0 PID: 13283 Comm: syz.3.1907 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 617.451644][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 617.461684][T13283] Call Trace: [ 617.464949][T13283] [ 617.467862][T13283] dump_stack_lvl+0x241/0x360 [ 617.472531][T13283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.477734][T13283] ? __pfx__printk+0x10/0x10 [ 617.482334][T13283] ? __kmalloc_node_noprof+0xb7/0x440 [ 617.487695][T13283] ? __pfx___might_resched+0x10/0x10 [ 617.492971][T13283] should_fail_ex+0x3b0/0x4e0 [ 617.497631][T13283] should_failslab+0xac/0x100 [ 617.502296][T13283] __kmalloc_node_noprof+0xdf/0x440 [ 617.507480][T13283] ? __kvmalloc_node_noprof+0x72/0x190 [ 617.512929][T13283] __kvmalloc_node_noprof+0x72/0x190 [ 617.518205][T13283] alloc_netdev_mqs+0x8ab/0x1000 [ 617.523131][T13283] rtnl_create_link+0x2f9/0xc20 [ 617.527966][T13283] rtnl_newlink+0x1423/0x20a0 [ 617.532630][T13283] ? rtnl_newlink+0xae1/0x20a0 [ 617.537389][T13283] ? __pfx_rtnl_newlink+0x10/0x10 [ 617.542398][T13283] ? do_raw_spin_unlock+0x13c/0x8b0 [ 617.547585][T13283] ? __mutex_lock+0x9a5/0xd70 [ 617.552259][T13283] ? __mutex_lock+0x527/0xd70 [ 617.556947][T13283] ? __pfx_rtnl_newlink+0x10/0x10 [ 617.561950][T13283] rtnetlink_rcv_msg+0x73f/0xcf0 [ 617.566882][T13283] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 617.571996][T13283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 617.577456][T13283] ? ref_tracker_free+0x643/0x7e0 [ 617.582482][T13283] netlink_rcv_skb+0x1e3/0x430 [ 617.587250][T13283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 617.592707][T13283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 617.598004][T13283] ? netlink_deliver_tap+0x2e/0x1b0 [ 617.603200][T13283] netlink_unicast+0x7f0/0x990 [ 617.607964][T13283] ? __pfx_netlink_unicast+0x10/0x10 [ 617.613240][T13283] ? __virt_addr_valid+0x183/0x530 [ 617.618346][T13283] ? __check_object_size+0x49c/0x900 [ 617.623628][T13283] ? bpf_lsm_netlink_send+0x9/0x10 [ 617.628737][T13283] netlink_sendmsg+0x8e4/0xcb0 [ 617.633505][T13283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.638790][T13283] ? __import_iovec+0x536/0x820 [ 617.643634][T13283] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 617.648910][T13283] ? security_socket_sendmsg+0x87/0xb0 [ 617.654361][T13283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.659636][T13283] __sock_sendmsg+0x221/0x270 [ 617.664311][T13283] ____sys_sendmsg+0x525/0x7d0 [ 617.669074][T13283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.674362][T13283] __sys_sendmsg+0x2b0/0x3a0 [ 617.678944][T13283] ? __pfx___sys_sendmsg+0x10/0x10 [ 617.684046][T13283] ? vfs_write+0x7c4/0xc90 [ 617.688492][T13283] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 617.694818][T13283] ? do_syscall_64+0x100/0x230 [ 617.699576][T13283] ? do_syscall_64+0xb6/0x230 [ 617.704248][T13283] do_syscall_64+0xf3/0x230 [ 617.708746][T13283] ? clear_bhb_loop+0x35/0x90 [ 617.713421][T13283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.719311][T13283] RIP: 0033:0x7fe1c3577299 [ 617.723716][T13283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.743314][T13283] RSP: 002b:00007fe1c431e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.751718][T13283] RAX: ffffffffffffffda RBX: 00007fe1c3706058 RCX: 00007fe1c3577299 [ 617.759681][T13283] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 617.767642][T13283] RBP: 00007fe1c431e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 617.775605][T13283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.783569][T13283] R13: 000000000000006e R14: 00007fe1c3706058 R15: 00007ffe3b4d2248 [ 617.791552][T13283] [ 617.827742][T13260] chnl_net:caif_netlink_parms(): no params data found [ 617.941660][T13292] FAULT_INJECTION: forcing a failure. [ 617.941660][T13292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.955225][T13292] CPU: 1 UID: 0 PID: 13292 Comm: syz.3.1910 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 617.966007][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 617.976073][T13292] Call Trace: [ 617.979361][T13292] [ 617.982303][T13292] dump_stack_lvl+0x241/0x360 [ 617.987006][T13292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.992228][T13292] ? __pfx__printk+0x10/0x10 [ 617.996838][T13292] ? __pfx_lock_release+0x10/0x10 [ 618.001873][T13292] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 618.007759][T13292] ? get_synthdev+0x117/0x2c0 [ 618.012426][T13292] should_fail_ex+0x3b0/0x4e0 [ 618.017112][T13292] _copy_from_user+0x2f/0xe0 [ 618.021729][T13292] snd_seq_oss_write+0x5a9/0xbb0 [ 618.026676][T13292] ? mark_lock+0x9a/0x350 [ 618.031005][T13292] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 618.036471][T13292] ? bpf_lsm_file_permission+0x9/0x10 [ 618.041861][T13292] odev_write+0x5e/0x80 [ 618.046012][T13292] ? __pfx_odev_write+0x10/0x10 [ 618.050864][T13292] vfs_write+0x2a2/0xc90 [ 618.055105][T13292] ? __pfx_vfs_write+0x10/0x10 [ 618.059860][T13292] ? __fget_files+0x29/0x470 [ 618.064450][T13292] ? __fget_files+0x3f6/0x470 [ 618.069115][T13292] ? __fget_files+0x29/0x470 [ 618.073702][T13292] ksys_write+0x1a0/0x2c0 [ 618.078024][T13292] ? __pfx_ksys_write+0x10/0x10 [ 618.082863][T13292] ? do_syscall_64+0x100/0x230 [ 618.087639][T13292] ? do_syscall_64+0xb6/0x230 [ 618.092322][T13292] do_syscall_64+0xf3/0x230 [ 618.096826][T13292] ? clear_bhb_loop+0x35/0x90 [ 618.101500][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.107389][T13292] RIP: 0033:0x7fe1c3577299 [ 618.111793][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.131392][T13292] RSP: 002b:00007fe1c433f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 618.139803][T13292] RAX: ffffffffffffffda RBX: 00007fe1c3705f80 RCX: 00007fe1c3577299 [ 618.147766][T13292] RDX: 0000000000000230 RSI: 0000000020000340 RDI: 0000000000000003 [ 618.155727][T13292] RBP: 00007fe1c433f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 618.163688][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.171647][T13292] R13: 000000000000000b R14: 00007fe1c3705f80 R15: 00007ffe3b4d2248 [ 618.179627][T13292] [ 618.270559][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.314921][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.322108][T13260] bridge_slave_0: entered allmulticast mode [ 618.332994][ T5215] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 618.344611][T13260] bridge_slave_0: entered promiscuous mode [ 618.358021][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.374418][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.382190][T13260] bridge_slave_1: entered allmulticast mode [ 618.390012][T13260] bridge_slave_1: entered promiscuous mode [ 618.539801][T13260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.552347][T13260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.552894][ T5215] usb 2-1: Using ep0 maxpacket: 16 [ 618.561529][T10899] Bluetooth: hci0: command tx timeout [ 618.589319][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.609396][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.628805][ T5215] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.642556][ T5215] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 618.656646][ T5215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.669733][T13260] team0: Port device team_slave_0 added [ 618.679972][ T5215] usb 2-1: config 0 descriptor?? [ 618.699799][T13260] team0: Port device team_slave_1 added [ 618.739889][T13260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.747172][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.777344][T13260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.889298][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.969342][T13260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.982023][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.011731][T13260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.080058][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.237910][ T5215] koneplus 0003:1E7D:2E22.0009: unknown main item tag 0x0 [ 619.268221][ T5215] koneplus 0003:1E7D:2E22.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 619.447893][T13260] hsr_slave_0: entered promiscuous mode [ 619.466804][T13260] hsr_slave_1: entered promiscuous mode [ 619.482163][T13295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.493075][T13295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.554498][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.645108][ T5217] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 619.655688][ T5217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 619.664566][ T5217] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 619.682674][ T5217] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 619.700241][ T5217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 619.707653][ T5217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 619.737225][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.811383][T13239] usb 2-1: USB disconnect, device number 75 [ 619.907898][T13315] No control pipe specified [ 620.086697][T13320] FAULT_INJECTION: forcing a failure. [ 620.086697][T13320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.100653][T13320] CPU: 0 UID: 0 PID: 13320 Comm: syz.3.1920 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 620.111435][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 620.121481][T13320] Call Trace: [ 620.124754][T13320] [ 620.127678][T13320] dump_stack_lvl+0x241/0x360 [ 620.132354][T13320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.137546][T13320] ? __pfx__printk+0x10/0x10 [ 620.142133][T13320] ? __pfx_lock_release+0x10/0x10 [ 620.147158][T13320] ? vfs_write+0x7c4/0xc90 [ 620.151569][T13320] should_fail_ex+0x3b0/0x4e0 [ 620.156252][T13320] _copy_from_user+0x2f/0xe0 [ 620.160841][T13320] __sys_bpf+0x1a4/0x810 [ 620.165079][T13320] ? __pfx___sys_bpf+0x10/0x10 [ 620.169847][T13320] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 620.175823][T13320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 620.182147][T13320] ? do_syscall_64+0x100/0x230 [ 620.186906][T13320] __x64_sys_bpf+0x7c/0x90 [ 620.191317][T13320] do_syscall_64+0xf3/0x230 [ 620.195814][T13320] ? clear_bhb_loop+0x35/0x90 [ 620.200488][T13320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.206376][T13320] RIP: 0033:0x7fe1c3577299 [ 620.210783][T13320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.230377][T13320] RSP: 002b:00007fe1c433f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.238784][T13320] RAX: ffffffffffffffda RBX: 00007fe1c3705f80 RCX: 00007fe1c3577299 [ 620.246749][T13320] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 620.254713][T13320] RBP: 00007fe1c433f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 620.262678][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.270639][T13320] R13: 000000000000000b R14: 00007fe1c3705f80 R15: 00007ffe3b4d2248 [ 620.278614][T13320] [ 620.287003][ T35] team0: left allmulticast mode [ 620.298898][ T35] team_slave_0: left allmulticast mode [ 620.304896][ T35] team_slave_1: left allmulticast mode [ 620.310375][ T35] team0: left promiscuous mode [ 620.325668][ T35] team_slave_0: left promiscuous mode [ 620.331198][ T35] team_slave_1: left promiscuous mode [ 620.340371][ T35] bridge0: port 3(team0) entered disabled state [ 620.358224][ T35] bridge_slave_1: left allmulticast mode [ 620.365275][ T35] bridge_slave_1: left promiscuous mode [ 620.370965][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.379755][ T35] bridge_slave_0: left allmulticast mode [ 620.386155][ T35] bridge_slave_0: left promiscuous mode [ 620.391934][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.623038][ T5217] Bluetooth: hci0: command tx timeout [ 620.645634][ T5295] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 620.732254][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.743947][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.759649][ T35] bond0 (unregistering): Released all slaves [ 620.847847][ T1168] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 620.850692][ T5295] usb 4-1: Using ep0 maxpacket: 32 [ 620.877558][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.890757][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.895160][T13310] chnl_net:caif_netlink_parms(): no params data found [ 620.902007][ T5295] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 620.917244][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.942002][ T5295] usb 4-1: config 0 descriptor?? [ 621.033453][ T1168] usb 2-1: Using ep0 maxpacket: 8 [ 621.053653][ T1168] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 621.073677][ T1168] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 621.078486][T13310] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.085102][ T1168] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 621.101641][T13310] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.107170][ T1168] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.121758][T13310] bridge_slave_0: entered allmulticast mode [ 621.123367][T13310] bridge_slave_0: entered promiscuous mode [ 621.138967][ T1168] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 621.150091][ T1168] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 621.167063][ T1168] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 621.179248][ T1168] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.202244][ T1168] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 621.209946][ T1168] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 621.212308][T13310] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.226846][ T1168] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 621.231217][T13310] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.239115][ T1168] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.246451][T13310] bridge_slave_1: entered allmulticast mode [ 621.268879][T13310] bridge_slave_1: entered promiscuous mode [ 621.274400][ T1168] usb 2-1: string descriptor 0 read error: -22 [ 621.281341][ T1168] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 621.291513][ T1168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.306127][ T1168] adutux 2-1:168.0: interrupt endpoints not found [ 621.311315][T13260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 621.346275][T13260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 621.367323][ T35] hsr_slave_0: left promiscuous mode [ 621.376104][ T35] hsr_slave_1: left promiscuous mode [ 621.382114][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.384319][ T5295] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 621.397055][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.399740][ T5295] koneplus 0003:1E7D:2D51.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 621.419588][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.427487][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.446480][ T35] veth1_macvtap: left promiscuous mode [ 621.453278][ T35] veth0_macvtap: left promiscuous mode [ 621.458920][ T35] veth1_vlan: left promiscuous mode [ 621.474264][ T35] veth0_vlan: left promiscuous mode [ 621.538683][ T1168] usb 2-1: USB disconnect, device number 76 [ 621.660497][T13239] usb 4-1: USB disconnect, device number 74 [ 621.752916][ T5217] Bluetooth: hci3: command tx timeout [ 621.947758][ T35] team0 (unregistering): Port device team_slave_1 removed [ 621.997272][ T35] team0 (unregistering): Port device team_slave_0 removed [ 622.188248][ T3827] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 622.404790][ T5295] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 622.527109][T13310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.543199][T13260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 622.573848][T13260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.599292][ T5295] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 622.609021][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 622.611328][T13310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.619127][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 622.644206][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 622.659800][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 622.672418][ T5295] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 622.681365][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 622.700340][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 622.703229][ T5217] Bluetooth: hci0: command tx timeout [ 622.734125][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 622.754222][T13310] team0: Port device team_slave_0 added [ 622.782380][T13310] team0: Port device team_slave_1 added [ 622.838992][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 622.869510][ T5295] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 622.874887][T13310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.886182][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 622.916099][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 622.942107][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 622.942258][T13310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.979449][ T5295] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 622.989579][T13310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.020996][T13310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.030934][T13310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.061410][T13310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.102017][ T5295] usb 2-1: string descriptor 0 read error: -22 [ 623.126059][ T5295] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 623.155407][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.185948][ T5295] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 623.221772][T13310] hsr_slave_0: entered promiscuous mode [ 623.234021][T13310] hsr_slave_1: entered promiscuous mode [ 623.250405][T13310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.269917][T13310] Cannot create hsr debugfs directory [ 623.399187][T13260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.462056][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.469189][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 623.534408][ T945] usb 2-1: USB disconnect, device number 77 [ 623.550889][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.558057][ T5263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.570363][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.577594][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.687619][T13349] No control pipe specified [ 623.823110][ T5217] Bluetooth: hci3: command tx timeout [ 623.868896][T13260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.946623][T13310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 623.960492][T13310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 623.971384][T13310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 623.990482][T13310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 624.166996][T13310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.212590][T13310] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.242196][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.249297][ T5263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.279279][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.286441][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.309416][T13260] veth0_vlan: entered promiscuous mode [ 624.335945][T13260] veth1_vlan: entered promiscuous mode [ 624.398895][T13260] veth0_macvtap: entered promiscuous mode [ 624.415551][T13260] veth1_macvtap: entered promiscuous mode [ 624.435694][T13260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.447624][T13260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.457791][T13260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.480274][T13260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.490446][T13260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.501178][T13260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.511330][T13260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.523117][T13260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.548654][T13260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.569742][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.576896][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.630973][T13260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.670406][T13260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.712576][T13260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.566921][T13260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.650529][T13260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.663522][T13260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.674969][T13260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.685975][T13260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.699081][T13260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.730486][T13260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.739666][T13260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.765781][T13260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.783486][T13260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.902973][ T5217] Bluetooth: hci3: command tx timeout [ 626.030246][T13310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.085858][T12656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.111455][T12656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.179630][T12821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.195774][T12821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.326006][T13310] veth0_vlan: entered promiscuous mode [ 626.406001][T13401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1937'. [ 626.462459][T13310] veth1_vlan: entered promiscuous mode [ 626.613817][T13403] netlink: 'syz.1.1938': attribute type 29 has an invalid length. [ 626.994147][T13404] netlink: 'syz.1.1938': attribute type 29 has an invalid length. [ 627.031422][ T1168] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 627.039500][T13403] netlink: 'syz.1.1938': attribute type 29 has an invalid length. [ 627.111273][T13310] veth0_macvtap: entered promiscuous mode [ 627.135982][T13310] veth1_macvtap: entered promiscuous mode [ 627.170498][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.173013][T13406] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.1897'. [ 627.188026][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.207138][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.218211][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.228464][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.238993][ T1168] usb 4-1: Using ep0 maxpacket: 8 [ 627.239501][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.257811][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.269955][ T1168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.276730][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.292747][ T1168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.297620][T13411] No control pipe specified [ 627.302566][ T1168] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 627.309581][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.340475][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.348065][ T1168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.370286][T13310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.371652][ T1168] usb 4-1: config 0 descriptor?? [ 627.412032][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.434725][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.462101][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.487406][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.505784][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.525392][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.536717][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.549398][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.559619][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.572372][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.587241][T13310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.616806][T13310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.645013][T13310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.662847][T13310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.679701][T13310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.822620][T13392] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1933'. [ 627.842525][T12656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.854100][T12656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.876344][ T1168] usbhid 4-1:0.0: can't add hid device: -71 [ 627.889620][ T1168] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 627.891341][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.901206][ T1168] usb 4-1: USB disconnect, device number 75 [ 627.915556][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.983775][ T5217] Bluetooth: hci3: command tx timeout [ 628.021173][T13429] FAULT_INJECTION: forcing a failure. [ 628.021173][T13429] name failslab, interval 1, probability 0, space 0, times 0 [ 628.037401][T13429] CPU: 0 UID: 0 PID: 13429 Comm: syz.2.1916 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 628.048181][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 628.058230][T13429] Call Trace: [ 628.061500][T13429] [ 628.064482][T13429] dump_stack_lvl+0x241/0x360 [ 628.069184][T13429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.074389][T13429] ? __pfx__printk+0x10/0x10 [ 628.078974][T13429] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 628.084428][T13429] ? __pfx___might_resched+0x10/0x10 [ 628.089711][T13429] should_fail_ex+0x3b0/0x4e0 [ 628.094385][T13429] should_failslab+0xac/0x100 [ 628.099055][T13429] ? __se_sys_mount+0x15a/0x3c0 [ 628.103895][T13429] __kmalloc_cache_noprof+0x6c/0x2c0 [ 628.109175][T13429] ? memdup_user+0x9f/0xc0 [ 628.113586][T13429] __se_sys_mount+0x15a/0x3c0 [ 628.118253][T13429] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 628.124228][T13429] ? __pfx___se_sys_mount+0x10/0x10 [ 628.129425][T13429] ? do_syscall_64+0x100/0x230 [ 628.134190][T13429] ? __x64_sys_mount+0x20/0xc0 [ 628.138948][T13429] do_syscall_64+0xf3/0x230 [ 628.143446][T13429] ? clear_bhb_loop+0x35/0x90 [ 628.148122][T13429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.154014][T13429] RIP: 0033:0x7fc15c377299 [ 628.158423][T13429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.178019][T13429] RSP: 002b:00007fc15d0e5048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.186426][T13429] RAX: ffffffffffffffda RBX: 00007fc15c505f80 RCX: 00007fc15c377299 [ 628.194391][T13429] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 628.202356][T13429] RBP: 00007fc15d0e50a0 R08: 00000000200003c0 R09: 0000000000000000 [ 628.210322][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.218286][T13429] R13: 000000000000000b R14: 00007fc15c505f80 R15: 00007ffff3168358 [ 628.226259][T13429] [ 628.333213][ T5266] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 628.534769][ T5266] usb 5-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 628.580380][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.659826][ T5266] usb 5-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 628.698373][ T5266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.718167][ T5266] usb 5-1: Product: syz [ 628.732150][ T5266] usb 5-1: Manufacturer: syz [ 628.751091][ T5266] usb 5-1: SerialNumber: syz [ 628.823832][ T5266] usb 5-1: config 0 descriptor?? [ 630.144827][T13462] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1955'. [ 630.209182][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1955'. [ 630.472666][ T945] usb 5-1: USB disconnect, device number 51 [ 631.426477][ T2501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.577953][ T5263] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 631.615146][ T2501] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.852918][ T5263] usb 2-1: Using ep0 maxpacket: 8 [ 631.869901][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.881740][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.892270][ T5263] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 631.901566][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.987605][ T5263] usb 2-1: config 0 descriptor?? [ 632.446920][ T2501] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.473603][T10899] Bluetooth: hci3: command 0x0405 tx timeout [ 632.556086][T13498] fuse: Unknown parameter '0000000000000000000300000000000000000000003' [ 632.565585][T13480] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.1959'. [ 633.300356][ T5263] usbhid 2-1:0.0: can't add hid device: -71 [ 633.447799][ T5263] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 634.612919][T10899] Bluetooth: hci3: command 0x0405 tx timeout [ 634.642349][ T5263] usb 2-1: USB disconnect, device number 78 [ 634.701812][ T2501] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.834497][T13513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 635.897880][ T2501] bridge_slave_1: left allmulticast mode [ 635.923784][ T2501] bridge_slave_1: left promiscuous mode [ 635.941011][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.959427][ T2501] bridge_slave_0: left allmulticast mode [ 635.969736][ T2501] bridge_slave_0: left promiscuous mode [ 635.979998][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.988609][T10899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 636.003826][T10899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 636.014953][T10899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 636.023880][T10899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 636.037996][T10899] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 636.045387][T10899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.110420][T13529] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 637.533118][ T5268] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 637.623486][ T2501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.642966][ T2501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.663470][ T2501] bond0 (unregistering): Released all slaves [ 637.726048][ T5268] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 637.785962][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.829388][ T5268] usb 2-1: config 0 descriptor?? [ 638.143618][T10899] Bluetooth: hci0: command tx timeout [ 638.423879][T13562] xt_NFQUEUE: number of total queues is 0 [ 638.444368][ T2501] hsr_slave_0: left promiscuous mode [ 638.453004][ T5215] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 638.461146][ T2501] hsr_slave_1: left promiscuous mode [ 638.473431][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.480830][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.499262][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.513151][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.567269][ T2501] veth1_macvtap: left promiscuous mode [ 638.580183][ T2501] veth0_macvtap: left promiscuous mode [ 638.589278][ T2501] veth1_vlan: left promiscuous mode [ 638.601881][ T2501] veth0_vlan: left promiscuous mode [ 638.657129][ T5215] usb 3-1: Using ep0 maxpacket: 8 [ 638.692964][ T5263] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 638.697081][ T5215] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 638.726274][ T5215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.758359][ T5215] usb 3-1: config 0 descriptor?? [ 638.785475][ T5268] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 638.802560][ T5268] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 638.816508][ T5268] asix 2-1:0.0: probe with driver asix failed with error -71 [ 638.854815][ T5268] usb 2-1: USB disconnect, device number 79 [ 638.922881][ T5263] usb 4-1: Using ep0 maxpacket: 8 [ 638.933841][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.945526][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.956450][ T5263] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 638.966274][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.012602][ T5263] usb 4-1: config 0 descriptor?? [ 639.450717][T13563] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1982'. [ 639.490939][ T5263] usbhid 4-1:0.0: can't add hid device: -71 [ 639.516751][ T5263] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 639.559826][ T5263] usb 4-1: USB disconnect, device number 76 [ 639.691790][ T2501] team0 (unregistering): Port device team_slave_1 removed [ 639.777822][ T2501] team0 (unregistering): Port device team_slave_0 removed [ 640.223087][T10899] Bluetooth: hci0: command tx timeout [ 640.652588][T13549] netlink: 'syz.2.1980': attribute type 10 has an invalid length. [ 640.691938][T13549] team0: Device veth1_macvtap failed to register rx_handler [ 640.840355][T13519] chnl_net:caif_netlink_parms(): no params data found [ 640.883642][ T5215] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 640.907117][ T5215] asix 3-1:0.0: probe with driver asix failed with error -71 [ 640.953146][ T5215] usb 3-1: USB disconnect, device number 80 [ 641.270921][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.296924][T13519] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.323021][T13519] bridge_slave_0: entered allmulticast mode [ 641.356458][T13519] bridge_slave_0: entered promiscuous mode [ 641.372984][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.386903][T13519] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.396560][T13519] bridge_slave_1: entered allmulticast mode [ 641.404661][T13519] bridge_slave_1: entered promiscuous mode [ 641.479537][T13519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.492491][T13519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.532973][ T5215] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 641.568933][T13519] team0: Port device team_slave_0 added [ 641.571412][T13597] overlay: ./file0 is not a directory [ 641.578551][T13519] team0: Port device team_slave_1 added [ 641.612635][T13519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.622667][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.659953][T13519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.691222][T13519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.707498][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.746011][T13519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.762909][ T5215] usb 3-1: Using ep0 maxpacket: 16 [ 641.772342][ T5215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 641.789774][ T5215] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 641.799560][ T5215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.829027][ T5215] usb 3-1: Product: syz [ 641.839418][ T5215] usb 3-1: Manufacturer: syz [ 641.852152][ T5215] usb 3-1: SerialNumber: syz [ 641.874281][ T5215] usb 3-1: config 0 descriptor?? [ 641.876466][ C0] ================================================================== [ 641.887555][ C0] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x160/0x240 [ 641.895727][ C0] Read of size 8 at addr ffffc90004427820 by task syz.3.1995/13606 [ 641.903624][ C0] [ 641.905962][ C0] CPU: 0 UID: 0 PID: 13606 Comm: syz.3.1995 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 641.916732][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 641.922384][ T5215] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 641.926782][ C0] Call Trace: [ 641.926796][ C0] [ 641.926805][ C0] dump_stack_lvl+0x241/0x360 [ 641.926838][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.926862][ C0] ? __pfx__printk+0x10/0x10 [ 641.926885][ C0] ? _printk+0xd5/0x120 [ 641.926913][ C0] print_report+0x169/0x550 [ 641.926939][ C0] ? __virt_addr_valid+0xbd/0x530 [ 641.926967][ C0] ? xdp_do_check_flushed+0x160/0x240 [ 641.926992][ C0] kasan_report+0x143/0x180 [ 641.927018][ C0] ? xdp_do_check_flushed+0x160/0x240 [ 641.927045][ C0] xdp_do_check_flushed+0x160/0x240 [ 641.927070][ C0] __napi_poll+0xe4/0x490 [ 641.927095][ C0] net_rx_action+0x89b/0x1240 [ 641.927131][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 641.927158][ C0] ? sched_clock+0x4a/0x70 [ 641.927190][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 641.927224][ C0] handle_softirqs+0x2c4/0x970 [ 641.927251][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 641.942678][ T5215] usb 3-1: Detected FT232R [ 641.945445][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 641.945479][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 642.038234][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 642.042832][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 642.048048][ C0] irq_exit_rcu+0x9/0x30 [ 642.052297][ C0] common_interrupt+0xaa/0xd0 [ 642.056983][ C0] [ 642.059906][ C0] [ 642.062830][ C0] asm_common_interrupt+0x26/0x40 [ 642.067855][ C0] RIP: 0010:rcu_is_watching+0x17/0xb0 [ 642.073222][ C0] Code: 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 a8 36 8a 7e e8 3b 32 33 0a 89 c3 <83> f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 40 da 07 [ 642.092813][ C0] RSP: 0018:ffffc90004427470 EFLAGS: 00000286 [ 642.098871][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888057945a00 [ 642.106831][ C0] RDX: ffff888057945a00 RSI: ffffffff8c3f9260 RDI: ffffffff8c3f9220 [ 642.114790][ C0] RBP: 0000000000000001 R08: ffffffff8202adf1 R09: 1ffffffff269d300 [ 642.122750][ C0] R10: dffffc0000000000 R11: fffffbfff269d301 R12: 0000000000102dc2 [ 642.130717][ C0] R13: 0000000000000001 R14: ffffffff8202adc0 R15: dffffc0000000000 [ 642.138680][ C0] ? page_ext_get+0x20/0x2a0 [ 642.143264][ C0] ? page_ext_get+0x51/0x2a0 [ 642.147847][ C0] ? page_ext_get+0x20/0x2a0 [ 642.152430][ C0] page_ext_get+0x5a/0x2a0 [ 642.156842][ C0] __set_page_owner+0x9e/0x800 [ 642.161602][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 642.168183][ C0] ? __pfx_lock_release+0x10/0x10 [ 642.173207][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 642.178567][ C0] ? do_raw_spin_trylock+0xc8/0x1f0 [ 642.183757][ C0] post_alloc_hook+0x1f3/0x230 [ 642.188508][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 642.194055][ C0] ? __alloc_pages_noprof+0x166/0x6c0 [ 642.199424][ C0] ? prepare_alloc_pages+0x369/0x5d0 [ 642.204705][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 642.209901][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 642.215616][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 642.221069][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 642.227043][ C0] ? __vmalloc_node_range_noprof+0x9c0/0x1460 [ 642.233109][ C0] ? alloc_pages_noprof+0xef/0x170 [ 642.238214][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 642.244123][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 642.250444][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 642.255197][ C0] ? xskq_create+0x54/0x170 [ 642.259695][ C0] vmalloc_user_noprof+0x74/0x80 [ 642.264637][ C0] ? xskq_create+0xb6/0x170 [ 642.269132][ C0] xskq_create+0xb6/0x170 [ 642.273459][ C0] xsk_init_queue+0xa1/0x100 [ 642.278039][ C0] xsk_setsockopt+0x4ea/0x950 [ 642.282703][ C0] ? __pfx_xsk_setsockopt+0x10/0x10 [ 642.287895][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 642.292914][ C0] ? __pfx_lock_release+0x10/0x10 [ 642.297931][ C0] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 642.303468][ C0] ? security_socket_setsockopt+0x87/0xb0 [ 642.309179][ C0] ? __pfx_xsk_setsockopt+0x10/0x10 [ 642.314364][ C0] do_sock_setsockopt+0x3af/0x720 [ 642.319391][ C0] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 642.324934][ C0] ? __fget_files+0x29/0x470 [ 642.329515][ C0] ? __fget_files+0x3f6/0x470 [ 642.334186][ C0] __sys_setsockopt+0x1ae/0x250 [ 642.339027][ C0] __x64_sys_setsockopt+0xb5/0xd0 [ 642.344045][ C0] do_syscall_64+0xf3/0x230 [ 642.348540][ C0] ? clear_bhb_loop+0x35/0x90 [ 642.353211][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.359094][ C0] RIP: 0033:0x7fe1c3577299 [ 642.363498][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.383442][ C0] RSP: 002b:00007fe1c433f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 642.391845][ C0] RAX: ffffffffffffffda RBX: 00007fe1c3705f80 RCX: 00007fe1c3577299 [ 642.399805][ C0] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000008 [ 642.407765][ C0] RBP: 00007fe1c35e48e6 R08: 000000000000002c R09: 0000000000000000 [ 642.415722][ C0] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 642.423684][ C0] R13: 000000000000000b R14: 00007fe1c3705f80 R15: 00007ffe3b4d2248 [ 642.431672][ C0] [ 642.434683][ C0] [ 642.436996][ C0] The buggy address belongs to stack of task syz.3.1995/13606 [ 642.444433][ C0] and is located at offset 0 in frame: [ 642.449958][ C0] __alloc_pages_noprof+0x0/0x6c0 [ 642.454975][ C0] [ 642.457283][ C0] This frame has 3 objects: [ 642.461769][ C0] [32, 36) 'alloc_flags' [ 642.461781][ C0] [48, 52) 'alloc_gfp' [ 642.466098][ C0] [64, 104) 'ac' [ 642.470235][ C0] [ 642.476150][ C0] The buggy address belongs to the virtual mapping at [ 642.476150][ C0] [ffffc90004420000, ffffc90004429000) created by: [ 642.476150][ C0] copy_process+0x5d1/0x3dc0 [ 642.493771][ C0] [ 642.496077][ C0] The buggy address belongs to the physical page: [ 642.502474][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x5cc51 [ 642.511220][ C0] memcg:ffff88807a38c402 [ 642.515444][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 642.522552][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 642.531122][ C0] raw: 0000000000000008 0000000000000000 00000001ffffffff ffff88807a38c402 [ 642.539683][ C0] page dumped because: kasan: bad access detected [ 642.546084][ C0] page_owner tracks the page as allocated [ 642.551780][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 617955403931, free_ts 615300314861 [ 642.569391][ C0] post_alloc_hook+0x1f3/0x230 [ 642.574144][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 642.579678][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 642.584871][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 642.590322][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 642.596205][ C0] dup_task_struct+0x444/0x8c0 [ 642.600962][ C0] copy_process+0x5d1/0x3dc0 [ 642.605544][ C0] kernel_clone+0x223/0x870 [ 642.610042][ C0] kernel_thread+0x1bc/0x240 [ 642.614626][ C0] kthreadd+0x60d/0x810 [ 642.618769][ C0] ret_from_fork+0x4b/0x80 [ 642.623175][ C0] ret_from_fork_asm+0x1a/0x30 [ 642.627930][ C0] page last free pid 13260 tgid 13260 stack trace: [ 642.634416][ C0] free_unref_page+0xd19/0xea0 [ 642.639163][ C0] __slab_free+0x31b/0x3d0 [ 642.643564][ C0] qlist_free_all+0x9e/0x140 [ 642.648138][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 642.653580][ C0] __kasan_slab_alloc+0x23/0x80 [ 642.658416][ C0] __kmalloc_node_track_caller_noprof+0x1cd/0x440 [ 642.664820][ C0] kstrdup+0x3a/0x80 [ 642.668701][ C0] kobject_set_name_vargs+0x61/0x120 [ 642.673980][ C0] dev_set_name+0xd5/0x120 [ 642.678383][ C0] netdev_register_kobject+0xb7/0x320 [ 642.683744][ C0] register_netdevice+0x12c5/0x1b00 [ 642.688935][ C0] __ip_tunnel_create+0x2b4/0x380 [ 642.693948][ C0] ip_tunnel_init_net+0x21c/0x710 [ 642.698957][ C0] ops_init+0x359/0x610 [ 642.703102][ C0] setup_net+0x515/0xca0 [ 642.707334][ C0] copy_net_ns+0x4e2/0x7b0 [ 642.711738][ C0] [ 642.714045][ C0] Memory state around the buggy address: [ 642.719663][ C0] ffffc90004427700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 642.727715][ C0] ffffc90004427780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 642.735758][ C0] >ffffc90004427800: 00 00 00 00 f1 f1 f1 f1 04 f2 04 f2 00 00 00 00 [ 642.743804][ C0] ^ [ 642.748895][ C0] ffffc90004427880: 00 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 642.756938][ C0] ffffc90004427900: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 642.764982][ C0] ================================================================== [ 642.773156][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 642.780355][ C0] CPU: 0 UID: 0 PID: 13606 Comm: syz.3.1995 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 642.791127][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 642.801190][ C0] Call Trace: [ 642.804479][ C0] [ 642.807335][ C0] dump_stack_lvl+0x241/0x360 [ 642.812031][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.817237][ C0] ? __pfx__printk+0x10/0x10 [ 642.821841][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 642.827848][ C0] ? vscnprintf+0x5d/0x90 [ 642.832201][ C0] panic+0x349/0x860 [ 642.836110][ C0] ? check_panic_on_warn+0x21/0xb0 [ 642.841211][ C0] ? __pfx_panic+0x10/0x10 [ 642.845619][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 642.851520][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 642.857412][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 642.863735][ C0] check_panic_on_warn+0x86/0xb0 [ 642.868662][ C0] ? xdp_do_check_flushed+0x160/0x240 [ 642.874030][ C0] end_report+0x77/0x160 [ 642.878265][ C0] kasan_report+0x154/0x180 [ 642.882759][ C0] ? xdp_do_check_flushed+0x160/0x240 [ 642.888134][ C0] xdp_do_check_flushed+0x160/0x240 [ 642.893326][ C0] __napi_poll+0xe4/0x490 [ 642.897646][ C0] net_rx_action+0x89b/0x1240 [ 642.902322][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 642.907428][ C0] ? sched_clock+0x4a/0x70 [ 642.911839][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 642.918169][ C0] handle_softirqs+0x2c4/0x970 [ 642.922934][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 642.927695][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 642.932974][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 642.938164][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 642.942744][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 642.947940][ C0] irq_exit_rcu+0x9/0x30 [ 642.952173][ C0] common_interrupt+0xaa/0xd0 [ 642.956850][ C0] [ 642.959770][ C0] [ 642.962688][ C0] asm_common_interrupt+0x26/0x40 [ 642.967705][ C0] RIP: 0010:rcu_is_watching+0x17/0xb0 [ 642.973071][ C0] Code: 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 a8 36 8a 7e e8 3b 32 33 0a 89 c3 <83> f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 40 da 07 [ 642.992666][ C0] RSP: 0018:ffffc90004427470 EFLAGS: 00000286 [ 642.998723][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888057945a00 [ 643.006683][ C0] RDX: ffff888057945a00 RSI: ffffffff8c3f9260 RDI: ffffffff8c3f9220 [ 643.014640][ C0] RBP: 0000000000000001 R08: ffffffff8202adf1 R09: 1ffffffff269d300 [ 643.022607][ C0] R10: dffffc0000000000 R11: fffffbfff269d301 R12: 0000000000102dc2 [ 643.030565][ C0] R13: 0000000000000001 R14: ffffffff8202adc0 R15: dffffc0000000000 [ 643.038550][ C0] ? page_ext_get+0x20/0x2a0 [ 643.043150][ C0] ? page_ext_get+0x51/0x2a0 [ 643.047741][ C0] ? page_ext_get+0x20/0x2a0 [ 643.052322][ C0] page_ext_get+0x5a/0x2a0 [ 643.056736][ C0] __set_page_owner+0x9e/0x800 [ 643.061492][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 643.068073][ C0] ? __pfx_lock_release+0x10/0x10 [ 643.073092][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 643.078458][ C0] ? do_raw_spin_trylock+0xc8/0x1f0 [ 643.083666][ C0] post_alloc_hook+0x1f3/0x230 [ 643.088438][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 643.093981][ C0] ? __alloc_pages_noprof+0x166/0x6c0 [ 643.099352][ C0] ? prepare_alloc_pages+0x369/0x5d0 [ 643.104631][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 643.109819][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 643.115535][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 643.120988][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 643.126960][ C0] ? __vmalloc_node_range_noprof+0x9c0/0x1460 [ 643.133019][ C0] ? alloc_pages_noprof+0xef/0x170 [ 643.138121][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 643.144017][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 643.150337][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 643.155089][ C0] ? xskq_create+0x54/0x170 [ 643.159581][ C0] vmalloc_user_noprof+0x74/0x80 [ 643.164511][ C0] ? xskq_create+0xb6/0x170 [ 643.169003][ C0] xskq_create+0xb6/0x170 [ 643.173325][ C0] xsk_init_queue+0xa1/0x100 [ 643.177904][ C0] xsk_setsockopt+0x4ea/0x950 [ 643.182585][ C0] ? __pfx_xsk_setsockopt+0x10/0x10 [ 643.187778][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 643.192800][ C0] ? __pfx_lock_release+0x10/0x10 [ 643.197815][ C0] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 643.203355][ C0] ? security_socket_setsockopt+0x87/0xb0 [ 643.209062][ C0] ? __pfx_xsk_setsockopt+0x10/0x10 [ 643.214249][ C0] do_sock_setsockopt+0x3af/0x720 [ 643.219271][ C0] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 643.224811][ C0] ? __fget_files+0x29/0x470 [ 643.229391][ C0] ? __fget_files+0x3f6/0x470 [ 643.234059][ C0] __sys_setsockopt+0x1ae/0x250 [ 643.238902][ C0] __x64_sys_setsockopt+0xb5/0xd0 [ 643.243916][ C0] do_syscall_64+0xf3/0x230 [ 643.248408][ C0] ? clear_bhb_loop+0x35/0x90 [ 643.253077][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.258961][ C0] RIP: 0033:0x7fe1c3577299 [ 643.263362][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.282962][ C0] RSP: 002b:00007fe1c433f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.291376][ C0] RAX: ffffffffffffffda RBX: 00007fe1c3705f80 RCX: 00007fe1c3577299 [ 643.299333][ C0] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000008 [ 643.307289][ C0] RBP: 00007fe1c35e48e6 R08: 000000000000002c R09: 0000000000000000 [ 643.315243][ C0] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 643.323199][ C0] R13: 000000000000000b R14: 00007fe1c3705f80 R15: 00007ffe3b4d2248 [ 643.331163][ C0] [ 643.334372][ C0] Kernel Offset: disabled [ 643.338686][ C0] Rebooting in 86400 seconds..