last executing test programs: 8m55.208374994s ago: executing program 32 (id=423): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgctl$IPC_RMID(r0, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000240), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) migrate_pages(0x0, 0x8, &(0x7f0000000140)=0x3, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0}], 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x8, 0x5, 0xb, 0xc, 0x5, 0x80, 0xe72, 0xb0c, 0x9, 0x35, 0x27, {0x6fc, 0x8001}, 0x3, 0xed}}) ioctl$TCFLSH(r2, 0x540b, 0x2) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x0) unshare(0x22020600) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 7m45.465745106s ago: executing program 33 (id=585): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x1ff) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001580), 0x400000000000203, 0x10122, 0x0) 4m44.495784732s ago: executing program 7 (id=1053): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000a80)={'#! ', './file2', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xda\xfd$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9!\a\x12\xa9\x18\x93C\v79?L\x98e\f\xb5\x0f8\bH\xa8l\r\xfb\xd6>G\xf5\x11dV\xc9ty\xdaJ'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {0x20, '\x00'}, {0x20, 'ro\x00'}, {0x20, ':@'}, {0x20, '+'}, {0x20, 'GPL\x00'}, {}, {}]}, 0x7c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f00000005c0)="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", 0x164) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x27d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 4m43.077923738s ago: executing program 7 (id=1059): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0xdd1}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4m41.293933527s ago: executing program 7 (id=1063): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x54c1}, 0x8) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c06", 0x3, 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) r3 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 4m38.078122967s ago: executing program 7 (id=1070): ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) sendto(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000080)=@phonet={0x1d, 0x0, 0x0, 0x3}, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)) eventfd2(0x4, 0x80001) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x2, 0xa, 0x2) setuid(0xee00) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0x1000, 0x800, 0x8}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001340)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000880)='H', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000020000000000200200500f300000000000800000007000000ff00000045b3255059b0097be22e26be7cb839fbda9c698dfb46b612772060914bee335d062eb65893b463cec6c741469e23db4b3283aa5807b859907349138fa6e08c76278b4b28bbce3a9bd1584de727abe4179333d97b1b5e1084aed28bb5eae7a494", @ANYRES32=0x0], 0x30}], 0x1, 0x4000) socket(0x1000000010, 0x80002, 0x0) 4m35.664469446s ago: executing program 7 (id=1076): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={0x0, 0xa0}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000006c0)={0x40, 0x10, 0x47, "afec932ddf06f1fdc946af49f3f6933ddcd1a3ee012a3a596f688b5e3644f2dd334de51c23ff0275890a4b996cc02cb71eadb6b5a909f0372d5943321a81b248de5fac5166aff3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0}) 4m31.470456223s ago: executing program 7 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) kexec_load(0x1, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) 4m19.351431083s ago: executing program 6 (id=1119): ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x541b, 0x0) 4m18.997754838s ago: executing program 6 (id=1120): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5fbdb8357f2d8786dc36d1b11983a30fe8543f09169c4bbe8ec16ca2af940f81feefb7a0957a6c072f6e29767cd0a831318ee1d8b99e2cb538df96e5597dcd7854e6ba118afdd78321dc964281262aee53e8e1a77325d904318b5049d1c50d7f4514881ff616595c25e1171723ff05732afa2daeba360eeebe684c80490ca61939cc59f5ecb012ebab4c5fe3c111b63ce2fe41d53461c1b5fae6b8d7ddfda45debc23d7c6fa6597e17d3329d97b6bceec14f873110ab6496e5b22ffd657d642f252bd70dbd14bf3321bd7febf374f7bd61971d200671d78e1d5e99748173052e656e9ba666ad965f3d9b86733189fe871d9f9a3d4c7ab6984fedcb3b6b1466fc", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf253500000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x10) socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x8001, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) sendmsg$key(r1, 0x0, 0x4000) r10 = socket(0x26, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000003080006000000000002406007000005000300210004000900030073797a3100"/48], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f", 0x46}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c044) 4m15.596077727s ago: executing program 6 (id=1127): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) listen(0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./bus/file0\x00', &(0x7f00000005c0)={[&(0x7f0000000280)='-+\x00', &(0x7f0000000380)='overlay\x00', &(0x7f0000000400)=')[[*^*&]\x00', &(0x7f0000000440)='overlay\x00']}, &(0x7f00000006c0)={[&(0x7f0000000640)='overlay\x00', &(0x7f0000000680)='overlay\x00']}, 0x400) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 4m15.443349085s ago: executing program 34 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) kexec_load(0x1, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) 4m14.341868699s ago: executing program 6 (id=1130): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="ac0400009cc1d2cc2c", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2], 0x4ac}, 0x1, 0x0, 0x0, 0x40}, 0x2000005) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000000018010000202078250000007b1af8ff00000000bfa10000008a4e8c6c010000f8ffffffb702000008000000b50a0000000000008500000006000000950000000000000100"/115], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="01325ea77dec"}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) 4m12.759034256s ago: executing program 6 (id=1132): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x541b, 0x0) 4m11.749845594s ago: executing program 6 (id=1134): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x54c1}, 0x8) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c06", 0x3, 0xfffffffffffffffe) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) read$msr(r3, &(0x7f00000003c0)=""/207, 0xcf) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 3m56.090665547s ago: executing program 35 (id=1134): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x54c1}, 0x8) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c06", 0x3, 0xfffffffffffffffe) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) read$msr(r3, &(0x7f00000003c0)=""/207, 0xcf) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 3m19.191648274s ago: executing program 4 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x54) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000980)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304858) write$binfmt_script(r2, &(0x7f0000000500), 0x4) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3m5.062284429s ago: executing program 4 (id=1257): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="42000000030000000000"], 0x42) close(r3) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2f, 0x0, 0x0) 3m4.065309576s ago: executing program 0 (id=1259): fsopen(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}}) getuid() socket$kcm(0x29, 0x5, 0x0) 3m2.939770834s ago: executing program 4 (id=1260): r0 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) preadv(r0, 0x0, 0x0, 0xfffffffe, 0x0) socket(0xa, 0x3, 0x3a) set_mempolicy(0x2, 0x0, 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xb) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x12}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{}, 0x8}}}, 0x7) socket(0x0, 0x4, 0x29) 3m2.608249245s ago: executing program 4 (id=1262): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="850000007e00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x8, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x200, 0x0, 0x1}, {0x0, 0x1}]}, [{0x3, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x1ff}, {0x448eade7}, {0x0, 0x0, 0x5a6, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x9}, {0x0, 0x1000000}, {0x2}, {}, {0xfffffffc, 0x0, 0x400, 0x8}, {0x0, 0xe}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe434}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x14}, {}, {}, {0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {0x0, 0x400000}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0xfffffffd, 0xdfe06f32}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0xefa6}, {0xfffffffc}, {0x0, 0x8000000}, {}, {0x2b}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x400}], [{}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4, 0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {0x5}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) pipe(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554", 0x1e) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3m1.030581119s ago: executing program 4 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 2m58.325938362s ago: executing program 4 (id=1268): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0x1, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffff, 0x4}, 0x6) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(0x0, 0x14d27e, 0x60) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0xd8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r4 = syz_io_uring_setup(0x10e, &(0x7f00000003c0)={0x0, 0x5885, 0x8, 0x1, 0x110}, &(0x7f00000007c0)=0x0, &(0x7f0000000880)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m54.802349034s ago: executing program 0 (id=1272): r0 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) preadv(r0, 0x0, 0x0, 0xfffffffe, 0x0) socket(0xa, 0x3, 0x3a) set_mempolicy(0x2, 0x0, 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xb) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x4, 0x29) 2m54.424207702s ago: executing program 0 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@multicast2, 0x0, 0x3c}, @in6=@remote, {0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x3503, 0xa, 0x2, 0xfd, 0x2c}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="0002020100000000ff02010000000000000010000000dcb1df601f0d5d1fdbee3be8ae1ee7c0a9f25b994e22ef01db716da0e84137c325f765bf8dfb79ea04f116a2a2343b3cd5aaad089523ffdd10c90c50ace873d68eb7e8c34135609e4964d6436e7dfdc4d6a9011a0408d355e0e443998a663f77d8a62fdd3a3efdd6f9dea27a56e17b1272ba5121001c2ee170f84c6c4aea298b2543"], 0x18) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000440)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendfile(r7, r6, &(0x7f0000002080)=0x66, 0x23b) 2m53.250196289s ago: executing program 0 (id=1275): syz_open_dev$sndmidi(&(0x7f0000003640), 0x2, 0x20042) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d944385724"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2m50.396131345s ago: executing program 0 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 2m48.334935082s ago: executing program 0 (id=1283): fsopen(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}}) getuid() socket$kcm(0x29, 0x5, 0x0) 2m42.631272246s ago: executing program 36 (id=1268): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0x1, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffff, 0x4}, 0x6) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(0x0, 0x14d27e, 0x60) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0xd8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r4 = syz_io_uring_setup(0x10e, &(0x7f00000003c0)={0x0, 0x5885, 0x8, 0x1, 0x110}, &(0x7f00000007c0)=0x0, &(0x7f0000000880)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m32.319420581s ago: executing program 37 (id=1283): fsopen(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}}) getuid() socket$kcm(0x29, 0x5, 0x0) 30.96152799s ago: executing program 3 (id=1566): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x4, 0x0, 0x0, 0x0, "978e8676a8cfd89c"}, 0x10}}, 0x20008081) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) 30.731749079s ago: executing program 8 (id=1568): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, '\x00\x00'}, @local=@item_012={0x2, 0x2, 0x1, "40ef"}, @local=@item_4={0x3, 0x2, 0x2, "611d6f7d"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "09009215"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 28.995910805s ago: executing program 3 (id=1572): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) 28.3301611s ago: executing program 3 (id=1575): io_setup(0x9, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000009c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r2}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@mcast1, 0x0, 0x33}, @in=@private}, 0x0, 0x5dfe}, [@XFRMA_SET_MARK_MASK={0x8}, @etimer_thresh={0x8}]}, 0x108}}, 0x0) 26.660750911s ago: executing program 8 (id=1581): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) 26.660259988s ago: executing program 3 (id=1582): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_ima(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000240)={0x1, r3}) 26.522327396s ago: executing program 1 (id=1584): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100018, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) pread64(r5, &(0x7f0000000200)=""/162, 0xa2, 0xae) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) recvmsg(r6, 0x0, 0x120) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYBLOB="d41b00003b0007010000000000000000017c00000400fc801000018054717f8008003700", @ANYRES32, @ANYBLOB="ac1b02"], 0x1bd4}}, 0xc000) 25.290035982s ago: executing program 1 (id=1586): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) 23.853672032s ago: executing program 8 (id=1594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 23.457815189s ago: executing program 1 (id=1595): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, '\x00\x00'}, @local=@item_012={0x2, 0x2, 0x1, "40ef"}, @local=@item_4={0x3, 0x2, 0x2, "611d6f7d"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "09009215"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 23.311713286s ago: executing program 3 (id=1596): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x2, 0x6001c00) 23.045720342s ago: executing program 3 (id=1598): syz_open_dev$sndmidi(&(0x7f0000003640), 0x2, 0x20042) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 22.611366575s ago: executing program 8 (id=1600): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x1) 19.230942418s ago: executing program 1 (id=1608): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_ima(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000240)={0x1, r3}) 18.943796858s ago: executing program 2 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x40, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 18.829170697s ago: executing program 8 (id=1612): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 18.502125912s ago: executing program 2 (id=1613): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffffffff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0xea, 0x0, 0x4}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000480)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x561, @remote, 0xd}, 0x1c) 16.088402077s ago: executing program 8 (id=1616): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = dup2(r1, r1) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000006c0)={0x0, {0x40000, 0xc, 0x3f000000, 0x2}}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getcwd(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppoe(0x18, 0x1, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x0, 0x0, 0x0, 0x94}, 0xfffffdfe, [0x0, 0xea, 0x0, 0x0, 0x0, 0x3, 0x9, 0xfffffffa, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x3, 0x9, 0x0, 0x2, 0x2, 0x3, 0x0, 0x20000, 0xffffffff, 0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x1ed4, 0x0, 0x2, 0x0, 0x0, 0x100004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0xfff, 0x2, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x6382, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0xb7, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4], [0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4084, 0x0, 0xfffffffd, 0xfff, 0xffffffff, 0x0, 0x0, 0xfffe, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x88, 0x0, 0x313, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x100003, 0x0, 0x1, 0xfffffffe, 0x40000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff9, 0x20]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000010d802, 0x0) dup(r6) unshare(0x6a040000) 14.803929114s ago: executing program 5 (id=1618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$sequencer2(0xffffff9c, &(0x7f0000000a40), 0x4528c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @multicast2, @loopback}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) 14.581752361s ago: executing program 9 (id=1619): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="42000000030000000000"], 0x42) close(r4) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2f, 0x0, 0x0) 13.982627304s ago: executing program 2 (id=1620): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_pidfd_open(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) 13.382941867s ago: executing program 1 (id=1621): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x52) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "a926b0dc", {0x1, 0x0, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 12.185962965s ago: executing program 9 (id=1622): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) mknod$loop(0x0, 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x54c1}, 0x8) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c06", 0x3, 0xfffffffffffffffe) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) 12.139407825s ago: executing program 5 (id=1623): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x1d9f) 11.369730266s ago: executing program 5 (id=1624): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x1) 11.326476974s ago: executing program 2 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x40, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 11.289027185s ago: executing program 9 (id=1626): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000"], 0x28}}], 0x2, 0x6001c00) 10.913342778s ago: executing program 9 (id=1627): socket(0xa, 0x3, 0x3a) set_mempolicy(0x2, 0x0, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x12}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{}, 0x8}}}, 0x7) socket(0x0, 0x4, 0x29) 10.895056154s ago: executing program 5 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000980)) 10.603863799s ago: executing program 2 (id=1629): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f00000004c0)="6e0542", &(0x7f0000000500)=""/44}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) write$evdev(r4, &(0x7f00000001c0)=[{{}, 0x2, 0x8, 0x4}], 0x18) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) read$msr(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = dup(r1) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x90, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9a}]}, 0x90}, 0x1, 0x0, 0x0, 0x4841}, 0x4) 10.514561557s ago: executing program 9 (id=1630): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x2}}, 0x18) 10.470595797s ago: executing program 5 (id=1631): keyctl$dh_compute(0x17, &(0x7f0000000180), 0x0, 0x4000, &(0x7f0000000040)={0x0}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f30600aa773888c21c000000000002"], 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 398.416201ms ago: executing program 38 (id=1598): syz_open_dev$sndmidi(&(0x7f0000003640), 0x2, 0x20042) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 304.071482ms ago: executing program 9 (id=1633): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x18, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 77.759522ms ago: executing program 39 (id=1616): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = dup2(r1, r1) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000006c0)={0x0, {0x40000, 0xc, 0x3f000000, 0x2}}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getcwd(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppoe(0x18, 0x1, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x0, 0x0, 0x0, 0x94}, 0xfffffdfe, [0x0, 0xea, 0x0, 0x0, 0x0, 0x3, 0x9, 0xfffffffa, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x3, 0x9, 0x0, 0x2, 0x2, 0x3, 0x0, 0x20000, 0xffffffff, 0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x1ed4, 0x0, 0x2, 0x0, 0x0, 0x100004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0xfff, 0x2, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x6382, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0xb7, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4], [0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4084, 0x0, 0xfffffffd, 0xfff, 0xffffffff, 0x0, 0x0, 0xfffe, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x88, 0x0, 0x313, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x100003, 0x0, 0x1, 0xfffffffe, 0x40000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff9, 0x20]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000010d802, 0x0) dup(r6) unshare(0x6a040000) 43.386533ms ago: executing program 1 (id=1635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$sequencer2(0xffffff9c, &(0x7f0000000a40), 0x4528c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @multicast2, @loopback}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) 271.316µs ago: executing program 2 (id=1636): socket(0x80000000000000a, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200626f6e6430000000", @ANYRES32=0x0, @ANYBLOB="0800030000000000080001", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="050005000000000040010280080002001b04000008000200ff030000b8000400f91af6831e027f728906eacccda9b703011f7f1ca14b761eb025618213202a868e614a57bdf93d11e1f270e7563c3d7b526612fe20d9f26126245c71b89076c560eb07766c44c45f884f8ac0a17129825266bd5e5ca68f053f8e34513023f45656d354d7882503d9cf2852774ed2880506b4b84a5e71b0e6da5c28f8d2cf40a4fe6d2725f6dd5c737ec0978d4581d06aabe40586cd5e875ef535b71e253722d8ef1cd2f103397df65e1220bbc6e9fd7d64a84916740003804400018011000200626f6e645f736c6176655f3000000000080001000008000011000200626f6e645f736c6176655f3000000000080001000900000007000200200100001800018005000200000000000400030004000300040003001400018004000300070002002e2e000004000300b80102802b0004002d4cc70e62678d9ccac7c858d9c7d1716fdc466dbd4da89390c967a62f6573273e50f4d63d661600040001006d0005002524aaf1313a55ce81c05e020fc62b8be7516b7e1928650c677857b03d2a187f030a868c0e78cb140d466ef3fbb815991f8667d4b12bf982b2fdb92b6e7a62e0110abf132838845b01e364607d08c7305f041694faa12d0b50affd062c195bb32413d8eb4039c8eaa30000000c0103803c0001800400030011000200626f6e645f736c6176655f30000000000400030005000200000000001100020073636865645f737769746368000000004800018004000300080001000600000008000100000000000a0002002d29c05d260000000700020020010000060002002100000005000200000000000800010004000000040003001000018004000300080001000800000024000180080001000800000005000200000000000400030008000100e8030000040003001400018008000100090000000800010048e0ffff3c000180080001000100000004000300080001000300000008000100db0d00000800010063b1b15c04000300080002005e2e5b00070002006f3a0000"], 0x4ac}, 0x1, 0x0, 0x0, 0x40}, 0x2000005) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) 0s ago: executing program 5 (id=1637): ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) sendto(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000080)=@phonet={0x1d, 0x0, 0x0, 0x3}, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff}) eventfd2(0x4, 0x80001) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x2, 0xa, 0x2) setuid(0xee00) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0x1000, 0x800, 0x8}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001340)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000880)='H', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000020000000000200200500f300000000000800000007000000ff00000045b3255059b0097be22e26be7cb839fbda9c698dfb46b612772060914bee335d062eb65893b463cec6c741469e23db4b3283aa5807b859907349138fa6e08c76278b4b28bbce3a9bd1584de727abe4179333d97b1b5e1084aed28bb5eae7a494", @ANYRES32=0x0], 0x30}], 0x1, 0x4000) socket(0x1000000010, 0x80002, 0x0) kernel console output (not intermixed with test programs): New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.238936][ T5946] usb 1-1: config 0 descriptor?? [ 444.261297][ T5946] hub 1-1:0.0: USB hub found [ 444.449305][ T5897] usb 6-1: device descriptor read/64, error -71 [ 444.596018][ T5897] usb usb6-port1: attempt power cycle [ 445.010986][ T5897] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 445.018799][ T5946] hub 1-1:0.0: 1 port detected [ 445.041608][ T5897] usb 6-1: device descriptor read/8, error -71 [ 445.301057][ T5897] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 445.330655][ T5897] usb 6-1: device descriptor read/8, error -71 [ 445.452436][ T5897] usb usb6-port1: unable to enumerate USB device [ 445.830298][ T5946] usb 1-1: USB disconnect, device number 37 [ 448.520177][ T9491] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:aa to non-existent VLAN 3072 [ 448.759031][ T9496] input: syz1 as /devices/virtual/input/input18 [ 450.878504][ T9514] netlink: 'syz.6.987': attribute type 10 has an invalid length. [ 451.062377][ T9514] veth0_vlan: left promiscuous mode [ 451.239004][ T9514] veth0_vlan: entered promiscuous mode [ 452.466624][ T9514] team0: Device veth0_vlan failed to register rx_handler [ 452.646817][ T29] audit: type=1326 audit(1734177334.112:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 452.919703][ T9536] syz.4.992: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 452.919852][ T9536] CPU: 1 UID: 0 PID: 9536 Comm: syz.4.992 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 452.919884][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 452.919902][ T9536] Call Trace: [ 452.919913][ T9536] [ 452.919925][ T9536] dump_stack_lvl+0x241/0x360 [ 452.919972][ T9536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.920012][ T9536] ? __pfx__printk+0x10/0x10 [ 452.920062][ T9536] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 452.920106][ T9536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.920136][ T9536] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 452.920183][ T9536] warn_alloc+0x278/0x410 [ 452.920214][ T9536] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 452.920244][ T9536] ? __pfx_warn_alloc+0x10/0x10 [ 452.920274][ T9536] ? kasan_save_track+0x3f/0x80 [ 452.920302][ T9536] ? __kasan_kmalloc+0x98/0xb0 [ 452.920336][ T9536] ? xsk_setsockopt+0x598/0x950 [ 452.920365][ T9536] ? do_sock_setsockopt+0x3b1/0x720 [ 452.920395][ T9536] ? __x64_sys_setsockopt+0x1ee/0x280 [ 452.920425][ T9536] ? do_syscall_64+0xf3/0x230 [ 452.920463][ T9536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.920519][ T9536] __vmalloc_node_range_noprof+0x126/0x1380 [ 452.920579][ T9536] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.920630][ T9536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.920657][ T9536] ? __kasan_kmalloc+0x98/0xb0 [ 452.920694][ T9536] vmalloc_user_noprof+0x74/0x80 [ 452.920721][ T9536] ? xskq_create+0xb6/0x170 [ 452.920751][ T9536] xskq_create+0xb6/0x170 [ 452.920786][ T9536] xsk_init_queue+0xa1/0x100 [ 452.920821][ T9536] xsk_setsockopt+0x598/0x950 [ 452.920854][ T9536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 452.920886][ T9536] ? __pfx_aa_sk_perm+0x10/0x10 [ 452.920932][ T9536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.920960][ T9536] ? aa_sock_opt_perm+0x79/0x120 [ 452.920992][ T9536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.921029][ T9536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 452.921060][ T9536] do_sock_setsockopt+0x3b1/0x720 [ 452.921097][ T9536] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 452.921133][ T9536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.921161][ T9536] ? __fget_files+0x395/0x410 [ 452.921199][ T9536] ? __fget_files+0x2a/0x410 [ 452.921246][ T9536] __x64_sys_setsockopt+0x1ee/0x280 [ 452.921286][ T9536] do_syscall_64+0xf3/0x230 [ 452.921330][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.921370][ T9536] RIP: 0033:0x7ff115385d19 [ 452.921394][ T9536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.921418][ T9536] RSP: 002b:00007ff116254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 452.921448][ T9536] RAX: ffffffffffffffda RBX: 00007ff115576160 RCX: 00007ff115385d19 [ 452.921471][ T9536] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 452.921490][ T9536] RBP: 00007ff115401a20 R08: 0000000000000020 R09: 0000000000000000 [ 452.921509][ T9536] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 452.921528][ T9536] R13: 0000000000000001 R14: 00007ff115576160 R15: 00007ffc5e97ebb8 [ 452.921567][ T9536] [ 452.937181][ T9536] Mem-Info: [ 452.937202][ T9536] active_anon:9827 inactive_anon:0 isolated_anon:0 [ 452.937202][ T9536] active_file:19874 inactive_file:38447 isolated_file:0 [ 452.937202][ T9536] unevictable:768 dirty:75 writeback:0 [ 452.937202][ T9536] slab_reclaimable:10229 slab_unreclaimable:102903 [ 452.937202][ T9536] mapped:37581 shmem:4287 pagetables:1245 [ 452.937202][ T9536] sec_pagetables:0 bounce:0 [ 452.937202][ T9536] kernel_misc_reclaimable:0 [ 452.937202][ T9536] free:1299664 free_pcp:296 free_cma:0 [ 452.937280][ T9536] Node 0 active_anon:39308kB inactive_anon:0kB active_file:79496kB inactive_file:153712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150324kB dirty:300kB writeback:0kB shmem:15612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12316kB pagetables:4980kB sec_pagetables:0kB all_unreclaimable? no [ 452.937358][ T9536] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 452.937430][ T9536] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.937512][ T9536] lowmem_reserve[]: 0 2465 2466 0 0 [ 452.937574][ T9536] Node 0 DMA32 free:1275968kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:39268kB inactive_anon:0kB active_file:79496kB inactive_file:152884kB unevictable:1536kB writepending:300kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:1176kB local_pcp:1020kB free_cma:0kB [ 452.937693][ T9536] lowmem_reserve[]: 0 0 0 0 0 [ 452.937755][ T9536] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 452.937832][ T9536] lowmem_reserve[]: 0 0 0 0 0 [ 452.937894][ T9536] Node 1 Normal free:3907328kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.937972][ T9536] lowmem_reserve[]: 0 0 0 0 0 [ 452.938040][ T9536] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 452.938242][ T9536] Node 0 DMA32: 175*4kB (UME) 96*8kB (UM) 225*16kB (UM) 341*32kB (UME) 251*64kB (UME) 70*128kB (UME) 34*256kB (UME) 32*512kB (UM) 32*1024kB (UME) 13*2048kB (UME) 281*4096kB (M) = 1276460kB [ 452.938527][ T9536] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 452.938701][ T9536] Node 1 Normal: 234*4kB (UME) 47*8kB (UME) 38*16kB (UME) 198*32kB (UME) 99*64kB (UME) 42*128kB (UME) 17*256kB (UME) 16*512kB (UME) 8*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3907328kB [ 452.938986][ T9536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.939012][ T9536] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 452.939043][ T9536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.939069][ T9536] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 452.939094][ T9536] 62608 total pagecache pages [ 452.939107][ T9536] 0 pages in swap cache [ 452.939119][ T9536] Free swap = 124728kB [ 452.939132][ T9536] Total swap = 124996kB [ 452.939146][ T9536] 2097051 pages RAM [ 452.939159][ T9536] 0 pages HighMem/MovableOnly [ 452.939170][ T9536] 427006 pages reserved [ 452.939183][ T9536] 0 pages cma reserved [ 453.600665][ T29] audit: type=1326 audit(1734177334.112:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.600728][ T29] audit: type=1326 audit(1734177334.172:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.600773][ T29] audit: type=1326 audit(1734177334.172:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.600825][ T29] audit: type=1326 audit(1734177334.172:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.600869][ T29] audit: type=1326 audit(1734177334.172:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.600912][ T29] audit: type=1326 audit(1734177334.172:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.600955][ T29] audit: type=1326 audit(1734177334.172:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.600998][ T29] audit: type=1326 audit(1734177334.172:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.601040][ T29] audit: type=1326 audit(1734177334.172:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0f185d19 code=0x7ffc0000 [ 453.675574][ T5919] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 453.801483][ T5919] usb 4-1: device descriptor read/64, error -71 [ 454.137875][ T5919] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 456.475406][ T9564] input: syz1 as /devices/virtual/input/input19 [ 461.848145][ T5893] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 462.022792][ T5893] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.034908][ T5893] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.062946][ T5893] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.077394][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.398659][ T9632] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 462.601964][ T5893] usb 8-1: Product: syz [ 462.757328][ T5893] usb 8-1: Manufacturer: syz [ 462.824042][ T5893] usb 8-1: SerialNumber: syz [ 463.128351][ T5893] usb 8-1: 0:2 : does not exist [ 463.150453][ T5893] usb 8-1: USB disconnect, device number 8 [ 464.280317][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.158519][ T9671] input: syz1 as /devices/virtual/input/input21 [ 466.421221][ T5946] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 467.590755][ T5946] usb 8-1: Using ep0 maxpacket: 8 [ 467.780889][ T5946] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 472.451696][ T5946] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 472.461756][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.479316][ T5946] usb 8-1: config 0 descriptor?? [ 472.487024][ T5946] usb 8-1: can't set config #0, error -71 [ 472.777409][ T5833] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 472.789385][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:2 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 472.800280][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 472.810374][ T5833] Workqueue: hci2 hci_rx_work [ 472.815111][ T5833] Call Trace: [ 472.818407][ T5833] [ 472.821364][ T5833] dump_stack_lvl+0x241/0x360 [ 472.826085][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.831322][ T5833] ? __pfx__printk+0x10/0x10 [ 472.835947][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.841634][ T5833] ? __kmalloc_cache_noprof+0x243/0x390 [ 472.847222][ T5833] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 472.852625][ T5833] sysfs_create_dir_ns+0x2ce/0x3a0 [ 472.857761][ T5833] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 472.863419][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.869089][ T5833] kobject_add_internal+0x435/0x8d0 [ 472.874333][ T5833] kobject_add+0x152/0x220 [ 472.878870][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.884521][ T5833] ? preempt_schedule_thunk+0x1a/0x30 [ 472.889915][ T5833] ? device_add+0x3e7/0xbf0 [ 472.894526][ T5833] ? __pfx_kobject_add+0x10/0x10 [ 472.899492][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.905150][ T5833] ? _raw_spin_unlock+0x3e/0x50 [ 472.910023][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.915681][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.921331][ T5833] ? get_device_parent+0x165/0x410 [ 472.926466][ T5833] device_add+0x4e5/0xbf0 [ 472.930828][ T5833] hci_conn_add_sysfs+0xe8/0x200 [ 472.935805][ T5833] le_conn_complete_evt+0xc9f/0x12e0 [ 472.941114][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.946772][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.952425][ T5833] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.958432][ T5833] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 472.964179][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.969839][ T5833] ? irqentry_exit+0x63/0x90 [ 472.974465][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.980115][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.985764][ T5833] ? skb_pull_data+0x112/0x230 [ 472.990569][ T5833] hci_le_enh_conn_complete_evt+0x185/0x420 [ 472.996492][ T5833] hci_event_packet+0xa57/0x1540 [ 473.001474][ T5833] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 473.006784][ T5833] ? __pfx_hci_event_packet+0x10/0x10 [ 473.012197][ T5833] ? mark_lock+0x9a/0x360 [ 473.016556][ T5833] ? hci_send_to_monitor+0xd8/0x7f0 [ 473.021780][ T5833] ? kcov_remote_start+0x97/0x7d0 [ 473.026841][ T5833] hci_rx_work+0x3f3/0xdb0 [ 473.031304][ T5833] ? process_scheduled_works+0x976/0x1840 [ 473.037045][ T5833] process_scheduled_works+0xa68/0x1840 [ 473.042642][ T5833] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.048651][ T5833] ? assign_work+0x364/0x3d0 [ 473.053266][ T5833] worker_thread+0x870/0xd30 [ 473.056216][ T5946] usb 8-1: USB disconnect, device number 9 [ 473.057873][ T5833] ? __kthread_parkme+0x169/0x1d0 [ 473.068690][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 473.073818][ T5833] kthread+0x2f2/0x390 [ 473.077920][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 473.083062][ T5833] ? __pfx_kthread+0x10/0x10 [ 473.087686][ T5833] ret_from_fork+0x4d/0x80 [ 473.092129][ T5833] ? __pfx_kthread+0x10/0x10 [ 473.096831][ T5833] ret_from_fork_asm+0x1a/0x30 [ 473.101620][ T5833] [ 473.111860][ T5833] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 473.126024][ T5833] Bluetooth: hci2: failed to register connection device [ 473.743414][ T9740] input: syz1 as /devices/virtual/input/input22 [ 475.360626][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 475.751052][ T5895] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 476.862467][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 477.174540][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 477.219744][ T5895] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 477.236785][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.256308][ T5895] usb 6-1: Product: syz [ 477.291693][ T5895] usb 6-1: Manufacturer: syz [ 477.298467][ T5895] usb 6-1: SerialNumber: syz [ 477.861780][ T5895] usb 6-1: config 0 descriptor?? [ 477.895766][ T5895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 480.560308][ T9806] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 480.591105][ T5895] gspca_zc3xx: reg_r err -71 [ 481.181108][ T5895] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 481.188062][ T5895] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 481.930949][ T5895] usb 6-1: USB disconnect, device number 42 [ 482.328171][ T9818] input: syz0 as /devices/virtual/input/input23 [ 484.790676][ T9843] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 490.031237][ T5919] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 490.635506][ T5919] usb 8-1: Using ep0 maxpacket: 8 [ 491.633192][ T5919] usb 8-1: device descriptor read/all, error -71 [ 494.982439][ T9920] input: syz1 as /devices/virtual/input/input24 [ 496.289286][ T9930] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 497.290847][ T5919] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 497.658736][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 497.793699][ T5919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 497.923831][ T5919] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 497.934022][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.942491][ T5919] usb 7-1: Product: syz [ 497.946845][ T5919] usb 7-1: Manufacturer: syz [ 497.952749][ T5919] usb 7-1: SerialNumber: syz [ 497.979614][ T5919] usb 7-1: config 0 descriptor?? [ 497.989719][ T5919] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 498.544139][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 500.261562][ T5919] gspca_zc3xx: reg_w_i err -110 [ 500.993008][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.955763][ T9989] input: syz1 as /devices/virtual/input/input25 [ 501.962188][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.560977][ T5919] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 502.567345][ T5919] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 502.601920][ T5919] usb 7-1: USB disconnect, device number 19 [ 507.131473][T10037] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 507.255325][ T5898] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 508.343880][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 508.349887][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 508.360063][T10050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 508.367951][T10050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 508.512649][ T5898] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 508.522307][T10050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 508.529746][T10050] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 508.538263][T10050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 508.588673][ T5898] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 508.598457][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.612177][ T5898] usb 6-1: Product: syz [ 508.616471][ T5898] usb 6-1: Manufacturer: syz [ 508.628180][ T5898] usb 6-1: SerialNumber: syz [ 509.330842][ T5898] usb 6-1: config 0 descriptor?? [ 509.375101][ T5898] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 510.053268][T10048] chnl_net:caif_netlink_parms(): no params data found [ 510.607625][ T5898] gspca_zc3xx: reg_w_i err -110 [ 510.617042][ T5837] Bluetooth: hci5: command tx timeout [ 511.241699][ T5898] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 511.720725][ T5898] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 511.760840][ T5898] usb 6-1: USB disconnect, device number 43 [ 513.321009][ T5837] Bluetooth: hci5: command tx timeout [ 514.194203][T10048] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.243718][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.260888][T10048] bridge_slave_0: entered allmulticast mode [ 514.978540][T10048] bridge_slave_0: entered promiscuous mode [ 515.030055][T10048] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.076431][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.138111][T10048] bridge_slave_1: entered allmulticast mode [ 515.213147][T10048] bridge_slave_1: entered promiscuous mode [ 515.570949][T10050] Bluetooth: hci5: command tx timeout [ 516.146097][ T7272] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.175224][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 516.183189][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 516.360756][ T5898] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 516.393724][T10113] ceph: No mds server is up or the cluster is laggy [ 516.855135][T10126] SET target dimension over the limit! [ 516.861106][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 516.898904][ T5898] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 516.916235][ T7272] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.038229][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 517.213738][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.235250][ T5898] usb 1-1: Product: syz [ 517.250857][ T5898] usb 1-1: Manufacturer: syz [ 517.350584][ T5898] usb 1-1: SerialNumber: syz [ 517.651771][ T5898] usb 1-1: config 0 descriptor?? [ 517.662222][T10050] Bluetooth: hci5: command tx timeout [ 517.665610][ T5898] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 517.679769][T10048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.905835][T10048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.012188][T10133] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 519.964578][ T5898] gspca_zc3xx: reg_w_i err -110 [ 520.920667][ T5898] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 520.927011][ T5898] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 521.034625][ T7272] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.661952][ T5898] usb 1-1: USB disconnect, device number 38 [ 522.722285][T10048] team0: Port device team_slave_0 added [ 524.318239][ T7272] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.380474][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 524.388634][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 524.399712][T10048] team0: Port device team_slave_1 added [ 525.267604][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 525.273705][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 525.349138][T10176] SET target dimension over the limit! [ 525.597329][T10181] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 526.057086][T10160] ceph: No mds server is up or the cluster is laggy [ 526.592049][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 526.598232][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 526.833875][T10048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.850555][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.951966][T10048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.599472][T10048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.606670][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.633431][T10048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.859069][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 528.544338][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 528.575056][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 528.660115][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 529.163589][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 529.190661][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 529.198356][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 529.213247][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 529.222699][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.234663][ T9] usb 5-1: Product: syz [ 529.289393][ T9] usb 5-1: Manufacturer: syz [ 529.327179][ T9] usb 5-1: SerialNumber: syz [ 529.438396][T10048] hsr_slave_0: entered promiscuous mode [ 529.447666][ T9] usb 5-1: config 0 descriptor?? [ 529.473458][T10048] hsr_slave_1: entered promiscuous mode [ 529.484114][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 529.570952][ T5837] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 529.579431][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 531.062194][ T9] gspca_zc3xx: reg_w_i err -110 [ 531.650652][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 531.657361][ T9] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 531.944056][T10050] Bluetooth: hci6: command tx timeout [ 531.951431][ T9] usb 5-1: USB disconnect, device number 36 [ 533.746361][T10243] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 534.389866][ T9458] libceph: connect (1)[c::]:6789 error -101 [ 534.396030][ T9458] libceph: mon0 (1)[c::]:6789 connect error [ 534.403582][T10050] Bluetooth: hci6: command tx timeout [ 534.465516][T10245] SET target dimension over the limit! [ 534.661447][ T873] libceph: connect (1)[c::]:6789 error -101 [ 534.667569][ T873] libceph: mon0 (1)[c::]:6789 connect error [ 534.677761][T10235] ceph: No mds server is up or the cluster is laggy [ 535.241262][ T9458] libceph: connect (1)[c::]:6789 error -101 [ 535.268102][ T9458] libceph: mon0 (1)[c::]:6789 connect error [ 536.511040][T10050] Bluetooth: hci6: command tx timeout [ 537.027755][T10262] process 'syz.5.1183' launched './file0' with NULL argv: empty string added [ 537.965835][ T7272] bridge_slave_1: left allmulticast mode [ 538.209721][ T7272] bridge_slave_1: left promiscuous mode [ 538.332210][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.514204][ T7272] bridge_slave_0: left allmulticast mode [ 538.520101][ T7272] bridge_slave_0: left promiscuous mode [ 538.542261][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.591019][T10050] Bluetooth: hci6: command tx timeout [ 538.814466][ T5893] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 539.065064][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 539.881243][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 539.901401][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 539.919669][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.940957][ T5893] usb 1-1: Product: syz [ 539.945181][ T5893] usb 1-1: Manufacturer: syz [ 539.949800][ T5893] usb 1-1: SerialNumber: syz [ 539.957283][ T5893] usb 1-1: config 0 descriptor?? [ 539.980780][ T5893] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 540.204105][ T7272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.236327][ T7272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.248748][ T7272] bond0 (unregistering): Released all slaves [ 540.334596][T10283] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 541.023045][ T5893] gspca_zc3xx: reg_w_i err -110 [ 541.171506][T10199] chnl_net:caif_netlink_parms(): no params data found [ 542.381760][ T5893] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 542.388129][ T5893] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 542.399869][ T5893] usb 1-1: USB disconnect, device number 39 [ 543.961034][T10048] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 544.109493][T10048] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 545.294326][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.508601][T10343] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 545.603218][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.629582][T10199] bridge_slave_0: entered allmulticast mode [ 545.741138][T10344] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd3": -EINTR [ 545.741606][T10338] Falling back ldisc for ttyS3. [ 545.752455][T10199] bridge_slave_0: entered promiscuous mode [ 545.864522][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.878325][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.886124][T10199] bridge_slave_1: entered allmulticast mode [ 545.912724][T10199] bridge_slave_1: entered promiscuous mode [ 546.488307][T10048] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 546.498409][T10048] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 547.025731][ T7272] hsr_slave_0: left promiscuous mode [ 547.113122][ T7272] hsr_slave_1: left promiscuous mode [ 547.140114][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.193849][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.241295][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.271019][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.617699][ T7272] veth1_macvtap: left promiscuous mode [ 547.701155][ T7272] veth0_macvtap: left promiscuous mode [ 547.707070][ T7272] veth1_vlan: left promiscuous mode [ 547.714874][ T7272] veth0_vlan: left promiscuous mode [ 551.611293][T10050] Bluetooth: hci0: command 0x0406 tx timeout [ 553.002738][ T7272] team0 (unregistering): Port device team_slave_1 removed [ 554.662793][ T7272] team0 (unregistering): Port device team_slave_0 removed [ 556.399739][T10199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.419768][T10199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.458579][T10410] veth0_to_team: entered promiscuous mode [ 556.464668][T10410] veth0_to_team: entered allmulticast mode [ 556.676875][T10048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.410188][T10199] team0: Port device team_slave_0 added [ 558.428848][T10199] team0: Port device team_slave_1 added [ 558.505156][T10048] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.634795][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.642387][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.662948][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.670288][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.798396][T10435] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 558.834582][T10199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.841823][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.868604][T10199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.885339][T10199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.892820][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.919961][T10199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.011637][T10048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 559.022670][T10048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 559.133054][ T9458] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 559.253647][T10199] hsr_slave_0: entered promiscuous mode [ 559.289041][T10199] hsr_slave_1: entered promiscuous mode [ 559.330660][T10199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.338368][T10199] Cannot create hsr debugfs directory [ 559.356224][ T9458] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.380404][ T9458] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.461781][ T9458] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.481017][ T9458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.496048][ T9458] usb 6-1: Product: syz [ 559.580264][ T9458] usb 6-1: Manufacturer: syz [ 559.623673][ T9458] usb 6-1: SerialNumber: syz [ 559.860203][ T9458] usb 6-1: 0:2 : does not exist [ 559.876969][ T9458] usb 6-1: unit 6 not found! [ 559.895892][T10048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.931004][ T9458] usb 6-1: USB disconnect, device number 44 [ 560.214717][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.272434][T10199] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 560.330243][T10199] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 560.439369][T10199] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 560.691709][T10464] (syz.0.1227,10464,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 560.693874][T10199] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 560.709627][T10464] (syz.0.1227,10464,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 561.418057][T10199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.138773][T10048] veth0_vlan: entered promiscuous mode [ 562.149628][T10048] veth1_vlan: entered promiscuous mode [ 562.236242][T10199] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.278842][T10199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.289609][T10199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.437677][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.444225][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.530370][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.537556][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.302617][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.309734][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.641882][T10199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.749587][T10048] veth0_macvtap: entered promiscuous mode [ 563.767537][T10048] veth1_macvtap: entered promiscuous mode [ 563.784808][T10048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.797006][T10048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.807365][T10048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.881761][T10048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.920936][T10048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.105720][T10048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.257786][T10048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.269051][T10048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.395109][T10048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.846987][T10048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.893129][T10048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.069566][T10048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.161002][T10048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.192660][T10048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.357036][T10048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.367169][T10048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.377769][T10048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.412758][T10048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.856944][T10048] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.989601][T10048] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.290090][T10048] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.421245][T10048] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.647403][T10199] veth0_vlan: entered promiscuous mode [ 567.658716][T10199] veth1_vlan: entered promiscuous mode [ 567.892074][ T9458] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 568.426402][T10199] veth0_macvtap: entered promiscuous mode [ 568.494113][ T9458] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 568.532394][T10199] veth1_macvtap: entered promiscuous mode [ 568.538419][ T9458] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.632440][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.650951][ T9458] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 568.662758][ T9458] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 568.681052][ T9458] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 568.706532][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.720808][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.790885][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.802560][ T9458] usb 1-1: Product: syz [ 568.806923][ T9458] usb 1-1: Manufacturer: syz [ 568.826153][ T9458] usb 1-1: SerialNumber: syz [ 568.873133][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 568.943732][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 569.379146][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.429262][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.445683][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.464561][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.506757][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.528004][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.554305][ T93] usb 1-1: USB disconnect, device number 40 [ 569.580139][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.607260][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.638640][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.659819][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.687071][T10199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.875933][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.907295][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.958306][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.989233][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.002048][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.015110][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.052876][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.492332][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.698208][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.941546][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.955392][T10199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.001371][ T5837] Bluetooth: hci1: command tx timeout [ 571.056626][ T80] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.179209][T10199] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.217393][T10199] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.283405][T10578] netlink: 'syz.5.1246': attribute type 2 has an invalid length. [ 572.422415][T10199] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.431582][T10199] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.950063][ T80] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.350122][ T5837] Bluetooth: hci1: command tx timeout [ 573.397309][T10578] Tq€: entered promiscuous mode [ 574.841378][ T9458] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 574.991090][ T9458] usb 1-1: Using ep0 maxpacket: 8 [ 574.998744][ T80] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.011316][ T9458] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 575.052028][ T9458] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 575.062556][ T9458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.101589][ T9458] usb 1-1: Product: syz [ 575.120487][ T9458] usb 1-1: Manufacturer: syz [ 575.125440][ T9458] usb 1-1: SerialNumber: syz [ 575.183396][ T9458] usb 1-1: config 0 descriptor?? [ 575.239100][T10545] chnl_net:caif_netlink_parms(): no params data found [ 575.373841][ T9458] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 575.393428][T10050] Bluetooth: hci1: command tx timeout [ 575.628041][ T80] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.131541][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.162739][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.350815][ T5895] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 576.419473][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.426837][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.434863][T10545] bridge_slave_0: entered allmulticast mode [ 576.445520][T10545] bridge_slave_0: entered promiscuous mode [ 576.455750][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.463288][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.470768][T10545] bridge_slave_1: entered allmulticast mode [ 576.478278][T10545] bridge_slave_1: entered promiscuous mode [ 576.497916][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.573940][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.585321][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.601352][ T5895] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 576.618151][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.654764][ T5895] usb 4-1: config 0 descriptor?? [ 576.657579][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.711653][T10545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.885784][T10545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.144844][ T5895] kye 0003:0458:4018.0005: unbalanced collection at end of report description [ 577.169869][ T80] bridge_slave_1: left allmulticast mode [ 577.177855][ T5895] kye 0003:0458:4018.0005: parse failed [ 577.205791][ T80] bridge_slave_1: left promiscuous mode [ 577.220696][ T5895] kye 0003:0458:4018.0005: probe with driver kye failed with error -22 [ 577.250466][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.288871][ T80] bridge_slave_0: left allmulticast mode [ 577.323062][ T80] bridge_slave_0: left promiscuous mode [ 577.354248][ T5895] usb 4-1: USB disconnect, device number 42 [ 577.387990][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.525897][T10050] Bluetooth: hci1: command tx timeout [ 578.367161][ T9458] gspca_zc3xx: i2c_r status error af [ 578.611923][ T9458] gspca_zc3xx: reg_r err -71 [ 578.635149][T10589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.657172][ T9458] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 578.706322][ T9458] usb 1-1: USB disconnect, device number 41 [ 579.989392][T10050] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 580.353621][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.419043][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.162635][ T80] bond0 (unregistering): Released all slaves [ 581.183720][T10545] team0: Port device team_slave_0 added [ 581.193340][T10545] team0: Port device team_slave_1 added [ 581.684125][ T80] hsr_slave_0: left promiscuous mode [ 581.744866][ T80] hsr_slave_1: left promiscuous mode [ 581.782905][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.990251][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.018513][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.028060][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.085241][ T80] veth1_macvtap: left promiscuous mode [ 582.114183][ T80] veth0_macvtap: left promiscuous mode [ 582.143823][ T80] veth1_vlan: left promiscuous mode [ 583.043562][ T80] veth0_vlan: left promiscuous mode [ 584.032081][T10050] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 584.041394][T10050] Bluetooth: hci3: Injecting HCI hardware error event [ 584.051904][T10050] Bluetooth: hci3: hardware error 0x00 [ 586.077806][ T80] team0 (unregistering): Port device team_slave_1 removed [ 586.112994][T10050] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 586.282393][ T80] team0 (unregistering): Port device team_slave_0 removed [ 586.824035][ T5893] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 586.990760][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 586.997250][ T5893] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 587.008548][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 587.020578][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.029159][ T5893] usb 4-1: Product: syz [ 587.034556][ T5893] usb 4-1: Manufacturer: syz [ 587.045026][ T5893] usb 4-1: SerialNumber: syz [ 587.059780][ T5893] usb 4-1: config 0 descriptor?? [ 587.078763][ T5893] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 588.183441][T10545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.241291][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.268430][T10545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.421377][T10545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.428358][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.502963][T10545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.100768][ T5893] gspca_zc3xx: reg_w_i err -110 [ 589.792928][T10545] hsr_slave_0: entered promiscuous mode [ 589.810960][T10545] hsr_slave_1: entered promiscuous mode [ 590.624905][ T5893] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 590.631285][ T5893] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 591.176590][T10677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.203179][ T5842] usb 4-1: USB disconnect, device number 43 [ 592.445615][T10719] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 592.688266][T10719] veth0_vlan: left promiscuous mode [ 592.742183][T10719] veth0_vlan: entered promiscuous mode [ 592.798641][T10719] team0: Device veth0_vlan failed to register rx_handler [ 594.491442][T10545] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 594.921989][T10545] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 595.669947][T10545] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 595.701201][T10545] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 596.393082][T10545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.857842][T10545] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.024675][T10545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.035281][T10545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.300358][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.307501][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.613655][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.620875][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.707149][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 600.251587][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 600.258254][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 600.275637][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 600.303353][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.346744][T10545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.368333][ T9] usb 10-1: Product: syz [ 600.378611][ T9] usb 10-1: Manufacturer: syz [ 600.409533][ T9] usb 10-1: SerialNumber: syz [ 600.461677][ T9] usb 10-1: config 0 descriptor?? [ 600.515173][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 601.913989][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.924797][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.935452][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 602.000164][T10545] veth0_vlan: entered promiscuous mode [ 602.011103][T10545] veth1_vlan: entered promiscuous mode [ 602.033148][T10545] veth0_macvtap: entered promiscuous mode [ 602.042842][T10545] veth1_macvtap: entered promiscuous mode [ 602.064955][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.075929][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.086236][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.111744][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.124813][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.124873][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 602.135322][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.135360][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.163382][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.176909][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.190929][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.192414][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 602.203452][T10545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.209239][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 602.218537][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.239450][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.249641][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.260867][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.280882][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.295465][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.310926][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.325644][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.336125][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.346814][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.361670][T10545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.380486][T10545] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.396729][T10545] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.407838][T10545] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.416987][T10545] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.470891][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.478780][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.523072][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.534710][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.854771][ T9] gspca_zc3xx: reg_w_i err -71 [ 603.865361][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.534525][ T5833] Bluetooth: hci5: command tx timeout [ 604.560657][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 604.567111][ T9] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 604.587372][ T9] usb 10-1: USB disconnect, device number 2 [ 604.601409][T10824] chnl_net:caif_netlink_parms(): no params data found [ 606.805780][ T5833] Bluetooth: hci5: command tx timeout [ 607.613907][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.647808][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.691014][T10824] bridge_slave_0: entered allmulticast mode [ 607.725195][T10824] bridge_slave_0: entered promiscuous mode [ 607.871990][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.879456][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.961259][T10824] bridge_slave_1: entered allmulticast mode [ 607.968130][T10824] bridge_slave_1: entered promiscuous mode [ 608.499130][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.508343][ T5893] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 608.580206][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.633424][ T5969] Bluetooth: hci3: Frame reassembly failed (-84) [ 608.670925][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 608.688791][ T5893] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 608.730979][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 608.741796][ T5969] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 608.760175][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.774501][ T5893] usb 4-1: Product: syz [ 608.778688][ T5893] usb 4-1: Manufacturer: syz [ 608.813148][ T5893] usb 4-1: SerialNumber: syz [ 608.851764][ T5893] usb 4-1: config 0 descriptor?? [ 608.903907][ T5893] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 608.913721][T10050] Bluetooth: hci5: command tx timeout [ 609.036016][ T9710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.172131][T10824] team0: Port device team_slave_0 added [ 609.211995][T10824] team0: Port device team_slave_1 added [ 609.365116][ T9710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.276106][ T5893] gspca_zc3xx: reg_w_i err -110 [ 610.347731][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.361516][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.538510][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.751216][ T5833] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 611.161125][ T5893] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 611.359767][ T5893] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 611.379677][T10050] Bluetooth: hci5: command tx timeout [ 611.789623][ T9710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.291672][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.298951][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.316772][T10885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.386792][ T5893] usb 4-1: USB disconnect, device number 44 [ 612.470708][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.276539][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 613.288428][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 613.303114][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 613.314276][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 613.322683][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 613.331743][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 613.445788][ T9710] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.865846][T10824] hsr_slave_0: entered promiscuous mode [ 613.889535][T10824] hsr_slave_1: entered promiscuous mode [ 613.911116][T10824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.939425][T10824] Cannot create hsr debugfs directory [ 614.635383][ T9710] bridge_slave_1: left allmulticast mode [ 614.833256][ T9710] bridge_slave_1: left promiscuous mode [ 614.963086][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.281803][ T9710] bridge_slave_0: left allmulticast mode [ 615.310677][ T9710] bridge_slave_0: left promiscuous mode [ 615.316428][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.431093][T10050] Bluetooth: hci3: command tx timeout [ 615.461096][ T9458] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 615.635630][ T9458] usb 10-1: Using ep0 maxpacket: 8 [ 615.652082][ T9458] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 615.762088][ T9458] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 615.779514][ T9458] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.829129][ T9458] usb 10-1: Product: syz [ 615.872679][ T9458] usb 10-1: Manufacturer: syz [ 615.911016][ T9458] usb 10-1: SerialNumber: syz [ 616.251720][ T9458] usb 10-1: config 0 descriptor?? [ 616.268848][ T9458] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 617.013964][ T9710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.029546][ T9710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.054335][ T9710] bond0 (unregistering): Released all slaves [ 617.471432][T10050] Bluetooth: hci3: command tx timeout [ 619.301716][ T9458] gspca_zc3xx: i2c_r status error af [ 619.453084][ T9458] gspca_zc3xx: reg_r err -32 [ 619.551039][T10050] Bluetooth: hci3: command tx timeout [ 619.967204][T10951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.064585][ T9458] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 620.775763][ T9458] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 621.614517][ T9458] usb 10-1: USB disconnect, device number 3 [ 621.683091][T10050] Bluetooth: hci3: command tx timeout [ 622.578265][ T5972] Bluetooth: hci0: Frame reassembly failed (-84) [ 622.587339][ T5972] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 622.647147][T10924] chnl_net:caif_netlink_parms(): no params data found [ 623.068567][ T9710] hsr_slave_0: left promiscuous mode [ 623.402314][ T9710] hsr_slave_1: left promiscuous mode [ 623.435192][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.447725][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.920145][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.926975][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.590660][ T5833] Bluetooth: hci0: command 0x1003 tx timeout [ 624.650625][T10050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 624.710725][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.718346][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.847808][ T9710] veth1_macvtap: left promiscuous mode [ 624.902134][ T9710] veth0_macvtap: left promiscuous mode [ 624.907785][ T9710] veth1_vlan: left promiscuous mode [ 625.376519][T11062] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 626.144846][ T5894] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 626.332054][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 626.352088][ T5894] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 626.381839][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 626.403783][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.412991][ T5894] usb 6-1: Product: syz [ 626.417323][ T5894] usb 6-1: Manufacturer: syz [ 626.423098][ T5894] usb 6-1: SerialNumber: syz [ 626.531585][ T5894] usb 6-1: config 0 descriptor?? [ 626.614610][ T5894] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 627.173914][ T9710] team0 (unregistering): Port device team_slave_1 removed [ 627.220827][ T9710] team0 (unregistering): Port device team_slave_0 removed [ 628.045795][T10924] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.078670][T10924] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.137314][T10924] bridge_slave_0: entered allmulticast mode [ 628.171520][T10924] bridge_slave_0: entered promiscuous mode [ 628.263847][T10924] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.291447][T10924] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.381903][T10924] bridge_slave_1: entered allmulticast mode [ 628.429895][T10924] bridge_slave_1: entered promiscuous mode [ 628.929144][T10924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.008618][T10824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 629.502717][T10924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.664773][T10824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 630.003591][ T5894] gspca_zc3xx: i2c_r status error af [ 630.143872][T10824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 630.160241][ T5894] gspca_zc3xx: reg_r err -71 [ 630.168650][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.378893][T10924] team0: Port device team_slave_0 added [ 630.426740][T10824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 630.500207][T10924] team0: Port device team_slave_1 added [ 630.783284][ T5894] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 630.890058][ T5894] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 631.199746][T10924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.231938][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.410378][ T5894] usb 6-1: USB disconnect, device number 45 [ 631.420771][T10924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.432681][T11122] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 631.461789][T10924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.469499][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.549081][T10924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.564985][T10924] hsr_slave_0: entered promiscuous mode [ 632.625670][T10924] hsr_slave_1: entered promiscuous mode [ 632.647167][T10924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.663645][T11137] input: syz1 as /devices/virtual/input/input29 [ 632.705339][T10924] Cannot create hsr debugfs directory [ 633.209008][ T9710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.417671][T11146] input: syz1 as /devices/virtual/input/input30 [ 635.602035][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.646784][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.875428][ T9710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.949041][T11182] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 638.421173][ T9710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.449616][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.456996][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.536277][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.543574][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.004575][ T9710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.755954][ T9710] bridge_slave_1: left allmulticast mode [ 641.810305][ T9710] bridge_slave_1: left promiscuous mode [ 641.841672][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.941081][ T9710] bridge_slave_0: left allmulticast mode [ 641.946882][ T9710] bridge_slave_0: left promiscuous mode [ 641.994763][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.584770][T11248] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 645.291505][ T9710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.337517][ T9710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.368015][ T9710] bond0 (unregistering): Released all slaves [ 645.896820][T11262] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 646.824890][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.615871][ T9710] hsr_slave_0: left promiscuous mode [ 648.050937][ T9710] hsr_slave_1: left promiscuous mode [ 648.057241][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.089829][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.190367][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.294858][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.831654][ T9710] veth1_macvtap: left promiscuous mode [ 648.837365][ T9710] veth0_macvtap: left promiscuous mode [ 648.880718][ T9710] veth1_vlan: left promiscuous mode [ 648.886511][ T9710] veth0_vlan: left promiscuous mode [ 650.400820][ T93] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 650.556577][ T93] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.576109][ T93] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 650.585609][ T93] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.612838][ T93] usb 6-1: config 0 descriptor?? [ 650.635723][ T93] pwc: Askey VC010 type 2 USB webcam detected. [ 651.051799][ T93] pwc: recv_control_msg error -32 req 02 val 2b00 [ 651.067632][ T93] pwc: recv_control_msg error -32 req 02 val 2700 [ 651.091245][ T93] pwc: recv_control_msg error -32 req 02 val 2c00 [ 651.110094][ T93] pwc: recv_control_msg error -32 req 04 val 1000 [ 651.137614][ T93] pwc: recv_control_msg error -32 req 04 val 1300 [ 651.165080][ T93] pwc: recv_control_msg error -32 req 04 val 1400 [ 651.258138][ T93] pwc: recv_control_msg error -32 req 02 val 2000 [ 651.329760][ T93] pwc: recv_control_msg error -32 req 02 val 2100 [ 651.522745][ T93] pwc: recv_control_msg error -32 req 04 val 1500 [ 651.850839][ T93] pwc: recv_control_msg error -71 req 02 val 2400 [ 651.873804][ T93] pwc: recv_control_msg error -71 req 02 val 2600 [ 651.895023][ T93] pwc: recv_control_msg error -71 req 02 val 2900 [ 651.911365][ T93] pwc: recv_control_msg error -71 req 02 val 2800 [ 651.918317][ T93] pwc: recv_control_msg error -71 req 04 val 1100 [ 651.938364][ T93] pwc: recv_control_msg error -71 req 04 val 1200 [ 651.947797][ T93] pwc: Registered as video103. [ 651.954341][ T93] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31 [ 651.966711][ T9710] team0 (unregistering): Port device team_slave_1 removed [ 652.192142][ T93] usb 6-1: USB disconnect, device number 46 [ 652.389008][ T9710] team0 (unregistering): Port device team_slave_0 removed [ 654.696962][T10824] veth0_vlan: entered promiscuous mode [ 654.762216][T10824] veth1_vlan: entered promiscuous mode [ 654.831086][T10824] veth0_macvtap: entered promiscuous mode [ 654.840082][T10824] veth1_macvtap: entered promiscuous mode [ 654.855255][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.865795][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.875848][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.886346][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.896310][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.906942][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.917042][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.927569][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.939157][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.019849][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.039959][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.055239][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.066233][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.076179][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.086999][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.120688][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.150692][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.285413][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.448953][T11350] input: syz1 as /devices/virtual/input/input32 [ 656.469685][T10924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 656.670823][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 656.762399][T10924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 656.949611][T10824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.964465][T10824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.980335][T10824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.026574][T10824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.279999][T10924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 657.349895][T11365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 657.975910][T10924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 658.273592][T10050] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 658.283659][T10050] CPU: 0 UID: 0 PID: 10050 Comm: kworker/u9:0 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 658.294733][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 658.304829][T10050] Workqueue: hci6 hci_rx_work [ 658.309572][T10050] Call Trace: [ 658.312871][T10050] [ 658.315823][T10050] dump_stack_lvl+0x241/0x360 [ 658.320559][T10050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.325896][T10050] ? __pfx__printk+0x10/0x10 [ 658.330533][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.336215][T10050] ? __kmalloc_cache_noprof+0x243/0x390 [ 658.341812][T10050] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 658.347139][T10050] sysfs_create_dir_ns+0x2ce/0x3a0 [ 658.352295][T10050] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 658.357961][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.363639][T10050] kobject_add_internal+0x435/0x8d0 [ 658.368889][T10050] kobject_add+0x152/0x220 [ 658.373352][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.379009][T10050] ? do_raw_spin_unlock+0x13c/0x8b0 [ 658.384238][T10050] ? device_add+0x3e7/0xbf0 [ 658.388769][T10050] ? __pfx_kobject_add+0x10/0x10 [ 658.393744][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.399427][T10050] ? _raw_spin_unlock+0x28/0x50 [ 658.404309][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.409957][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.415601][T10050] ? get_device_parent+0x165/0x410 [ 658.420733][T10050] device_add+0x4e5/0xbf0 [ 658.425084][T10050] hci_conn_add_sysfs+0xe8/0x200 [ 658.430045][T10050] le_conn_complete_evt+0xc9f/0x12e0 [ 658.435357][T10050] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 658.441120][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.446794][T10050] ? __mutex_unlock_slowpath+0x21e/0x790 [ 658.452471][T10050] ? __pfx___mutex_lock+0x10/0x10 [ 658.457509][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.463143][T10050] ? skb_pull_data+0x112/0x230 [ 658.467919][T10050] hci_le_enh_conn_complete_evt+0x185/0x420 [ 658.473827][T10050] hci_event_packet+0xa57/0x1540 [ 658.478784][T10050] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 658.484252][T10050] ? __pfx_hci_event_packet+0x10/0x10 [ 658.489640][T10050] ? do_raw_spin_unlock+0x13c/0x8b0 [ 658.494855][T10050] ? hci_send_to_monitor+0xd8/0x7f0 [ 658.500067][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.505712][T10050] ? kcov_remote_start+0x97/0x7d0 [ 658.510753][T10050] hci_rx_work+0x3f3/0xdb0 [ 658.515204][T10050] ? process_scheduled_works+0x976/0x1840 [ 658.520937][T10050] process_scheduled_works+0xa68/0x1840 [ 658.526514][T10050] ? __pfx_process_scheduled_works+0x10/0x10 [ 658.532517][T10050] ? assign_work+0x364/0x3d0 [ 658.537125][T10050] worker_thread+0x870/0xd30 [ 658.541734][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.547373][T10050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.553021][T10050] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 658.558938][T10050] ? __kthread_parkme+0x169/0x1d0 [ 658.563980][T10050] ? __pfx_worker_thread+0x10/0x10 [ 658.569108][T10050] kthread+0x2f2/0x390 [ 658.573279][T10050] ? __pfx_worker_thread+0x10/0x10 [ 658.578398][T10050] ? __pfx_kthread+0x10/0x10 [ 658.583002][T10050] ret_from_fork+0x4d/0x80 [ 658.587422][T10050] ? __pfx_kthread+0x10/0x10 [ 658.592021][T10050] ret_from_fork_asm+0x1a/0x30 [ 658.596796][T10050] [ 658.607173][T10050] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 658.623029][T10050] Bluetooth: hci6: failed to register connection device [ 660.113345][T10924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.776521][T10050] Bluetooth: hci6: command 0x0406 tx timeout [ 660.831361][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.839320][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.887937][T10924] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.274998][T10475] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.282346][T10475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.410660][T10475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.437912][T10475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.525131][T10924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 661.630123][T10924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.838846][T11405] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 662.443226][T10475] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.450399][T10475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.046493][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 663.080119][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 663.094620][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 663.112873][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 663.124843][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 663.133181][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 663.367358][T10924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.450876][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 663.606078][ T5970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.820306][T10924] veth0_vlan: entered promiscuous mode [ 663.820906][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 663.883579][T10924] veth1_vlan: entered promiscuous mode [ 663.920990][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.932009][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.950917][ T5893] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 663.960642][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.971365][ T5893] usb 9-1: config 0 descriptor?? [ 663.980947][ T5893] hub 9-1:0.0: USB hub found [ 664.105935][ T5970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.198095][ T5893] hub 9-1:0.0: 1 port detected [ 664.880098][ T5893] hub 9-1:0.0: activate --> -90 [ 664.897003][ T5970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.002616][T10924] veth0_macvtap: entered promiscuous mode [ 665.270670][T10050] Bluetooth: hci0: command tx timeout [ 665.295184][ T5893] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 665.311522][ T5893] hub_port_connect: 8 callbacks suppressed [ 665.311547][ T5893] usb 9-1-port1: connect-debounce failed [ 665.343331][ T5893] usb 9-1-port1: cannot disable (err = -71) [ 665.352414][ T9] usb 9-1: USB disconnect, device number 2 [ 665.359011][ T5893] usb 9-1: Failed to suspend device, error -19 [ 665.477700][T10924] veth1_macvtap: entered promiscuous mode [ 665.898637][ T5970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.053414][T11417] chnl_net:caif_netlink_parms(): no params data found [ 666.437104][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.448024][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.458248][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.468998][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.480345][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.491353][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.501735][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.512779][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.523267][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.537762][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.758010][T10924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.784745][T11479] netlink: 'syz.8.1434': attribute type 10 has an invalid length. [ 666.828378][T11481] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 667.514743][T10050] Bluetooth: hci0: command tx timeout [ 667.684528][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.695740][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.705784][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.260796][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.282881][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.306138][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.316387][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.327159][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.337306][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.394562][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.409368][T10924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.480033][T11479] veth0_vlan: left promiscuous mode [ 668.537035][T11479] veth0_vlan: entered promiscuous mode [ 668.567794][T11479] team0: Device veth0_vlan failed to register rx_handler [ 668.860950][T11491] input: syz1 as /devices/virtual/input/input33 [ 669.234658][T10924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.243862][T10924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.252878][T10924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.261922][T10924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.486814][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.877175][T10050] Bluetooth: hci0: command tx timeout [ 670.270381][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.277879][T11417] bridge_slave_0: entered allmulticast mode [ 670.285950][T11417] bridge_slave_0: entered promiscuous mode [ 670.298677][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.305881][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.313276][T11417] bridge_slave_1: entered allmulticast mode [ 670.320422][T11417] bridge_slave_1: entered promiscuous mode [ 670.576912][T11417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.216340][T11417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.952373][T10050] Bluetooth: hci0: command tx timeout [ 672.407398][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.419285][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.428014][ T5970] bridge_slave_1: left allmulticast mode [ 672.511223][ T5970] bridge_slave_1: left promiscuous mode [ 672.517281][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.572266][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.580453][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 672.589280][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 672.596748][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 672.811693][ T5970] bridge_slave_0: left allmulticast mode [ 672.817409][ T5970] bridge_slave_0: left promiscuous mode [ 672.860890][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.210252][T11545] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 674.704975][ T5833] Bluetooth: hci5: command tx timeout [ 674.726514][ T5970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.754146][ T5970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.847182][ T5970] bond0 (unregistering): Released all slaves [ 675.796251][T11417] team0: Port device team_slave_0 added [ 675.843514][T11417] team0: Port device team_slave_1 added [ 676.367572][T11417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.385304][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.426809][T11417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.495621][T11417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.521027][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.614159][T11417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.760596][T11568] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 676.771323][ T5833] Bluetooth: hci5: command tx timeout [ 676.786796][T11567] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1459'. [ 677.980323][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 677.986419][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 678.410773][T11567] ceph: No mds server is up or the cluster is laggy [ 678.623102][T11546] libceph: connect (1)[c::]:6789 error -101 [ 678.630722][T11546] libceph: mon0 (1)[c::]:6789 connect error [ 678.800410][ T5970] hsr_slave_0: left promiscuous mode [ 678.832750][ T5833] Bluetooth: hci5: command tx timeout [ 678.839550][ T5970] hsr_slave_1: left promiscuous mode [ 678.850028][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.863938][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.873987][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.882239][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.902536][ T5970] veth1_macvtap: left promiscuous mode [ 678.908083][ T5970] veth0_macvtap: left promiscuous mode [ 678.915303][ T5970] veth1_vlan: left promiscuous mode [ 678.921049][ T5970] veth0_vlan: left promiscuous mode [ 680.920975][ T5833] Bluetooth: hci5: command tx timeout [ 681.584922][ T5970] team0 (unregistering): Port device team_slave_1 removed [ 681.624345][ T5970] team0 (unregistering): Port device team_slave_0 removed [ 682.102325][T11417] hsr_slave_0: entered promiscuous mode [ 682.108800][T11417] hsr_slave_1: entered promiscuous mode [ 682.115761][T11417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.132112][T11417] Cannot create hsr debugfs directory [ 682.137972][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1465'. [ 682.480593][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1467'. [ 683.571164][T11546] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 683.733150][T11546] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.759087][T11546] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.781843][T11526] chnl_net:caif_netlink_parms(): no params data found [ 683.798901][T11546] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 683.818958][T11546] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.868638][T11546] usb 9-1: config 0 descriptor?? [ 684.581401][T11624] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 684.660615][ T5970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.126853][T11546] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 685.143927][T11546] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 685.153089][T11546] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 685.177581][T11546] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 685.241515][T11546] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 685.243417][ T5970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.313578][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.320130][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.354280][T11546] usb 9-1: USB disconnect, device number 3 [ 685.389016][T11526] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.409188][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.457879][T11526] bridge_slave_0: entered allmulticast mode [ 685.477138][T11526] bridge_slave_0: entered promiscuous mode [ 685.542562][ T5970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.773307][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.827463][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.858518][T11526] bridge_slave_1: entered allmulticast mode [ 685.889639][T11526] bridge_slave_1: entered promiscuous mode [ 686.051485][ T9710] Bluetooth: hci3: Frame reassembly failed (-84) [ 686.071941][ T9710] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 686.083647][ T5970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.969814][T11636] veth0_to_team: entered promiscuous mode [ 686.975798][T11636] veth0_to_team: entered allmulticast mode [ 687.088151][T11526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.333773][T11417] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 687.702466][T11417] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 687.775687][T11417] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 687.829389][T11526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.937055][T11417] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 688.037474][T11526] team0: Port device team_slave_0 added [ 688.105238][T11526] team0: Port device team_slave_1 added [ 688.110763][T10050] Bluetooth: hci3: command 0x1003 tx timeout [ 688.118180][ T5833] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 688.923319][T11526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.930879][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.007745][T11526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.239213][T11417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.430852][ T5970] bridge_slave_1: left allmulticast mode [ 689.436572][ T5970] bridge_slave_1: left promiscuous mode [ 689.452073][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.849916][T11658] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1480'. [ 690.341601][ T5970] bridge_slave_0: left allmulticast mode [ 690.347619][ T5970] bridge_slave_0: left promiscuous mode [ 690.427964][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.385328][T11663] input: syz1 as /devices/virtual/input/input34 [ 691.871235][ T5970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.891479][ T5970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.903694][ T5970] bond0 (unregistering): Released all slaves [ 691.923725][T11526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.930888][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.958355][T11526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.992439][T11417] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.000788][T11657] bridge0: port 3(erspan0) entered blocking state [ 692.007304][T11657] bridge0: port 3(erspan0) entered disabled state [ 692.014100][T11657] erspan0: entered allmulticast mode [ 692.020861][T11657] erspan0: entered promiscuous mode [ 692.027274][T11657] bridge0: port 3(erspan0) entered blocking state [ 692.034966][T11657] bridge0: port 3(erspan0) entered forwarding state [ 692.512483][T10050] Bluetooth: hci1: command 0x0406 tx timeout [ 692.533669][ T5970] hsr_slave_0: left promiscuous mode [ 692.551129][ T5970] hsr_slave_1: left promiscuous mode [ 692.558318][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.568870][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.362212][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.369681][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.524012][T11677] Bluetooth: MGMT ver 1.23 [ 693.833101][ T5970] veth1_macvtap: left promiscuous mode [ 693.839821][ T5970] veth0_macvtap: left promiscuous mode [ 693.876576][ T5970] veth1_vlan: left promiscuous mode [ 693.893863][ T5970] veth0_vlan: left promiscuous mode [ 696.120624][ T29] audit: type=1326 audit(1734177577.542:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11697 comm="syz.9.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d5985d19 code=0x7fc00000 [ 696.151163][ T29] audit: type=1326 audit(1734177577.552:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11697 comm="syz.9.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f91d5985d19 code=0x7fc00000 [ 696.521446][ T5970] team0 (unregistering): Port device team_slave_1 removed [ 696.561304][ T5970] team0 (unregistering): Port device team_slave_0 removed [ 696.626518][T11701] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 696.845456][ T29] audit: type=1326 audit(1734177578.302:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11697 comm="syz.9.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d5985d19 code=0x7fc00000 [ 697.372160][ T7272] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 697.430802][ T7272] Bluetooth: hci3: Frame reassembly failed (-84) [ 697.512784][T11526] hsr_slave_0: entered promiscuous mode [ 697.528658][T11526] hsr_slave_1: entered promiscuous mode [ 697.564920][T11526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.585974][T11526] Cannot create hsr debugfs directory [ 697.699759][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.706996][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.038107][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.045351][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.592969][T11718] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 699.553117][T10050] Bluetooth: hci3: command 0x1003 tx timeout [ 700.310059][ T5833] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 701.207000][ T5833] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 701.365819][T11417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.561131][T11417] veth0_vlan: entered promiscuous mode [ 701.571835][T11417] veth1_vlan: entered promiscuous mode [ 701.597176][T11417] veth0_macvtap: entered promiscuous mode [ 701.606431][T11417] veth1_macvtap: entered promiscuous mode [ 701.625340][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.636451][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.646609][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.657349][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.667834][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.679390][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.689339][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.699949][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.711877][T11417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.723527][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.734350][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.744338][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.755200][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.765399][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.775997][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.900676][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.920724][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.960463][T11417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.026120][T11417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.067012][T11417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.080681][ T5946] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 702.310979][ T5946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.659719][ T5946] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 702.685703][T11417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.756177][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.820848][T11417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.090795][ T5946] usb 6-1: config 0 descriptor?? [ 703.145693][ T5946] pwc: Askey VC010 type 2 USB webcam detected. [ 703.377015][ T29] audit: type=1326 audit(1734177584.842:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11744 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c6785d19 code=0x7fc00000 [ 703.424018][ T9710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.432244][ T29] audit: type=1326 audit(1734177584.872:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11744 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff2c6785d19 code=0x7fc00000 [ 703.456086][ T9710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.488994][ T29] audit: type=1326 audit(1734177584.882:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11744 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c6785d19 code=0x7fc00000 [ 703.571297][ T5946] pwc: recv_control_msg error -32 req 02 val 2b00 [ 703.598832][ T5946] pwc: recv_control_msg error -32 req 02 val 2700 [ 703.641175][ T5946] pwc: recv_control_msg error -32 req 02 val 2c00 [ 703.708914][T11526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 703.718300][ T5946] pwc: recv_control_msg error -32 req 04 val 1000 [ 703.727053][ T5946] pwc: recv_control_msg error -32 req 04 val 1300 [ 703.735190][ T5946] pwc: recv_control_msg error -32 req 04 val 1400 [ 704.430848][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.438722][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.464899][T11526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 704.704798][ T5946] pwc: recv_control_msg error -32 req 02 val 2000 [ 704.740691][ T5946] pwc: recv_control_msg error -32 req 02 val 2100 [ 704.752935][T11526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 705.431283][ T5833] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 705.439900][ T5833] Bluetooth: hci1: Injecting HCI hardware error event [ 705.448309][ T5833] Bluetooth: hci1: hardware error 0x00 [ 705.993298][T11526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 706.441665][ T5946] pwc: recv_control_msg error -71 req 02 val 2500 [ 706.448486][ T5946] pwc: recv_control_msg error -71 req 02 val 2400 [ 706.455494][ T5946] pwc: recv_control_msg error -71 req 02 val 2600 [ 706.976667][T11770] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 707.454237][ T5946] pwc: recv_control_msg error -71 req 02 val 2900 [ 707.462055][ T5946] pwc: recv_control_msg error -71 req 02 val 2800 [ 707.469045][ T5946] pwc: recv_control_msg error -71 req 04 val 1100 [ 707.476038][ T5946] pwc: recv_control_msg error -71 req 04 val 1200 [ 707.936295][ T5946] pwc: Registered as video103. [ 707.952056][ T5946] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 707.991199][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 708.271322][ T5946] usb 6-1: USB disconnect, device number 47 [ 709.190429][T11526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.335944][T11526] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.682047][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.689210][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.793833][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.801012][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.306370][T11526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 710.592779][ T29] audit: type=1326 audit(1734177591.732:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.195754][ T29] audit: type=1326 audit(1734177591.732:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.397092][ T29] audit: type=1326 audit(1734177592.412:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.475738][ T29] audit: type=1326 audit(1734177592.412:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.501838][ T11] Bluetooth: hci7: Frame reassembly failed (-84) [ 711.529750][ T29] audit: type=1326 audit(1734177592.412:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.574913][ T29] audit: type=1326 audit(1734177592.412:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.597651][ T29] audit: type=1326 audit(1734177592.412:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.620243][ T29] audit: type=1326 audit(1734177592.422:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.642886][ T29] audit: type=1326 audit(1734177592.422:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.666285][ T29] audit: type=1326 audit(1734177592.422:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 711.771469][ T5833] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 713.551651][T11822] Bluetooth: hci7: command 0x1003 tx timeout [ 713.559678][T10050] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 713.720699][ T5894] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 713.733136][T11831] veth0_to_team: entered promiscuous mode [ 713.738917][T11831] veth0_to_team: entered allmulticast mode [ 714.192140][ T5894] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.266413][T11526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.337516][T11847] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 714.954348][ T5894] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 714.963567][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.062755][ T5894] usb 9-1: config 0 descriptor?? [ 715.263371][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 715.331277][T11526] veth0_vlan: entered promiscuous mode [ 715.353867][T11526] veth1_vlan: entered promiscuous mode [ 715.390324][T11526] veth0_macvtap: entered promiscuous mode [ 715.401988][T11526] veth1_macvtap: entered promiscuous mode [ 715.419766][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.430279][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.440151][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.451153][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.461476][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.472167][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.482232][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.493081][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.503265][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.514079][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.528466][T11526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.538591][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.549366][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.560018][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.570971][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.580887][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.591390][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.601320][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.611860][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.621957][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.632672][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.643715][T11526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.029997][T11526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.042278][T11526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.060597][T11526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.190970][T11859] overlayfs: missing 'workdir' [ 716.935223][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 716.943142][T11526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.943292][ T5894] pwc: recv_control_msg error -32 req 02 val 2700 [ 716.971061][ T5894] pwc: recv_control_msg error -32 req 02 val 2c00 [ 716.997925][ T5894] pwc: recv_control_msg error -32 req 04 val 1000 [ 717.039511][ T5894] pwc: recv_control_msg error -32 req 04 val 1300 [ 717.063427][ T5894] pwc: recv_control_msg error -32 req 04 val 1400 [ 717.090348][ T5894] pwc: recv_control_msg error -32 req 02 val 2000 [ 717.121290][ T5894] pwc: recv_control_msg error -32 req 02 val 2100 [ 717.362636][ T5894] pwc: recv_control_msg error -71 req 02 val 2500 [ 717.390967][ T5894] pwc: recv_control_msg error -71 req 02 val 2400 [ 717.440733][ T5894] pwc: recv_control_msg error -71 req 02 val 2600 [ 717.443458][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 717.443478][ T29] audit: type=1326 audit(1734177598.902:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.3.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c6785d19 code=0x7fc00000 [ 717.461060][ T5894] pwc: recv_control_msg error -71 req 02 val 2900 [ 717.501065][ T5894] pwc: recv_control_msg error -71 req 02 val 2800 [ 717.521181][ T5894] pwc: recv_control_msg error -71 req 04 val 1100 [ 717.536548][ T7723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.551283][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 717.610111][ T5894] pwc: Registered as video103. [ 717.617023][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 717.619762][ T7723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.635377][ T29] audit: type=1326 audit(1734177598.902:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.3.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff2c6785d19 code=0x7fc00000 [ 717.795197][ T5894] usb 9-1: USB disconnect, device number 4 [ 717.919846][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.934870][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.159605][ T29] audit: type=1326 audit(1734177599.622:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.3.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c6785d19 code=0x7fc00000 [ 720.593296][T11911] binder: BINDER_SET_CONTEXT_MGR already set [ 720.599691][T11911] binder: 11909:11911 ioctl 4018620d 20000040 returned -16 [ 720.952509][T11915] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 722.898899][ T7723] Bluetooth: hci3: Frame reassembly failed (-84) [ 723.334330][ T29] audit: type=1326 audit(1734177604.752:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.1.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 723.356788][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.449897][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 723.834734][ T29] audit: type=1326 audit(1734177605.282:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.1.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 723.857130][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.320934][ T29] audit: type=1326 audit(1734177605.792:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.1.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce185d19 code=0x7fc00000 [ 724.912374][ T5833] Bluetooth: hci3: command 0x1003 tx timeout [ 724.934959][T10050] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 726.321764][T11822] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 729.701666][ T29] audit: type=1326 audit(1734177611.162:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 730.550696][ T29] audit: type=1326 audit(1734177611.172:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 730.842013][ T29] audit: type=1326 audit(1734177612.082:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 730.847826][T10050] Bluetooth: hci3: sending frame failed (-49) [ 730.864374][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.864494][ T29] audit: type=1326 audit(1734177612.082:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 730.864544][ T29] audit: type=1326 audit(1734177612.082:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 730.880712][T11822] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 730.900309][ T29] audit: type=1326 audit(1734177612.082:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 730.964484][T12021] syz.3.1558 (12021): drop_caches: 2 [ 730.980814][ T29] audit: type=1326 audit(1734177612.082:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 731.003251][ T29] audit: type=1326 audit(1734177612.082:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 731.026108][ T29] audit: type=1326 audit(1734177612.082:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 731.048437][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.055519][ T29] audit: type=1326 audit(1734177612.082:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.8.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cbb85d19 code=0x7fc00000 [ 731.077851][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.703471][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1564'. [ 732.524222][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 733.090721][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 733.149329][T12069] netlink: 'syz.2.1569': attribute type 2 has an invalid length. [ 733.195662][T12069] Tq€: entered promiscuous mode [ 733.757358][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.825173][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 733.993602][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 734.044109][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.141693][ T9] usb 9-1: config 0 descriptor?? [ 734.205065][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 734.976299][T12097] gfs2: not a GFS2 filesystem [ 735.261308][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 735.426294][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 735.426319][ T29] audit: type=1326 audit(1734177616.872:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.3.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c6785d19 code=0x7fc00000 [ 735.629748][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 735.918940][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 735.929766][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 735.942937][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 735.973617][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.019989][ T5893] usb 9-1: USB disconnect, device number 5 [ 736.090001][ T9] usb 10-1: Product: syz [ 736.116373][ T9] usb 10-1: Manufacturer: syz [ 736.136488][ T9] usb 10-1: SerialNumber: syz [ 736.298509][ T9] usb 10-1: config 0 descriptor?? [ 736.309197][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 736.632230][ T5833] Bluetooth: hci7: sending frame failed (-49) [ 736.656367][T10050] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 736.671821][T12122] Bluetooth: hci7: Frame reassembly failed (-84) [ 736.765974][T12128] netlink: 'syz.1.1584': attribute type 2 has an invalid length. [ 736.816842][T12128] Tq€: entered promiscuous mode [ 738.271148][T11822] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 739.781636][ T5894] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 739.832556][ T9] gspca_zc3xx: reg_w_i err -71 [ 739.833276][T12090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.972937][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 739.982041][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 740.010690][ T5894] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 740.066330][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.075571][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 740.132969][ T5894] usb 2-1: config 0 descriptor?? [ 740.142639][ T5894] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 740.584627][T12189] netlink: 'syz.9.1599': attribute type 2 has an invalid length. [ 740.619383][T12189] Tq€: entered promiscuous mode [ 741.020619][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 741.026996][ T9] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 741.045246][ T9] usb 10-1: USB disconnect, device number 4 [ 741.228338][T12191] Bluetooth: hci3: Frame reassembly failed (-84) [ 741.485776][ T11] Bluetooth: hci3: Frame reassembly failed (-84) [ 741.508992][T12205] warning: `syz.9.1602' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 743.403508][T11822] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 743.479583][ T9] usb 2-1: USB disconnect, device number 18 [ 744.008354][T10050] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 744.360625][ T5946] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 745.267039][T12247] netlink: 'syz.5.1615': attribute type 2 has an invalid length. [ 746.472911][ T5946] usb 10-1: Using ep0 maxpacket: 8 [ 746.681162][ T5946] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 746.752757][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.763904][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.687351][T12251] delete_channel: no stack [ 748.070424][T10050] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 748.079432][T10050] Bluetooth: hci2: Injecting HCI hardware error event [ 748.089046][T10050] Bluetooth: hci2: hardware error 0x00 [ 748.102384][T12228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.771508][T12250] input: syz1 as /devices/virtual/input/input37 [ 748.825594][ T5946] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 748.835601][ T5946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.845659][ T5946] usb 10-1: Product: syz [ 748.960344][ T5946] usb 10-1: config 0 descriptor?? [ 749.065958][ T5946] usb 10-1: can't set config #0, error -71 [ 749.370608][ T5946] usb 10-1: USB disconnect, device number 5 [ 750.574051][T10050] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 751.440679][ T5894] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 751.645890][ T5894] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 751.667073][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.690987][ T5894] usb 2-1: Product: syz [ 751.695263][ T5894] usb 2-1: Manufacturer: syz [ 751.735586][ T5894] usb 2-1: SerialNumber: syz [ 751.796583][ T5894] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 751.855108][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 752.121414][T10050] Bluetooth: hci6: unexpected event for opcode 0x2010 [ 756.192269][T10050] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 756.201013][T10050] Bluetooth: hci6: Injecting HCI hardware error event [ 756.213313][T10050] Bluetooth: hci6: hardware error 0x00 [ 760.434302][ T9] usb 2-1: Service connection timeout for: 256 [ 760.440544][ C0] sched: DL replenish lagged too much [ 760.606634][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 761.717208][T12308] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 866.670958][T10050] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 866.700686][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.707127][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.091792][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 868.098812][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11526/1:b..l P5826/1:b..l P12310/1:b..l [ 868.109688][ C0] rcu: (detected by 0, t=10502 jiffies, g=44905, q=468 ncpus=2) [ 868.117402][ C0] task:syz-executor state:R running task stack:23744 pid:12310 tgid:12310 ppid:5815 flags:0x00000000 [ 868.129778][ C0] Call Trace: [ 868.133053][ C0] [ 868.135985][ C0] __schedule+0x1850/0x4c30 [ 868.140522][ C0] ? __pfx___schedule+0x10/0x10 [ 868.145390][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.151029][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 868.157020][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 868.162312][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 868.167598][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 868.173320][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.178964][ C0] irqentry_exit+0x5e/0x90 [ 868.183388][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 868.189381][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x1d6/0x220 [ 868.196231][ C0] Code: 62 e8 de c5 77 ff 4d 85 f6 48 bb 00 00 00 00 00 fc ff df 75 07 e8 ca c5 77 ff eb 06 e8 c3 c5 77 ff fb 48 c7 04 24 0e 36 e0 45 <4a> c7 04 23 00 00 00 00 66 42 c7 44 23 09 00 00 42 c6 44 23 0b 00 [ 868.215924][ C0] RSP: 0018:ffffc90003217800 EFLAGS: 00000293 [ 868.222000][ C0] RAX: ffffffff8227987d RBX: dffffc0000000000 RCX: ffff888028c4bc00 [ 868.229973][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 868.238050][ C0] RBP: ffffc900032178a8 R08: ffffffff82279858 R09: 1ffffffff2854318 [ 868.246036][ C0] R10: dffffc0000000000 R11: fffffbfff2854319 R12: 1ffff92000642f00 [ 868.254017][ C0] R13: ffffc90003217820 R14: 0000000000000200 R15: 0000000000000046 [ 868.262004][ C0] ? seqcount_lockdep_reader_access+0x1a8/0x220 [ 868.268254][ C0] ? seqcount_lockdep_reader_access+0x1cd/0x220 [ 868.274509][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 868.281293][ C0] ? stack_depot_save_flags+0x37/0x940 [ 868.286773][ C0] __dentry_path+0x16c/0x6b0 [ 868.291639][ C0] ? security_file_ioctl+0xc6/0x2a0 [ 868.296855][ C0] ? __dentry_path+0x27/0x6b0 [ 868.301564][ C0] dentry_path_raw+0x141/0x210 [ 868.306438][ C0] ? __pfx_dentry_path_raw+0x10/0x10 [ 868.311744][ C0] tomoyo_get_local_path+0xd2/0x7b0 [ 868.316951][ C0] ? __pfx_tomoyo_get_local_path+0x10/0x10 [ 868.322766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.328399][ C0] ? rcu_is_watching+0x15/0xb0 [ 868.333176][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.338807][ C0] ? __kmalloc_noprof+0x2a5/0x4c0 [ 868.343846][ C0] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 868.349572][ C0] tomoyo_realpath_from_path+0x49c/0x5e0 [ 868.355220][ C0] tomoyo_path_number_perm+0x236/0x860 [ 868.360688][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.366315][ C0] ? __lock_acquire+0x1397/0x2100 [ 868.371349][ C0] ? tomoyo_path_number_perm+0x206/0x860 [ 868.376993][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 868.382979][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.388605][ C0] ? __lock_acquire+0x1397/0x2100 [ 868.393642][ C0] ? __pfx_locks_remove_posix+0x10/0x10 [ 868.399193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.404839][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.410465][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 868.416457][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 868.422795][ C0] security_file_ioctl+0xc6/0x2a0 [ 868.427825][ C0] __se_sys_ioctl+0x46/0x170 [ 868.432415][ C0] do_syscall_64+0xf3/0x230 [ 868.436930][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.442830][ C0] RIP: 0033:0x7f7210d8591b [ 868.447240][ C0] RSP: 002b:00007ffeb5275150 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.455655][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f7210d8591b [ 868.463623][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9 [ 868.471588][ C0] RBP: 00007f7210f76118 R08: 00000000000000d8 R09: 0000000000000000 [ 868.479560][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.487609][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 868.495588][ C0] [ 868.498783][ C0] task:syz-executor state:R running task stack:19800 pid:5826 tgid:5826 ppid:5825 flags:0x00004000 [ 868.510707][ C0] Call Trace: [ 868.513977][ C0] [ 868.516901][ C0] __schedule+0x1850/0x4c30 [ 868.521434][ C0] ? __pfx___schedule+0x10/0x10 [ 868.526288][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.531916][ C0] ? mark_lock+0x9a/0x360 [ 868.536263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.542072][ C0] ? preempt_schedule+0xe1/0xf0 [ 868.546925][ C0] preempt_schedule_common+0x84/0xd0 [ 868.552215][ C0] preempt_schedule+0xe1/0xf0 [ 868.556892][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 868.562268][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 868.568170][ C0] ? __page_table_check_ptes_set+0x30f/0x410 [ 868.574157][ C0] ? copy_pmd_range+0x6d6d/0x77a0 [ 868.579177][ C0] preempt_schedule_thunk+0x1a/0x30 [ 868.584385][ C0] _raw_spin_unlock+0x3e/0x50 [ 868.589099][ C0] copy_pmd_range+0x6dc8/0x77a0 [ 868.593983][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 868.599208][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 868.604419][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.610061][ C0] ? look_up_lock_class+0x77/0x170 [ 868.615187][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.620822][ C0] ? register_lock_class+0x102/0x980 [ 868.626148][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 868.631093][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.636720][ C0] ? mark_lock+0x9a/0x360 [ 868.641065][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.646698][ C0] ? __lock_acquire+0x1397/0x2100 [ 868.651748][ C0] copy_page_range+0x99f/0xe90 [ 868.656531][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 868.661822][ C0] ? __pfx_up_write+0x10/0x10 [ 868.666513][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.672144][ C0] ? __asan_memset+0x23/0x50 [ 868.676728][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 868.683497][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 868.689746][ C0] copy_mm+0x11c7/0x1f90 [ 868.694003][ C0] ? __pfx_copy_mm+0x10/0x10 [ 868.698601][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.704233][ C0] ? __init_rwsem+0x122/0x160 [ 868.708917][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.714633][ C0] ? copy_signal+0x51c/0x640 [ 868.719224][ C0] copy_process+0x1845/0x3d50 [ 868.723912][ C0] ? copy_process+0x9fa/0x3d50 [ 868.728673][ C0] ? __lock_acquire+0x1397/0x2100 [ 868.733700][ C0] ? __pfx_copy_process+0x10/0x10 [ 868.738729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.744371][ C0] kernel_clone+0x226/0x8e0 [ 868.748880][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 868.753921][ C0] __x64_sys_clone+0x258/0x2a0 [ 868.758689][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 868.763972][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 868.769965][ C0] ? exc_page_fault+0x590/0x8b0 [ 868.774830][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.780645][ C0] ? do_syscall_64+0xb6/0x230 [ 868.785333][ C0] do_syscall_64+0xf3/0x230 [ 868.789846][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.795748][ C0] RIP: 0033:0x7fae0f17c593 [ 868.800159][ C0] RSP: 002b:00007ffe8a7eefc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 868.808576][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae0f17c593 [ 868.816548][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 868.824515][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 868.832482][ C0] R10: 0000555590b437d0 R11: 0000000000000246 R12: 0000000000000000 [ 868.840449][ C0] R13: 0000555590b56590 R14: 00007ffe8a7ef150 R15: 0000000000000144 [ 868.848436][ C0] [ 868.851468][ C0] task:syz-executor state:R running task stack:19216 pid:11526 tgid:11526 ppid:11513 flags:0x00004002 [ 868.863224][ C0] Call Trace: [ 868.866494][ C0] [ 868.869423][ C0] __schedule+0x1850/0x4c30 [ 868.873953][ C0] ? __pfx___schedule+0x10/0x10 [ 868.878812][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.884440][ C0] ? mark_lock+0x9a/0x360 [ 868.888794][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.894461][ C0] ? preempt_schedule+0xe1/0xf0 [ 868.899319][ C0] preempt_schedule_common+0x84/0xd0 [ 868.904697][ C0] preempt_schedule+0xe1/0xf0 [ 868.909379][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 868.914751][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 868.920653][ C0] ? __page_table_check_ptes_set+0x30f/0x410 [ 868.926638][ C0] ? copy_pmd_range+0x6d6d/0x77a0 [ 868.931748][ C0] preempt_schedule_thunk+0x1a/0x30 [ 868.936953][ C0] _raw_spin_unlock+0x3e/0x50 [ 868.941633][ C0] copy_pmd_range+0x6dc8/0x77a0 [ 868.946499][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 868.951713][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 868.956912][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.962545][ C0] ? look_up_lock_class+0x77/0x170 [ 868.967662][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.973289][ C0] ? register_lock_class+0x102/0x980 [ 868.978579][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 868.983523][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.989151][ C0] ? mark_lock+0x9a/0x360 [ 868.993581][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.999210][ C0] ? __lock_acquire+0x1397/0x2100 [ 869.004258][ C0] copy_page_range+0x99f/0xe90 [ 869.009041][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 869.014335][ C0] ? __pfx_up_write+0x10/0x10 [ 869.019023][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 869.024658][ C0] ? __asan_memset+0x23/0x50 [ 869.029274][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 869.036041][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 869.042295][ C0] copy_mm+0x11c7/0x1f90 [ 869.046547][ C0] ? __pfx_copy_mm+0x10/0x10 [ 869.051144][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 869.056773][ C0] ? __init_rwsem+0x122/0x160 [ 869.061456][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 869.067083][ C0] ? copy_signal+0x51c/0x640 [ 869.071671][ C0] copy_process+0x1845/0x3d50 [ 869.076358][ C0] ? copy_process+0x9fa/0x3d50 [ 869.081118][ C0] ? __lock_acquire+0x1397/0x2100 [ 869.086145][ C0] ? __pfx_copy_process+0x10/0x10 [ 869.091172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 869.096805][ C0] kernel_clone+0x226/0x8e0 [ 869.101317][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 869.106355][ C0] __x64_sys_clone+0x258/0x2a0 [ 869.111123][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 869.116432][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 869.122422][ C0] ? exc_page_fault+0x590/0x8b0 [ 869.127275][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 869.132909][ C0] ? do_syscall_64+0xb6/0x230 [ 869.137594][ C0] do_syscall_64+0xf3/0x230 [ 869.142110][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.148269][ C0] RIP: 0033:0x7f9d73f7c593 [ 869.152682][ C0] RSP: 002b:00007ffedc1f6148 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 869.161103][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9d73f7c593 [ 869.169071][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 869.177040][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 869.185024][ C0] R10: 0000555567c907d0 R11: 0000000000000246 R12: 0000000000000000 [ 869.193101][ C0] R13: 0000555567ca3590 R14: 00007ffedc1f62d0 R15: 0000000000000018 [ 869.201094][ C0] [ 869.204109][ C0] rcu: rcu_preempt kthread starved for 240 jiffies! g44905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 869.215151][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 869.225120][ C0] rcu: RCU grace-period kthread stack dump: [ 869.230999][ C0] task:rcu_preempt state:R running task stack:26072 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 869.242771][ C0] Call Trace: [ 869.246051][ C0] [ 869.248982][ C0] __schedule+0x1850/0x4c30 [ 869.253517][ C0] ? __pfx___schedule+0x10/0x10 [ 869.258374][ C0] ? __pfx_lock_release+0x10/0x10 [ 869.263409][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 869.269743][ C0] ? schedule+0x90/0x320 [ 869.273991][ C0] schedule+0x14b/0x320 [ 869.278150][ C0] schedule_timeout+0x15a/0x290 [ 869.282999][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 869.288372][ C0] ? __pfx_process_timeout+0x10/0x10 [ 869.293669][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 869.299296][ C0] ? prepare_to_swait_event+0x330/0x350 [ 869.304844][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 869.309695][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 869.314908][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 869.321070][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 869.326356][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 869.332276][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 869.337904][ C0] ? finish_swait+0xd4/0x1e0 [ 869.342493][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 869.347087][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 869.352374][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 869.358277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 869.363909][ C0] ? __kthread_parkme+0x169/0x1d0 [ 869.368936][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 869.374138][ C0] kthread+0x2f2/0x390 [ 869.378213][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 869.383416][ C0] ? __pfx_kthread+0x10/0x10 [ 869.388012][ C0] ret_from_fork+0x4d/0x80 [ 869.392433][ C0] ? __pfx_kthread+0x10/0x10 [ 869.397023][ C0] ret_from_fork_asm+0x1a/0x30 [ 869.401802][ C0] [ 869.404812][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 869.411123][ C0] Sending NMI from CPU 0 to CPUs 1: [ 869.416330][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 870.407153][ T93] usb 2-1: USB disconnect, device number 19 [ 870.442117][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.448470][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.733104][ T9] ath9k_htc: Failed to initialize the device [ 870.739467][ T93] usb 2-1: ath9k_htc: USB layer deinitialized [ 871.392839][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 871.398925][ T5837] Bluetooth: hci0: command 0x0406 tx timeout SYZFAIL: failed to send rpc fd=3 want=424 sent=0 n=-1 (errno 32: Broken pipe) [ 877.351377][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.360696][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 877.371941][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.380969][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 877.414797][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 877.422074][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.475791][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.689179][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 877.739964][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 877.802172][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 877.812875][T12337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 877.822324][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2