last executing test programs: 15.136733767s ago: executing program 3 (id=172): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000740)={0x0, 0x0, 0x4, {0x4, @sdr}}) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x29a8875bfc8d18ac, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f782a650f01d1b9800000c00f3235000800000f30c4e14d684c27ee0f16ddc4e1fc51d9660f0f8edf9ca2f897c4c25993bcb09b56295d66b82e000f00d0e500", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone3(&(0x7f0000000700)={0x40006000, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000440)=0x0, {0x1a}, &(0x7f0000000480)=""/104, 0x68, &(0x7f0000000500)=""/142, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff], 0x2, {r1}}, 0x58) get_robust_list(r5, &(0x7f00000009c0)=&(0x7f00000008c0)={&(0x7f00000007c0)={&(0x7f0000000780)}, 0x0, &(0x7f0000000880)={&(0x7f0000000840)}}, &(0x7f0000000a00)=0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000134f42f292f73daa000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000100)=""/145}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000003c0)='afs_dir_check_failed\x00', r6}, 0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000800), 0x24a480, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000001ac0)={&(0x7f0000000900)=""/168, 0xa8, 0x0, &(0x7f0000001c80)=""/139, 0x8b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x17, 0x6, &(0x7f0000000d40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f00000005c0)=""/195, 0x40f00, 0x34, '\x00', 0x0, 0x18, r7, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) 13.565187247s ago: executing program 0 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1003, 0xffffffffffffffff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r1, &(0x7f00000000c0)='i', 0x1) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r2 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r2, 0x10d, 0xb1, 0xfffffffffffffffe, &(0x7f0000000000)=0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/113, 0x71}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x11e0, &(0x7f0000002000)={[{0x1000, 0x4e00, "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"}, {0x58, 0x4e00, "123e6b50f8ba5a4010b2aa3c788935de90f4478544c80adc0d279e9e20dbb600a6bf5006fcd0ef2a015eeb18187ace1c615ae7f6d5e8868ac9fe7b8c7575e95ed2e651da5b0fe9a0a3a28a1569ecd62e8a5c6111df1bb5da"}, {0xac, 0x4e00, "a6f5044ccaa89316bace81af065cd4f9d96f5ba8725034fc985d98a1f970980648c6e3077d13427945b91f065a8d0561a18827b62ada18b9b99f7c651a044f1315d57a853d5fcfc6ca54f2601a9750d10a576eab09e7ddd5fdd41424aefd34db0faf93d0ead2de79bda41812feca9b4b8ad164183d4cadcccbc3ad2309057691fb86b9600b262d3735f6395b0e5c54ff41328620e886eda1aa2e09963d371ff50530e33de0ec241e5288b9df"}, {0x5a, 0x4e00, "e386cca3b41a56d2fbcf2b4f53a3223a9622ab1f02cf001bc23be9331a0af02ef87b7a8c15c1af984c600ec2e28e91ce9162324023718df0702075a4abbf568e3d41bc46807e898648f780560f551764877a169b66cc49e1b2fa"}, {0x6c, 0x4e00, "c4caec030cb016bc1b5a30c600738abb23df46846d4443b7ea56db6065a563732e6d855fd94cdfc29a19473a13d751ec6bf25b3537db663aa5da0811ac235cac83c7b6098b74e124df8bf59c6eb9f568fe22da8d024d5d25ba83d5159b509144a0a1661e6e09fccc5fdbcb10"}]}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 13.527665226s ago: executing program 2 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)="e45f0be6223dc2572058edd70100", 0x10) 12.022529461s ago: executing program 2 (id=184): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000300)=ANY=[@ANYBLOB="d0000000080211000000080211000001ffffffffffff0000030000000000000000d8aae09a2ac0054ecc14f00a16a0cac2207b63f71fc3d345c4f51147a94e2c8b9d43"], 0x21) r5 = socket(0x18, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x2042, 0x0, 0x0) connect$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) sendto$llc(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200048e0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x23, 0x5, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'ip6gre0\x00', 0x4e}) gettid() sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r5, @ANYRES16=r8], 0x14}}, 0x0) socket$inet6(0xa, 0x3, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.513918259s ago: executing program 4 (id=186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000003000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x10020f58, 0x0, [{}, {}, {}, {0x0, 0x35}, {}, {}, {}, {}, {}, {}, {0x0, 0x76}, {0x0, 0x0, 0x0, '\x00', 0xff}]}}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000007c0)={0x70001}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0) sendmmsg$unix(r10, &(0x7f0000002e40)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000006c0)="c67c7df39e5dab85dc6c710f1e3854dfcdddfdd9d775d8816164fbe7beb3c7626cb90b41fa1dfcc3a7eeaa9d67131ebeaea965ecc54cd7a733a5910bcd82a86b2f21f7beb98825b3ef4317a539558b6ea3b789585a10d90abb3baccade011b497ad381bf7fc51536d18c34b3e0f63bfcc65fde4c09e222cf0e49fdba9c4a241c5e833eb11d21a77b3e069f3f747f344be842", 0x92}, {&(0x7f0000000840)="6488c5dbf4f7a18d026924590c85c62217198cfc3fe70cdece1de1309c296ffffefab92cc95c89acf66761a9a844b30e4752b9266e0925a02b90c8e4855fcf09a5adedc24f429989e2e261cd02b42f6a71154cf013ce43dafdf56a1e58df7054f31dc16c61468e3cb1ac20c6ec1b5626bf51a731400cb3f8729f81c6c577f898753d74fd71232408c7454187e92cca6725b637979503380bb95add26909f3bc1a45030c5fcf1ab786746e35cf2bec4879088cb55113fee671b7bcc562250f5a400357d2fd94361847c6ea1f1d4834dc7a1d7d76505e952947ff56f99e9e019fb", 0xb}], 0x2, 0x0, 0x0, 0x40001}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000940)="e19b6d9b199bbf10a722c90d7597722268206c7ed0158bf0e5799693889408ff9f4c87cc3726060b216414d4d0492457d9ff331ea600dc067cf33cb0f440421258370c482e2d882322fb859b200b30cf0017b886cd2525df695e7d4e0cf3d6e4b04c78421a72d64899fd8a28a93d6ea8df92c9927042d98f2034ce604887c3f7b2598053f995b1c23e83209bec7568c0416df3c0a9c314cac7131b0bbfe4fc5ba68012a3ec0688345456795c2d804e2bc9"}, {&(0x7f00000005c0)="3986a8d159952b41251d93faf12b7f7200b048eb688453b2a1fb14454c2b759334f97ef4b234395cf5481973d6fd1a00ec58e775382fc437d8ef85c4f087aaad4bc572aafe9c16dbc161de8faeb581564307"}, {&(0x7f0000000a00)="8b76621af7788d4b7fdac4242e0939c1c1f14d52067805b6b7e90884a524bbe6ca703e57613a21691eaf80220da503d9bc5f9cae5388ea79f119c01ae5e7e9e54a101ee09069b1115731c675f88911d01863e744"}, {&(0x7f0000000cc0)="de476a72ac3b2e4a7f95ef46339152a5ed55fa65056ab46fd27be0ebf6abf19d1350a8158284111c691e2a397fa067344ca57641c05bdc40ffef2f4061d991bee701bf9af2eacfc7c339b39cd1855cf4f31bbe87a05e2aac3d1b9cbae417ac1892ef7457eace8ae1dd12ef0867b6bccfbb957baf37fda2f363d0cb360f93bad9cdddb341e846386c5ccdb005b217980e17d732982fc69c63e3d92098bb25b7269cc8edaf969d5af1a06e35ffbbda5ccd125a575353248d2f32f8e474bdc3f97fe680319590fbbf96f7deb09927515e41d5ce610f18ea79cbbb42ae68228f4f58a7bd5d"}, {&(0x7f0000000b80)="a09b00ff4ca24cd4d9c8f1438cb2373c8a88effee3ecff06414a4c7ff34b61350931349a26d87eb7ebb7034ac63b87382c14c4152877da3b91f2f27421328b0c76d6d4e7"}, {&(0x7f0000000c00)="1a02cb9d476f4e165f8b8d0fa6ce1e79c1b2bf6b58eea56f497efe3b858a504b91a891d59f878cbf17c939264188c090a8690c40"}], 0x0, &(0x7f0000002dc0)=[@cred, @rights={{0x0, 0x1, 0x1, [r9, r3]}}, @rights={{0x0, 0x1, 0x1, [r0]}}]}}], 0x20, 0x20040004) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r11, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) 9.885761306s ago: executing program 2 (id=187): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) (fail_nth: 1) 9.612798559s ago: executing program 0 (id=188): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000003c0)=ANY=[], 0xff49) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r5, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r6) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, 0x0) 5.769469604s ago: executing program 3 (id=189): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x74}], 0x1}, 0x20000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000001, 0x0) pread64(r3, &(0x7f0000000080)=""/168, 0xa8, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f0000001840)=""/4090, 0xffa) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000600)=""/170, 0xaa}], 0x1, 0xffeffffe, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) 5.440907917s ago: executing program 4 (id=191): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa}, 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 5.379758436s ago: executing program 3 (id=192): semctl$SETALL(0x0, 0x0, 0x11, 0x0) semget$private(0x0, 0x0, 0xc1) syz_usb_connect$uac1(0x5, 0xa9, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x5, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xfe}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x80, 0x7f, "ed273b536f3c"}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x1, 0x4, [0x2, 0x5, 0x2, 0x7], 0xa}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x7e4fe41492bf3b04, 0x5, 0x4, 0xf5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x5, 0x9, 0x3, 0x0, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x7, 0x6f, {0x7, 0x25, 0x1, 0x1, 0x1, 0x691}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x7f, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x4, 0x1, {0x7, 0x25, 0x1, 0x1, 0x8, 0x5}}}}}}}]}}, 0x0) 5.294326021s ago: executing program 4 (id=193): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x12, r3, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)='\x00'}) 5.264897263s ago: executing program 1 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)="e45f0be6223dc2572058edd70100", 0x10) 5.203767145s ago: executing program 2 (id=195): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140030c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000aed27ff91098e35ef0d10a78bf96608ed367cd36c77be0b25af8288dc7cfcca19eb34ac2844fc259bf9db8f97888241db74ce3fb30dec28058e881e3819ee516769e66fc755973cc312825038137ab242be7476f945da69081bc8c1f9bfa4eaf92c076a4cd28c3ac313503ed3d2780f7bfdd6c1b2830959da8f96fbd7c001a3a56025e7b7ee60ed17fc2e79a44d77f9bb420e814227c54adb5eb10f449b6c3f5da9850104ed695f1d944555aa66350f455076c66fb077d50fbaa210dda4f4d1d74faae4441d8a67ba1337caebd0cb204c33ee3ec91289f751eb9e1c62ccf8295cd814fcbf7e595fb22a141d8d26af95a5bff1f20846e53ae827065f2edc1ba9801462dd8cbd073fc743493389cf60cb28a4a40bf74c0768188b6cab537cbfac320"], 0x161) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x1, 0x0, @sync=0x0}}) 4.984569389s ago: executing program 4 (id=196): socket(0x10, 0x80000, 0x80000003) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x6, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) fanotify_init(0x8, 0x101000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x8001043, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x6, 0x0) 4.841147783s ago: executing program 2 (id=197): r0 = socket$kcm(0x10, 0x2, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) gettid() epoll_create1(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000180)) recvmmsg(r0, &(0x7f000001d880)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f000001a740)=[{&(0x7f0000019480)=""/186, 0xba}, {&(0x7f0000019540)=""/4096, 0x1000}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f000001a540)=""/154, 0x9a}, {&(0x7f000001db00)=""/142, 0x8e}, {&(0x7f000001a6c0)=""/79, 0x4f}], 0x6, &(0x7f000001a7c0)=""/193, 0xc1}, 0xfffff1cd}, {{&(0x7f000001a8c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f000001aa80)=[{0xffffffffffffffff}, {&(0x7f000001a940)=""/113, 0x71}, {&(0x7f0000000100)}, {&(0x7f000001a9c0)=""/84, 0x54}, {&(0x7f000001aa40)=""/43, 0x2b}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f000001af00)=[{&(0x7f000001ab00)=""/15, 0xf}, {&(0x7f000001ab40)=""/230, 0xe6}, {&(0x7f000001ac40)=""/244, 0xf4}, {&(0x7f000001ad40)}, {&(0x7f000001ad80)=""/188, 0xbc}, {&(0x7f000001ae40)=""/190, 0xbe}], 0x6, &(0x7f000001af80)=""/38, 0x26}, 0x9}, {{&(0x7f000001afc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f000001b840)=[{&(0x7f000001b040)=""/140, 0x8c}, {&(0x7f000001b100)=""/121, 0x79}, {&(0x7f000001b180)=""/197, 0xc5}, {&(0x7f000001b280)=""/152, 0x98}, {&(0x7f000001b340)=""/98, 0x62}, {&(0x7f000001b3c0)=""/209, 0xd1}, {&(0x7f000001b4c0)=""/99, 0x63}, {&(0x7f000001b540)=""/202, 0xca}, {&(0x7f000001b640)=""/235, 0xeb}, {&(0x7f000001b740)=""/212, 0xd4}], 0xa}, 0x800}, {{&(0x7f000001b900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f000001ba00)=[{&(0x7f000001b980)=""/110, 0x6e}], 0x1, &(0x7f000001ba40)=""/46, 0x2e}, 0x709}, {{0x0, 0x0, &(0x7f000001bb80)=[{&(0x7f000001ba80)}, {&(0x7f000001bac0)=""/158, 0x9e}], 0x2}, 0x7}, {{&(0x7f000001bbc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f000001cc40), 0x0, &(0x7f000001cc80)=""/57, 0x39}, 0xc}, {{&(0x7f000001ccc0)=@phonet, 0x80, &(0x7f000001d180)=[{&(0x7f000001cd40)=""/170, 0xaa}, {0x0}, {0x0}, {&(0x7f000001cf40)=""/134, 0x86}, {&(0x7f000001d000)=""/118, 0x76}, {&(0x7f000001d080)=""/34, 0x22}, {&(0x7f000001d0c0)=""/187, 0xbb}], 0x7, &(0x7f000001d200)=""/97, 0x61}, 0x8}, {{&(0x7f000001d280)=@ethernet={0x0, @multicast}, 0x80, &(0x7f000001d740)=[{&(0x7f000001d300)=""/235, 0xeb}, {&(0x7f000001d400)=""/189, 0xbd}, {&(0x7f000001d4c0)=""/113, 0x71}, {&(0x7f000001d540)=""/237, 0xed}, {&(0x7f000001d640)=""/232, 0xe8}], 0x5, &(0x7f000001d7c0)=""/148, 0x94}, 0xff}], 0x9, 0x43, &(0x7f000001dac0)={0x77359400}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfb8f, 0x0, 0x7fffffff, 0x7}, 0x0, &(0x7f00000002c0)={0x6, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x0) getpid() r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000193c0)=ANY=[@ANYBLOB="0207000a0200000000000000000000003f030fdbb2e6bbe22ea385c55d97d53805de27570b608b7260dcd135cc105d22d1ef9372d2a682e5b7ba7b7d2526ee662c75d17dffbfeb8097e539bbafea180564d87480d547e51448f0000a1f112199995d6bc409cac186c8172a6877fbd7234ed846e46bda66e171f1fb2f88ae08986b86a22dbae91dc5fa5ce579878e3197eea97de9b56446aa3662f242f2dd"], 0x10}}, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r2}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 4.61889176s ago: executing program 1 (id=198): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) socket$packet(0x11, 0x3, 0x300) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x711800, 0x4) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000340)={0xffffffda, 0x3, 0x3, {0x0, @pix={0x4, 0x7fffffff, 0x36325544, 0x1, 0x3, 0x9, 0x8, 0x81, 0x1, 0x8, 0x2}}, 0x1}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) dup3(r6, 0xffffffffffffffff, 0x0) 3.471898592s ago: executing program 0 (id=199): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0xfffffff8, 0x1, {0x2, 0x0, 0x7fff, 0x0, 0x2}, 0x80000000}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r1, 0x0, 0x0, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @empty, @local, {[], @ndisc_ra}}}}}, 0x0) 3.402675012s ago: executing program 1 (id=200): unshare(0x40020200) msgget$private(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f0000000680)={&(0x7f00000005c0)="99eb03b589a4bfda6a07c51ee43a0f890b0ce902f27cfc598b7c82fb4de5479b96db070f18af013b866de7243277dbe344a78d4e1363233de35857b8a27e525abe39cab81ce3f3bcbd17b9ef102a3ffbb27c621c1ae225dd9ee561e138da238e741a0be2c0015be0369510bada15596c604b62ab55fe05fc925b5421db619abffd1a3b0e8454e207aa5a4d554562516f17e5270016e4042291ed37e7dd36410cce39", 0xa2}) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000500)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000380), 0xb6, 0x0, &(0x7f0000000440)="beac21e1a8ed5327438da027658fa361d33c14ff244942808dbe44606f5af3efd862f94439fbdddb8fe93544f5eb7395c473c743a634a65236df4ed0f7427b4d00dec9e19085d1b62e68a4c12ad34559450e62afa9f9a6f19019d5e04bde28cbf346f982c9a6f76081a28bde81d6e77f5c5c355df3d35761ac90cfcc8092cdd2681d298c3431c03c9ecf453e152bab8a1c6e69ec7c21218e5b39bea225770e549c0cfeb0b7447bb640537072521682c2659b4be3dba3"}) socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(r5, &(0x7f0000000580), 0x2, 0x0) r6 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11e, 0x1, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x5761, 0x0) r7 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 3.307787926s ago: executing program 4 (id=201): r0 = open(&(0x7f0000000400)='./file0\x00', 0x14937e, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '('}}, {@fowner_gt}], 0x6b}}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_vhci(0x0, 0x22) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0xd) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0xfffffffffffff924, 0x19a], 0x0, 0x40280}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r7 = socket$inet6(0xa, 0xf, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000307000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000299000/0x4000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) syz_io_uring_setup(0x3ccc, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xfffffffe, 0x316, 0x0, r5}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) 3.232835778s ago: executing program 0 (id=202): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) r0 = dup(0xffffffffffffffff) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x31}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f00000000c0)={0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00001db000/0x1000)=nil, 0x1000, 0xf, 0x10, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x111, 0x1f, 0x0, 0x20001f00) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000044d564b"]) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1dc434d0", @ANYRES16=r10, @ANYBLOB="1709000000000000000001000000080009000000000008000a0000000000"], 0x24}, 0x1, 0x620b}, 0x0) 3.136466882s ago: executing program 3 (id=203): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x200008a5}, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r1, 0x4b36) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x202200, 0x0) fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="4f00030007"], 0xd) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x4, 0x14, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e5042dfcb31a3677"}}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 1.744066655s ago: executing program 3 (id=204): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="03c90081af6462f54ef987d698e163bf8514e0873c9e98d71c54eca9a6bb21732f86d6e39234349fb1806f12baa75a139b16633e8ae3143e542aeba10ee7ec62644226ed65bc4a014e1b423223fc7dcd12d6394e7902a9cec2af5b335e7dd851da31c75586bafa9236dc6aa53b5f33d94fd034272e1e55973bed45987e450f1e152f36a87625863102863ab1e709ccfd764ca5a368042207901eead54727c67fe3a67871ffad18"], 0x85) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91eb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) semget$private(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='projid_map\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000015040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="000000000220e285b8ce6f1569a3000085000000a50000009500000000000000c9f981f05c3aab2e67787d954ffa5b48a8d11be3fe3f43cfa2914ab99d38d440b9ebb54291ea3b09d9feb498bb4fa881eb270551ef397c51178f4857ceedeb1cc6a6189e076d9656"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x22) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0x100, r4}, 0x0) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) 1.416969534s ago: executing program 0 (id=205): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="03c90081af6462f54ef987d698e163bf8514e0873c9e98d71c54eca9a6bb21732f86d6e39234349fb1806f12baa75a139b16633e8ae3143e542aeba10ee7ec62644226ed65bc4a014e1b423223fc7dcd12d6394e7902a9cec2af5b335e7dd851da31c75586bafa9236dc6aa53b5f33d94fd034272e1e55973bed45987e450f1e152f36a87625863102863ab1e709ccfd764ca5a368042207901eead54727c67fe3a67871ffad18"], 0x85) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91eb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) semget$private(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='projid_map\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000015040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="000000000220e285b8ce6f1569a3000085000000a50000009500000000000000c9f981f05c3aab2e67787d954ffa5b48a8d11be3fe3f43cfa2914ab99d38d440b9ebb54291ea3b09d9feb498bb4fa881eb270551ef397c51178f4857ceedeb1cc6a6189e076d9656"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x22) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0x100, r4}, 0x0) close(r4) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.375531089s ago: executing program 1 (id=206): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="c6", 0x33fe0}], 0x1}, 0xc0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@gettaction={0xcc, 0x32, 0x1, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x101b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@gettaction={0xcc, 0x32, 0x1, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x101b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x11, &(0x7f0000002f40), 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x11, &(0x7f0000002f40), 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r7, 0xee01, r8) keyctl$setperm(0x5, r7, 0x21081c22) 893.253634ms ago: executing program 1 (id=207): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r0, &(0x7f0000000440)=""/249, 0xf9, 0x359) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x400}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) 887.381526ms ago: executing program 2 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x35) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) fanotify_init(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 756.54665ms ago: executing program 4 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2ca", 0x20}], 0x1}}], 0x1, 0x20008880) sendto$inet(r1, 0x0, 0xf0ff, 0x0, 0x0, 0x0) 636.395497ms ago: executing program 3 (id=210): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) socket$packet(0x11, 0x3, 0x300) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x711800, 0x4) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000340)={0xffffffda, 0x3, 0x3, {0x0, @pix={0x4, 0x7fffffff, 0x36325544, 0x1, 0x3, 0x9, 0x8, 0x81, 0x1, 0x8, 0x2}}, 0x1}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) dup3(r6, 0xffffffffffffffff, 0x0) 110.22412ms ago: executing program 1 (id=211): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22c42, 0x0) socket(0x11, 0xa, 0x0) socket$inet6(0xa, 0x1, 0x7f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000300)=0x2, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24042050}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000019580)=""/102395, &(0x7f0000000100)=0x18ffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x38) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x7) syz_clone(0x19000100, 0x0, 0x55, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') socket$inet6(0xa, 0x2, 0x3a) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0) 0s ago: executing program 0 (id=212): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='xprtrdma_decode_seg\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x141900, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r2, 0x402, 0x4) readv(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00'}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x9, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x220020, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000280)={r4, r0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r8, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f00000000c0)={0x10, 0xfffffffffffffff5, r9}, 0x10) splice(r6, 0x0, r8, 0x0, 0x10, 0x0) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. [ 55.225613][ T5203] cgroup: Unknown subsys name 'net' [ 55.387365][ T5203] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.769067][ T5203] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.148898][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.158606][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.167586][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.177022][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.184675][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.192398][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.200886][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.208715][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.216418][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.225073][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.228004][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.232605][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.248475][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.248851][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.256676][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.264693][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.270121][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.283208][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.283919][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.292245][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.298362][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.311350][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.320420][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.329047][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.341789][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.360588][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.374875][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.386970][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.401560][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.410181][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.905432][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 59.979976][ T5213] chnl_net:caif_netlink_parms(): no params data found [ 60.002056][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 60.099740][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 60.132126][ T5214] chnl_net:caif_netlink_parms(): no params data found [ 60.229819][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.237103][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.245668][ T5213] bridge_slave_0: entered allmulticast mode [ 60.253422][ T5213] bridge_slave_0: entered promiscuous mode [ 60.305980][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.313473][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.320778][ T5213] bridge_slave_1: entered allmulticast mode [ 60.327730][ T5213] bridge_slave_1: entered promiscuous mode [ 60.334860][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.342245][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.349779][ T5215] bridge_slave_0: entered allmulticast mode [ 60.356477][ T5215] bridge_slave_0: entered promiscuous mode [ 60.397090][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.404349][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.412218][ T5215] bridge_slave_1: entered allmulticast mode [ 60.419686][ T5215] bridge_slave_1: entered promiscuous mode [ 60.426220][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.433768][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.440963][ T5226] bridge_slave_0: entered allmulticast mode [ 60.447675][ T5226] bridge_slave_0: entered promiscuous mode [ 60.455237][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.463162][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.470607][ T5226] bridge_slave_1: entered allmulticast mode [ 60.477818][ T5226] bridge_slave_1: entered promiscuous mode [ 60.501256][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.509005][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.516634][ T5224] bridge_slave_0: entered allmulticast mode [ 60.523912][ T5224] bridge_slave_0: entered promiscuous mode [ 60.533043][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.540631][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.548068][ T5224] bridge_slave_1: entered allmulticast mode [ 60.555090][ T5224] bridge_slave_1: entered promiscuous mode [ 60.626933][ T5213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.641402][ T5213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.663546][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.682999][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.690320][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.697468][ T5214] bridge_slave_0: entered allmulticast mode [ 60.705064][ T5214] bridge_slave_0: entered promiscuous mode [ 60.714417][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.735647][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.757830][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.770667][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.780547][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.787671][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.795544][ T5214] bridge_slave_1: entered allmulticast mode [ 60.802765][ T5214] bridge_slave_1: entered promiscuous mode [ 60.823297][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.904457][ T5224] team0: Port device team_slave_0 added [ 60.915168][ T5213] team0: Port device team_slave_0 added [ 60.924529][ T5215] team0: Port device team_slave_0 added [ 60.933662][ T5215] team0: Port device team_slave_1 added [ 60.954150][ T5226] team0: Port device team_slave_0 added [ 60.962436][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.974333][ T5224] team0: Port device team_slave_1 added [ 60.992411][ T5213] team0: Port device team_slave_1 added [ 61.033342][ T5226] team0: Port device team_slave_1 added [ 61.053416][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.098463][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.105439][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.131538][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.168071][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.175383][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.202449][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.215599][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.222921][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.249292][ T5213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.262318][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.269379][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.295453][ T5213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.307214][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.314776][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.341540][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.353296][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.360490][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.386473][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.397688][ T5228] Bluetooth: hci1: command tx timeout [ 61.397701][ T5218] Bluetooth: hci3: command tx timeout [ 61.403772][ T5223] Bluetooth: hci4: command tx timeout [ 61.404030][ T54] Bluetooth: hci2: command tx timeout [ 61.406380][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.427309][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.453397][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.468517][ T5218] Bluetooth: hci0: command tx timeout [ 61.472576][ T5214] team0: Port device team_slave_0 added [ 61.482443][ T5214] team0: Port device team_slave_1 added [ 61.489133][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.496217][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.522246][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.595186][ T5213] hsr_slave_0: entered promiscuous mode [ 61.601638][ T5213] hsr_slave_1: entered promiscuous mode [ 61.640726][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.647699][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.674218][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.731480][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.739725][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.766120][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.823163][ T5226] hsr_slave_0: entered promiscuous mode [ 61.829612][ T5226] hsr_slave_1: entered promiscuous mode [ 61.835732][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.844593][ T5226] Cannot create hsr debugfs directory [ 61.858968][ T5215] hsr_slave_0: entered promiscuous mode [ 61.865531][ T5215] hsr_slave_1: entered promiscuous mode [ 61.871801][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.879521][ T5215] Cannot create hsr debugfs directory [ 61.899213][ T5224] hsr_slave_0: entered promiscuous mode [ 61.905681][ T5224] hsr_slave_1: entered promiscuous mode [ 61.913154][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.921589][ T5224] Cannot create hsr debugfs directory [ 61.956015][ T5214] hsr_slave_0: entered promiscuous mode [ 61.962373][ T5214] hsr_slave_1: entered promiscuous mode [ 61.968905][ T5214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.976474][ T5214] Cannot create hsr debugfs directory [ 62.443305][ T5213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.461601][ T5213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.476344][ T5213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.494286][ T5213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.512335][ T5224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.526207][ T5224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.550826][ T5224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.574861][ T5224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.636933][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.661128][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.673061][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.683343][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.796053][ T5214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.809422][ T5214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.833794][ T5214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.846536][ T5214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.929744][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.972863][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.982740][ T5215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.995346][ T5215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.006295][ T5215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.017383][ T5215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.055810][ T5213] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.095710][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.106696][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.114691][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.171106][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.178257][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.190283][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.197396][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.212787][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.219967][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.321729][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.413699][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.453533][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.467252][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.475873][ T5218] Bluetooth: hci2: command tx timeout [ 63.478948][ T54] Bluetooth: hci1: command tx timeout [ 63.481718][ T5218] Bluetooth: hci4: command tx timeout [ 63.486910][ T54] Bluetooth: hci3: command tx timeout [ 63.511450][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.518721][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.532738][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.539951][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.550320][ T54] Bluetooth: hci0: command tx timeout [ 63.677399][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.716906][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.745401][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.752695][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.807975][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.815209][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.826378][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.833521][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.865407][ T2581] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.872595][ T2581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.940215][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.976476][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.014559][ T5214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.206019][ T5224] veth0_vlan: entered promiscuous mode [ 64.246675][ T5224] veth1_vlan: entered promiscuous mode [ 64.332111][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.405470][ T5224] veth0_macvtap: entered promiscuous mode [ 64.444643][ T5224] veth1_macvtap: entered promiscuous mode [ 64.528132][ T5226] veth0_vlan: entered promiscuous mode [ 64.560744][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.575373][ T5226] veth1_vlan: entered promiscuous mode [ 64.597139][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.623608][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.634983][ T5214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.666019][ T5224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.677856][ T5224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.687218][ T5224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.697114][ T5224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.763085][ T5226] veth0_macvtap: entered promiscuous mode [ 64.786050][ T5213] veth0_vlan: entered promiscuous mode [ 64.795749][ T5226] veth1_macvtap: entered promiscuous mode [ 64.851440][ T5215] veth0_vlan: entered promiscuous mode [ 64.871785][ T5213] veth1_vlan: entered promiscuous mode [ 64.935331][ T5215] veth1_vlan: entered promiscuous mode [ 64.956971][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.966831][ T5214] veth0_vlan: entered promiscuous mode [ 64.973360][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.998256][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.014667][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.026779][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.038147][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.049692][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.060931][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.093962][ T5214] veth1_vlan: entered promiscuous mode [ 65.111842][ T5213] veth0_macvtap: entered promiscuous mode [ 65.128934][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.137651][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.147035][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.158322][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175331][ T5213] veth1_macvtap: entered promiscuous mode [ 65.185305][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.195405][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.199484][ T5215] veth0_macvtap: entered promiscuous mode [ 65.216667][ T5215] veth1_macvtap: entered promiscuous mode [ 65.302429][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.315432][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.327636][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.343413][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.355129][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.367165][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.379373][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.390442][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.401633][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.412168][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.424272][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.435695][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.447984][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.460929][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.472938][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.486377][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.497446][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.536121][ T5214] veth0_macvtap: entered promiscuous mode [ 65.550124][ T54] Bluetooth: hci3: command tx timeout [ 65.550143][ T5228] Bluetooth: hci4: command tx timeout [ 65.550178][ T5228] Bluetooth: hci1: command tx timeout [ 65.555550][ T54] Bluetooth: hci2: command tx timeout [ 65.602884][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.617816][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.628595][ T54] Bluetooth: hci0: command tx timeout [ 65.634863][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.646887][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.657415][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.668121][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.683321][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.694221][ T5214] veth1_macvtap: entered promiscuous mode [ 65.719545][ T5215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.728903][ T5215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.737647][ T5215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.746681][ T5215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.775139][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.785973][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.800117][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.811162][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.821604][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.832933][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.843109][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.853700][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.865826][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.879560][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.891063][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.901714][ T5213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.911072][ T5213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.920096][ T5213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.928868][ T5213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.969835][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.981416][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.991355][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.002093][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.012006][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.022512][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.032777][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.043258][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.054643][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.083781][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.095643][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.098246][ T5214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.114276][ T5214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.123794][ T5214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.133103][ T5214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.333769][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.376882][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.395675][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.407974][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.457551][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.475206][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.528057][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.573530][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.639301][ T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 66.640757][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.693601][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.742091][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.766168][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.838847][ T8] usb 2-1: device descriptor read/64, error -71 [ 67.115751][ T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 67.165328][ T29] audit: type=1326 audit(1723712157.748:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5313 comm="syz.2.8" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64755799b9 code=0x0 [ 67.290175][ T8] usb 2-1: device descriptor read/64, error -71 [ 67.429187][ T8] usb usb2-port1: attempt power cycle [ 67.600064][ T5331] overlayfs: failed to resolve './file0': -2 [ 67.629319][ T5223] Bluetooth: hci1: command tx timeout [ 67.637983][ T5223] Bluetooth: hci3: command tx timeout [ 67.644283][ T5223] Bluetooth: hci4: command tx timeout [ 67.652843][ T5228] Bluetooth: hci2: command tx timeout [ 67.710606][ T5223] Bluetooth: hci0: command tx timeout [ 67.890755][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 67.946285][ T8] usb 2-1: device descriptor read/8, error -71 [ 68.224627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.271476][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 68.319001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.331580][ T5333] netlink: 'syz.2.8': attribute type 3 has an invalid length. [ 68.369378][ T8] usb 2-1: device descriptor read/8, error -71 [ 68.513665][ T8] usb usb2-port1: unable to enumerate USB device [ 68.736906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.941072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.248379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 69.369160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.420830][ T5352] FAULT_INJECTION: forcing a failure. [ 69.420830][ T5352] name failslab, interval 1, probability 0, space 0, times 1 [ 69.439133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.494256][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.2.16 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 69.504819][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 69.515000][ T5352] Call Trace: [ 69.518306][ T5352] [ 69.521248][ T5352] dump_stack_lvl+0x241/0x360 [ 69.525961][ T5352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.531194][ T5352] ? __pfx__printk+0x10/0x10 [ 69.535824][ T5352] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 69.541322][ T5352] ? __pfx___might_resched+0x10/0x10 [ 69.546656][ T5352] should_fail_ex+0x3b0/0x4e0 [ 69.551379][ T5352] should_failslab+0xac/0x100 [ 69.556098][ T5352] ? serport_ldisc_read+0x148/0x5a0 [ 69.561333][ T5352] __kmalloc_cache_noprof+0x6c/0x2c0 [ 69.566670][ T5352] ? __ldsem_down_read_nested+0x163/0x9a0 [ 69.572424][ T5352] serport_ldisc_read+0x148/0x5a0 [ 69.577477][ T5352] ? tty_ldisc_ref_wait+0x25/0x70 [ 69.582545][ T5352] ? __pfx_serport_ldisc_read+0x10/0x10 [ 69.588151][ T5352] ? __pfx_validate_chain+0x10/0x10 [ 69.593475][ T5352] tty_read+0x25e/0x6b0 [ 69.597657][ T5352] ? __pfx_tty_read+0x10/0x10 [ 69.602381][ T5352] do_iter_readv_writev+0x60a/0x890 [ 69.607596][ T5352] ? mark_lock+0x9a/0x350 [ 69.611954][ T5352] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 69.617704][ T5352] ? bpf_lsm_file_permission+0x9/0x10 [ 69.623101][ T5352] ? security_file_permission+0x7f/0xa0 [ 69.628671][ T5352] ? rw_verify_area+0x2e8/0x6b0 [ 69.633550][ T5352] vfs_readv+0x2b6/0xa90 [ 69.637823][ T5352] ? __pfx_vfs_readv+0x10/0x10 [ 69.642612][ T5352] ? vfs_write+0x7c4/0xc90 [ 69.647071][ T5352] ? __fget_files+0x29/0x470 [ 69.651711][ T5352] do_readv+0x1b1/0x350 [ 69.655983][ T5352] ? __pfx_do_readv+0x10/0x10 [ 69.660961][ T5352] ? do_syscall_64+0x100/0x230 [ 69.665747][ T5352] ? do_syscall_64+0xb6/0x230 [ 69.670452][ T5352] do_syscall_64+0xf3/0x230 [ 69.674978][ T5352] ? clear_bhb_loop+0x35/0x90 [ 69.679679][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.685600][ T5352] RIP: 0033:0x7f64755799b9 [ 69.690043][ T5352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.709847][ T5352] RSP: 002b:00007f64762ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 69.718292][ T5352] RAX: ffffffffffffffda RBX: 00007f6475715f80 RCX: 00007f64755799b9 [ 69.726310][ T5352] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 69.734307][ T5352] RBP: 00007f64762ee090 R08: 0000000000000000 R09: 0000000000000000 [ 69.742478][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.750568][ T5352] R13: 0000000000000000 R14: 00007f6475715f80 R15: 00007ffcba532c28 [ 69.751143][ T5223] Bluetooth: hci4: command 0x0405 tx timeout [ 69.758643][ T5352] [ 69.758813][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.838713][ T5216] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 69.892797][ T5358] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.023839][ T29] audit: type=1326 audit(1723712160.608:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5359 comm="syz.2.20" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64755799b9 code=0x0 [ 70.062764][ T5216] usb 2-1: Using ep0 maxpacket: 32 [ 70.088764][ T5216] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.115948][ T5216] usb 2-1: config 0 has no interface number 0 [ 70.132123][ T5216] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 70.171170][ T5216] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.206103][ T5216] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 70.239222][ T5216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.267865][ T5216] usb 2-1: Product: syz [ 70.288550][ T5216] usb 2-1: Manufacturer: syz [ 70.298653][ T5216] usb 2-1: SerialNumber: syz [ 70.302120][ T5372] mmap: syz.2.20 (5372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.351081][ T5216] usb 2-1: config 0 descriptor?? [ 70.376067][ T5363] kvm: emulating exchange as write [ 70.384236][ T5216] keyspan 2-1:0.1: Keyspan 1 port adapter converter detected [ 70.411601][ T5216] keyspan 2-1:0.1: found no endpoint descriptor for endpoint 87 [ 70.442195][ T5216] keyspan 2-1:0.1: found no endpoint descriptor for endpoint 7 [ 70.489074][ T5216] keyspan 2-1:0.1: found no endpoint descriptor for endpoint 81 [ 70.521401][ T5216] keyspan 2-1:0.1: found no endpoint descriptor for endpoint 1 [ 70.541587][ T5216] keyspan 2-1:0.1: found no endpoint descriptor for endpoint 2 [ 70.568460][ T5216] keyspan 2-1:0.1: found no endpoint descriptor for endpoint 85 [ 70.594947][ T5354] serio: Serial port ptm2 [ 70.634752][ T5216] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 70.648635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.710596][ T5216] usb 2-1: USB disconnect, device number 6 [ 70.765168][ T5216] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 70.820631][ T5216] keyspan 2-1:0.1: device disconnected [ 71.097129][ T5377] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.486829][ T5384] overlayfs: failed to resolve './file0': -2 [ 71.544382][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.629094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.609781][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.616616][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.878625][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 72.894725][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 72.963601][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 72.994582][ T8] usb 1-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=f8.14 [ 73.012699][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.023031][ T8] usb 1-1: Product: syz [ 73.027474][ T8] usb 1-1: Manufacturer: syz [ 73.034266][ T8] usb 1-1: SerialNumber: syz [ 73.053808][ T8] usb 1-1: config 0 descriptor?? [ 73.095648][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.129435][ T8] usb 1-1: invalid MIDI in EP 0 [ 73.220084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.272524][ T5377] veth1_virt_wifi: entered allmulticast mode [ 73.316212][ T5377] syz.0.22 (5377): attempted to duplicate a private mapping with mremap. This is not supported. [ 73.347578][ T5400] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 73.366204][ T8] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 73.582506][ T5401] udevd[5401]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.610397][ T5268] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.678475][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.868457][ T5268] usb 4-1: Using ep0 maxpacket: 16 [ 73.886911][ T5268] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 73.900599][ T8] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 73.929139][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.946608][ T5268] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 73.968500][ T5268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.985688][ T5268] usb 4-1: Product: syz [ 73.995453][ T8] usb 5-1: config 0 descriptor?? [ 74.001726][ T5268] usb 4-1: Manufacturer: syz [ 74.026592][ T5268] usb 4-1: SerialNumber: syz [ 74.059770][ T5268] usb 4-1: config 0 descriptor?? [ 74.085293][ T5399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.109702][ T5268] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 74.327892][ T5399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27'. [ 74.393800][ T5399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.435301][ T5399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.453273][ T5229] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 74.657426][ T8] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 74.678518][ T5229] usb 2-1: Using ep0 maxpacket: 8 [ 74.709595][ T5229] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 74.739692][ T8] usb 5-1: USB disconnect, device number 2 [ 74.771077][ T5229] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 74.785208][ T5229] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.813164][ T5229] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 74.826488][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.836068][ T5229] usb 2-1: SerialNumber: syz [ 74.857158][ T5416] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 74.870823][ T5229] hub 2-1:1.0: bad descriptor, ignoring hub [ 74.882149][ T5229] hub 2-1:1.0: probe with driver hub failed with error -5 [ 74.892972][ T5216] usb 1-1: USB disconnect, device number 2 [ 75.074862][ T5423] overlayfs: failed to resolve './file0': -2 [ 75.824987][ T5229] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 75.921630][ T5229] usb 2-1: USB disconnect, device number 7 [ 76.417041][ T5445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.778601][ T51] cfg80211: failed to load regulatory.db [ 77.889950][ T8] usb 4-1: USB disconnect, device number 2 [ 77.978668][ T5447] evm: overlay not supported [ 78.619946][ T5216] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 78.958514][ T5216] usb 2-1: Using ep0 maxpacket: 16 [ 79.047602][ T5216] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 79.058487][ T5216] usb 2-1: config 0 has no interface number 0 [ 79.065146][ T5216] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.118357][ T5216] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.138672][ T5216] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 79.177191][ T5216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.218973][ T5216] usb 2-1: config 0 descriptor?? [ 79.682282][ T5216] uclogic 0003:5543:0081.0001: interface is invalid, ignoring [ 79.824388][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.214671][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 80.365181][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.382108][ T5216] usb 2-1: USB disconnect, device number 8 [ 80.464612][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.498013][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 80.532663][ T9] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 80.553306][ T9] usb 3-1: Product: syz [ 80.562554][ T9] usb 3-1: Manufacturer: syz [ 80.571482][ T9] usb 3-1: config 0 descriptor?? [ 80.706950][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.868463][ T8] usb 5-1: device descriptor read/64, error -71 [ 81.004221][ T9] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0xd [ 81.023458][ T9] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 81.068231][ T5487] tmpfs: Unknown parameter 'mpoF' [ 81.092456][ T5487] overlayfs: statfs failed on './file0' [ 81.138946][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.191479][ T29] audit: type=1326 audit(1723712171.778:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.215360][ T29] audit: type=1326 audit(1723712171.778:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.253719][ T29] audit: type=1326 audit(1723712171.778:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.277409][ T29] audit: type=1326 audit(1723712171.778:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.320604][ T8] usb 5-1: device descriptor read/64, error -71 [ 81.345090][ T29] audit: type=1326 audit(1723712171.778:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.368193][ T29] audit: type=1326 audit(1723712171.778:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.399687][ T29] audit: type=1326 audit(1723712171.778:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.423338][ T29] audit: type=1326 audit(1723712171.778:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.449839][ T29] audit: type=1326 audit(1723712171.778:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.451882][ T9] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 81.480358][ T8] usb usb5-port1: attempt power cycle [ 81.486976][ T29] audit: type=1326 audit(1723712171.808:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1b7799b9 code=0x7ffc0000 [ 81.522538][ T9] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 81.542009][ T9] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -5 [ 81.665022][ T25] usb 3-1: USB disconnect, device number 2 [ 81.688603][ T5216] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.848536][ T5216] usb 4-1: device descriptor read/64, error -71 [ 81.918432][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.951892][ T8] usb 5-1: device descriptor read/8, error -71 [ 82.128546][ T5216] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.218563][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.259830][ T8] usb 5-1: device descriptor read/8, error -71 [ 82.278538][ T5216] usb 4-1: device descriptor read/64, error -71 [ 82.390541][ T8] usb usb5-port1: unable to enumerate USB device [ 82.418723][ T5216] usb usb4-port1: attempt power cycle [ 82.852866][ T5216] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.889114][ T5216] usb 4-1: device descriptor read/8, error -71 [ 82.957586][ T5527] netlink: 666 bytes leftover after parsing attributes in process `syz.0.62'. [ 83.168556][ T5216] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.198810][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 83.229119][ T5216] usb 4-1: device descriptor read/8, error -71 [ 83.348854][ T5216] usb usb4-port1: unable to enumerate USB device [ 83.403259][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 83.412520][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.423145][ T9] usb 2-1: Product: syz [ 83.427350][ T9] usb 2-1: Manufacturer: syz [ 83.432651][ T9] usb 2-1: SerialNumber: syz [ 83.449134][ T9] usb 2-1: config 0 descriptor?? [ 83.456769][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 83.568474][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.738464][ T25] usb 5-1: device descriptor read/64, error -71 [ 84.008387][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.178453][ T25] usb 5-1: device descriptor read/64, error -71 [ 84.253993][ T5540] FAULT_INJECTION: forcing a failure. [ 84.253993][ T5540] name failslab, interval 1, probability 0, space 0, times 0 [ 84.274467][ T5540] CPU: 0 UID: 0 PID: 5540 Comm: syz.0.69 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 84.285025][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 84.295140][ T5540] Call Trace: [ 84.298442][ T5540] [ 84.301392][ T5540] dump_stack_lvl+0x241/0x360 [ 84.306192][ T5540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.311421][ T5540] ? __pfx__printk+0x10/0x10 [ 84.316051][ T5540] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 84.320780][ T25] usb usb5-port1: attempt power cycle [ 84.321604][ T5540] ? __pfx___might_resched+0x10/0x10 [ 84.332363][ T5540] should_fail_ex+0x3b0/0x4e0 [ 84.337073][ T5540] ? tfrc_tx_hist_add+0x4b/0x100 [ 84.342038][ T5540] should_failslab+0xac/0x100 [ 84.346750][ T5540] ? tfrc_tx_hist_add+0x4b/0x100 [ 84.351721][ T5540] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 84.357134][ T5540] tfrc_tx_hist_add+0x4b/0x100 [ 84.361935][ T5540] ccid3_hc_tx_packet_sent+0x1a3/0x300 [ 84.367422][ T5540] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 84.373434][ T5540] dccp_xmit_packet+0x3e4/0x610 [ 84.378315][ T5540] ? __virt_addr_valid+0x183/0x530 [ 84.383457][ T5540] dccp_write_xmit+0x138/0x220 [ 84.388267][ T5540] dccp_sendmsg+0x76f/0xba0 [ 84.392822][ T5540] ? __pfx_dccp_sendmsg+0x10/0x10 [ 84.397869][ T5540] ? sock_rps_record_flow+0x1a/0x400 [ 84.403193][ T5540] ? inet_sendmsg+0x330/0x390 [ 84.407997][ T5540] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 84.413311][ T5540] ? security_socket_sendmsg+0x87/0xb0 [ 84.418798][ T5540] __sock_sendmsg+0x1a6/0x270 [ 84.423517][ T5540] ____sys_sendmsg+0x525/0x7d0 [ 84.428312][ T5540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.433616][ T5540] ? __might_fault+0xaa/0x120 [ 84.438293][ T5540] __sys_sendmmsg+0x3b2/0x740 [ 84.442977][ T5540] ? __pfx___sys_sendmmsg+0x10/0x10 [ 84.448196][ T5540] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 84.454170][ T5540] ? ksys_write+0x23e/0x2c0 [ 84.458661][ T5540] ? __pfx_lock_release+0x10/0x10 [ 84.463685][ T5540] ? vfs_write+0x7c4/0xc90 [ 84.468183][ T5540] ? __mutex_unlock_slowpath+0x21d/0x750 [ 84.473821][ T5540] ? __pfx_vfs_write+0x10/0x10 [ 84.478597][ T5540] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.484573][ T5540] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.490916][ T5540] ? do_syscall_64+0x100/0x230 [ 84.495694][ T5540] __x64_sys_sendmmsg+0xa0/0xb0 [ 84.500560][ T5540] do_syscall_64+0xf3/0x230 [ 84.505065][ T5540] ? clear_bhb_loop+0x35/0x90 [ 84.509761][ T5540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.515676][ T5540] RIP: 0033:0x7fd87a5799b9 [ 84.520531][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.540396][ T5540] RSP: 002b:00007fd87b427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.548805][ T5540] RAX: ffffffffffffffda RBX: 00007fd87a715f80 RCX: 00007fd87a5799b9 [ 84.556768][ T5540] RDX: 0000000000000002 RSI: 0000000020004600 RDI: 0000000000000004 [ 84.564737][ T5540] RBP: 00007fd87b427090 R08: 0000000000000000 R09: 0000000000000000 [ 84.572800][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.580762][ T5540] R13: 0000000000000000 R14: 00007fd87a715f80 R15: 00007ffdaa63ca38 [ 84.588743][ T5540] [ 84.600369][ T5540] packet history - out of memory! at net/dccp/ccids/ccid3.c:356/ccid3_hc_tx_packet_sent() [ 84.638857][ T5526] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.898492][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 84.939509][ T25] usb 5-1: device descriptor read/8, error -71 [ 85.152337][ T5555] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 85.281695][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 85.610939][ T25] usb 5-1: device descriptor read/8, error -71 [ 85.988835][ T9] ch341-uart ttyUSB0: failed to read break control: -110 [ 85.995978][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 85.996488][ T25] usb usb5-port1: unable to enumerate USB device [ 87.046675][ T25] usb 2-1: USB disconnect, device number 9 [ 87.054814][ T25] ch341 2-1:0.0: device disconnected [ 87.525123][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.77'. [ 91.091477][ T5605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.85'. [ 91.383261][ T5618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.789045][ T5634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 93.606980][ T5636] hub 9-0:1.0: USB hub found [ 93.618629][ T5636] hub 9-0:1.0: 8 ports detected [ 95.068924][ T5216] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.278537][ T5216] usb 2-1: Using ep0 maxpacket: 8 [ 95.303231][ T5216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.325041][ T5216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.352900][ T5216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 95.388984][ T5216] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 95.417493][ T5216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.454016][ T5216] usb 2-1: config 0 descriptor?? [ 95.528541][ T51] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 95.729971][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 95.751505][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.774172][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.821213][ T51] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 95.835332][ T51] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 95.854461][ T51] usb 4-1: Product: syz [ 95.895835][ T5665] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 95.907746][ T5216] apple 0003:05AC:0274.0003: item fetching failed at offset 6/70 [ 95.915862][ T51] usb 4-1: Manufacturer: syz [ 95.921646][ T5665] netlink: 5 bytes leftover after parsing attributes in process `syz.0.102'. [ 95.946720][ T51] usb 4-1: config 0 descriptor?? [ 95.969155][ T5216] apple 0003:05AC:0274.0003: parse failed [ 95.986574][ T5216] apple 0003:05AC:0274.0003: probe with driver apple failed with error -22 [ 96.106317][ T5644] 9pnet_fd: Insufficient options for proto=fd [ 96.213001][ T5216] usb 2-1: USB disconnect, device number 10 [ 96.479118][ T51] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0xd [ 96.583434][ T5675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.105'. [ 97.244269][ T51] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 97.545461][ T51] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 97.591745][ T51] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 97.640958][ T51] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -5 [ 97.786850][ T5691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.592488][ T51] usb 4-1: USB disconnect, device number 7 [ 100.788919][ T5700] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.110'. [ 101.621313][ T5720] process 'syz.0.116' launched './file1' with NULL argv: empty string added [ 101.749523][ T5722] capability: warning: `syz.1.118' uses deprecated v2 capabilities in a way that may be insecure [ 101.962680][ T5723] netlink: 'syz.2.117': attribute type 2 has an invalid length. [ 101.976885][ T5723] netlink: 5 bytes leftover after parsing attributes in process `syz.2.117'. [ 102.047678][ T5733] netlink: set zone limit has 8 unknown bytes [ 102.055495][ T5734] Zero length message leads to an empty skb [ 102.072063][ T5732] futex_wake_op: syz.4.119 tries to shift op by -1; fix this program [ 103.272869][ T5742] Bluetooth: MGMT ver 1.23 [ 103.931194][ T5744] netlink: 80 bytes leftover after parsing attributes in process `syz.4.123'. [ 104.596620][ T5766] trusted_key: syz.2.130 sent an empty control message without MSG_MORE. [ 106.610947][ T5778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 107.138612][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 108.828596][ T5790] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 108.840364][ T5790] netlink: 5 bytes leftover after parsing attributes in process `syz.1.134'. [ 110.562701][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.571621][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.942693][ T5838] netlink: set zone limit has 8 unknown bytes [ 111.581103][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.625735][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 111.791107][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 111.815852][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.851479][ T5854] netlink: 60 bytes leftover after parsing attributes in process `syz.2.148'. [ 111.858349][ T9] usb 5-1: Product: syz [ 111.867493][ T9] usb 5-1: Manufacturer: syz [ 111.883293][ T9] usb 5-1: SerialNumber: syz [ 111.908481][ T9] usb 5-1: config 0 descriptor?? [ 111.925217][ T9] ch341 5-1:0.0: ch341-uart converter detected [ 112.990230][ T9] usb 5-1: failed to receive control message: -110 [ 112.996914][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 113.319986][ T5864] netlink: 'syz.0.151': attribute type 2 has an invalid length. [ 113.334689][ T5864] netlink: 5 bytes leftover after parsing attributes in process `syz.0.151'. [ 114.244101][ T5216] usb 5-1: USB disconnect, device number 11 [ 114.250895][ T5216] ch341 5-1:0.0: device disconnected [ 114.548516][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 115.054360][ T5898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.131785][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 115.160680][ T25] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 120.433772][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.440747][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 120.451498][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.462196][ T25] usb 2-1: config 0 descriptor?? [ 120.544151][ T25] usb 2-1: can't set config #0, error -71 [ 120.716848][ T25] usb 2-1: USB disconnect, device number 11 [ 121.292960][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 122.388797][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 122.420960][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 122.456653][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 122.489346][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 122.509847][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.537440][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.550638][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 122.568455][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.577902][ T25] usb 2-1: Product: syz [ 122.582883][ T25] usb 2-1: Manufacturer: syz [ 122.587828][ T25] usb 2-1: SerialNumber: syz [ 122.608506][ T25] usb 2-1: config 0 descriptor?? [ 122.654125][ T25] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 122.753497][ T5925] tc_dump_action: action bad kind [ 122.845677][ T5927] netlink: set zone limit has 8 unknown bytes [ 122.858520][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.803695][ T5229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.850314][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 123.867027][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.888389][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.908461][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 123.917580][ T8] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 123.944247][ T8] usb 3-1: Product: syz [ 123.953681][ T8] usb 3-1: Manufacturer: syz [ 123.974197][ T8] usb 3-1: config 0 descriptor?? [ 123.998644][ T5229] usb 1-1: Using ep0 maxpacket: 32 [ 124.020831][ T5229] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=cc.be [ 124.048398][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.072677][ T5229] usb 1-1: Product: syz [ 124.076945][ T5229] usb 1-1: Manufacturer: syz [ 124.085205][ T5229] usb 1-1: SerialNumber: syz [ 124.115853][ T5229] usb 1-1: config 0 descriptor?? [ 124.332045][ T5925] netlink: 'syz.0.167': attribute type 12 has an invalid length. [ 124.358075][ T5925] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.167'. [ 124.418480][ T5268] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 124.431939][ T8] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0xd [ 124.475736][ T8] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 124.504520][ T5229] int51x1 1-1:0.0: probe with driver int51x1 failed with error -71 [ 124.531580][ T5229] usb 1-1: USB disconnect, device number 3 [ 124.632283][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.673922][ T5268] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.705609][ T5268] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.727235][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.740636][ T5268] usb 5-1: config 0 descriptor?? [ 124.862691][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.208552][ T5229] usb 2-1: USB disconnect, device number 12 [ 126.357444][ T8] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 126.391518][ T5268] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 126.418405][ T5268] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 126.419529][ T8] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 126.425878][ T5268] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 126.458372][ T5268] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 126.471895][ T5268] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 126.491533][ T5268] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 126.533156][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.545462][ T5268] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 126.573366][ T8] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 126.606038][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.677966][ T8] usb 3-1: USB disconnect, device number 3 [ 126.731869][ T5937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.744157][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 126.782880][ T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.925334][ T5268] usb 5-1: USB disconnect, device number 12 [ 128.374435][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.820361][ T25] usb 1-1: device descriptor read/64, error -71 [ 129.303631][ T5998] FAULT_INJECTION: forcing a failure. [ 129.303631][ T5998] name failslab, interval 1, probability 0, space 0, times 0 [ 129.318683][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.1.183 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 129.329308][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 129.339381][ T5998] Call Trace: [ 129.342673][ T5998] [ 129.345616][ T5998] dump_stack_lvl+0x241/0x360 [ 129.350340][ T5998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.355572][ T5998] ? __pfx__printk+0x10/0x10 [ 129.360199][ T5998] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 129.366206][ T5998] ? __pfx___might_resched+0x10/0x10 [ 129.371523][ T5998] should_fail_ex+0x3b0/0x4e0 [ 129.376226][ T5998] should_failslab+0xac/0x100 [ 129.380926][ T5998] ? __alloc_skb+0x1c3/0x440 [ 129.385537][ T5998] kmem_cache_alloc_node_noprof+0x71/0x320 [ 129.391364][ T5998] __alloc_skb+0x1c3/0x440 [ 129.395778][ T5998] ? __pfx___alloc_skb+0x10/0x10 [ 129.400721][ T5998] ? netlink_autobind+0xd6/0x2f0 [ 129.405673][ T5998] ? netlink_autobind+0x2b0/0x2f0 [ 129.410723][ T5998] netlink_sendmsg+0x638/0xcb0 [ 129.415526][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.420821][ T5998] ? __import_iovec+0x536/0x820 [ 129.425663][ T5998] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 129.431119][ T5998] ? security_socket_sendmsg+0x87/0xb0 [ 129.436594][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.441866][ T5998] __sock_sendmsg+0x221/0x270 [ 129.446540][ T5998] ____sys_sendmsg+0x525/0x7d0 [ 129.451302][ T5998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.456581][ T5998] __sys_sendmsg+0x2b0/0x3a0 [ 129.461163][ T5998] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.466271][ T5998] ? vfs_write+0x7c4/0xc90 [ 129.470691][ T5998] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.477176][ T5998] ? do_syscall_64+0x100/0x230 [ 129.481923][ T5998] ? do_syscall_64+0xb6/0x230 [ 129.486589][ T5998] do_syscall_64+0xf3/0x230 [ 129.491074][ T5998] ? clear_bhb_loop+0x35/0x90 [ 129.495734][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.502059][ T5998] RIP: 0033:0x7fcb1b7799b9 [ 129.506474][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.526094][ T5998] RSP: 002b:00007fcb1c515038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.534510][ T5998] RAX: ffffffffffffffda RBX: 00007fcb1b915f80 RCX: 00007fcb1b7799b9 [ 129.542466][ T5998] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 129.550422][ T5998] RBP: 00007fcb1c515090 R08: 0000000000000000 R09: 0000000000000000 [ 129.558375][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.566337][ T5998] R13: 0000000000000000 R14: 00007fcb1b915f80 R15: 00007fff9a7f72b8 [ 129.574565][ T5998] [ 129.577631][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.802537][ T6002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.066689][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.990425][ T6015] FAULT_INJECTION: forcing a failure. [ 131.990425][ T6015] name failslab, interval 1, probability 0, space 0, times 0 [ 135.297025][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.318336][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.378835][ T6015] CPU: 1 UID: 0 PID: 6015 Comm: syz.2.187 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 135.389464][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 135.399516][ T6015] Call Trace: [ 135.402788][ T6015] [ 135.405708][ T6015] dump_stack_lvl+0x241/0x360 [ 135.410401][ T6015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.415599][ T6015] ? __pfx__printk+0x10/0x10 [ 135.420276][ T6015] ? fs_reclaim_acquire+0x93/0x140 [ 135.425382][ T6015] ? __pfx___might_resched+0x10/0x10 [ 135.430661][ T6015] should_fail_ex+0x3b0/0x4e0 [ 135.435333][ T6015] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 135.441052][ T6015] should_failslab+0xac/0x100 [ 135.445723][ T6015] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 135.451525][ T6015] __kmalloc_noprof+0xd8/0x400 [ 135.456281][ T6015] ? kfree+0x4e/0x360 [ 135.460269][ T6015] tomoyo_realpath_from_path+0xcf/0x5e0 [ 135.465826][ T6015] tomoyo_path_number_perm+0x23a/0x880 [ 135.471282][ T6015] ? tomoyo_path_number_perm+0x208/0x880 [ 135.476907][ T6015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 135.482912][ T6015] ? __fget_files+0x29/0x470 [ 135.487493][ T6015] ? __fget_files+0x3f6/0x470 [ 135.492161][ T6015] ? __fget_files+0x29/0x470 [ 135.496747][ T6015] security_file_ioctl+0x75/0xb0 [ 135.501681][ T6015] __se_sys_ioctl+0x47/0x170 [ 135.506269][ T6015] do_syscall_64+0xf3/0x230 [ 135.510769][ T6015] ? clear_bhb_loop+0x35/0x90 [ 135.515440][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.521326][ T6015] RIP: 0033:0x7f64755799b9 [ 135.525763][ T6015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.545358][ T6015] RSP: 002b:00007f64762ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.553763][ T6015] RAX: ffffffffffffffda RBX: 00007f6475715f80 RCX: 00007f64755799b9 [ 135.561731][ T6015] RDX: 0000000020000000 RSI: 00000000c0606610 RDI: 0000000000000004 [ 135.569692][ T6015] RBP: 00007f64762ee090 R08: 0000000000000000 R09: 0000000000000000 [ 135.577659][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.585704][ T6015] R13: 0000000000000000 R14: 00007f6475715f80 R15: 00007ffcba532c28 [ 135.593680][ T6015] [ 135.737903][ T6015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.398397][ T51] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.613133][ T51] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.642377][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.652789][ T51] usb 4-1: Product: syz [ 136.657062][ T51] usb 4-1: Manufacturer: syz [ 136.667306][ T51] usb 4-1: SerialNumber: syz [ 136.771608][ T6048] binder: 6043:6048 ioctl 4018620d 0 returned -22 [ 136.947934][ T51] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 137.033358][ T51] usb 4-1: USB disconnect, device number 8 [ 137.912386][ T5233] udevd[5233]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.454130][ T5223] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 140.336752][ T6089] netlink: 256 bytes leftover after parsing attributes in process `syz.1.206'. [ 142.007120][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 142.007138][ T29] audit: type=1326 audit(1723712232.588:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87a5799b9 code=0x7ffc0000 [ 142.076034][ T29] audit: type=1326 audit(1723712232.658:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd87a5799b9 code=0x7ffc0000 [ 186.431591][ T5222] Bluetooth: hci2: command 0x0406 tx timeout [ 186.437661][ T5222] Bluetooth: hci3: command 0x0406 tx timeout [ 186.445265][ T5218] Bluetooth: hci1: command 0x0406 tx timeout [ 206.913163][ T5218] Bluetooth: hci4: command 0x0405 tx timeout [ 247.128320][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 247.135397][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6108/1:b..l [ 247.143727][ C1] rcu: (detected by 1, t=10502 jiffies, g=11345, q=302 ncpus=2) [ 247.151509][ C1] task:modprobe state:R running task stack:23680 pid:6108 tgid:6108 ppid:11 flags:0x00000000 [ 247.164245][ C1] Call Trace: [ 247.167539][ C1] [ 247.170493][ C1] __schedule+0x17ae/0x4a10 [ 247.175304][ C1] ? __pfx___schedule+0x10/0x10 [ 247.180174][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.186184][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 247.191492][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 247.196621][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 247.202376][ C1] irqentry_exit+0x5e/0x90 [ 247.206805][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.212806][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 247.219697][ C1] Code: 8d 42 28 4c 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 247.239344][ C1] RSP: 0018:ffffc9001738f418 EFLAGS: 00000293 [ 247.245431][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880216d3c00 [ 247.253414][ C1] RDX: ffff8880216d3c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 247.261403][ C1] RBP: ffffc9001738f610 R08: ffffffff8ba32114 R09: fffffbfff2a1fdf8 [ 247.269392][ C1] R10: dffffc0000000000 R11: fffffbfff2a1fdf8 R12: 0000000000000000 [ 247.277456][ C1] R13: 0000000000000003 R14: ffff88801f00b468 R15: ffff88801f00b60c [ 247.285487][ C1] ? mt_validate+0x914/0x4aa0 [ 247.290198][ C1] mt_validate+0x914/0x4aa0 [ 247.294721][ C1] ? ksys_mmap_pgoff+0x4f1/0x720 [ 247.299771][ C1] ? mt_validate+0x1a1/0x4aa0 [ 247.304464][ C1] ? __pfx_mt_validate+0x10/0x10 [ 247.309423][ C1] ? mark_lock+0x9a/0x350 [ 247.313778][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.320139][ C1] validate_mm+0xe7/0x530 [ 247.324512][ C1] ? __pfx_validate_mm+0x10/0x10 [ 247.329485][ C1] ? mas_find+0x987/0xbb0 [ 247.333845][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 247.339507][ C1] do_vmi_align_munmap+0x15dd/0x18c0 [ 247.344844][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 247.350586][ C1] ? mtree_range_walk+0x6fd/0x8e0 [ 247.355644][ C1] ? mas_find+0x8c0/0xbb0 [ 247.360079][ C1] do_vmi_munmap+0x261/0x2f0 [ 247.364693][ C1] mmap_region+0x72f/0x2090 [ 247.369206][ C1] ? mark_lock+0x9a/0x350 [ 247.374028][ C1] ? __pfx_mmap_region+0x10/0x10 [ 247.379094][ C1] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 247.385282][ C1] ? cap_mmap_addr+0x163/0x2c0 [ 247.390177][ C1] ? __get_unmapped_area+0x2f0/0x360 [ 247.395489][ C1] do_mmap+0x8f9/0x1010 [ 247.399764][ C1] ? __pfx_do_mmap+0x10/0x10 [ 247.404371][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 247.410015][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 247.415151][ C1] ? security_mmap_file+0x178/0x1a0 [ 247.420370][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 247.425001][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 247.430740][ C1] ? __fget_files+0x29/0x470 [ 247.435345][ C1] ? __fget_files+0x3f6/0x470 [ 247.440043][ C1] ksys_mmap_pgoff+0x4f1/0x720 [ 247.444834][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 247.449623][ C1] do_syscall_64+0xf3/0x230 [ 247.454146][ C1] ? clear_bhb_loop+0x35/0x90 [ 247.458834][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.464735][ C1] RIP: 0033:0x7f7b89099b74 [ 247.469158][ C1] RSP: 002b:00007ffeb2871088 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 247.477591][ C1] RAX: ffffffffffffffda RBX: 00007ffeb2871100 RCX: 00007f7b89099b74 [ 247.485660][ C1] RDX: 0000000000000001 RSI: 0000000000053000 RDI: 00007f7b88f4c000 [ 247.493650][ C1] RBP: 00007ffeb2871820 R08: 0000000000000000 R09: 000000000014b000 [ 247.501647][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f7b890755c0 [ 247.509637][ C1] R13: 00007ffeb28718a8 R14: 000000000014ab8e R15: 0000000000000000 [ 247.517646][ C1] [ 247.520683][ C1] rcu: rcu_preempt kthread starved for 10190 jiffies! g11345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 247.531894][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 247.541872][ C1] rcu: RCU grace-period kthread stack dump: [ 247.547764][ C1] task:rcu_preempt state:R running task stack:25232 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 247.560307][ C1] Call Trace: [ 247.563594][ C1] [ 247.566710][ C1] __schedule+0x17ae/0x4a10 [ 247.571259][ C1] ? __pfx___schedule+0x10/0x10 [ 247.576142][ C1] ? __pfx_lock_release+0x10/0x10 [ 247.581181][ C1] ? __asan_memset+0x23/0x50 [ 247.585794][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 247.591620][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.597979][ C1] ? schedule+0x90/0x320 [ 247.602248][ C1] schedule+0x14b/0x320 [ 247.606427][ C1] schedule_timeout+0x1be/0x310 [ 247.611312][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 247.616703][ C1] ? __pfx_process_timeout+0x10/0x10 [ 247.622101][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 247.627671][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 247.632542][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 247.637759][ C1] ? rcu_gp_init+0x1256/0x1630 [ 247.642551][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 247.647494][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 247.653675][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 247.658992][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 247.665165][ C1] ? finish_swait+0xd4/0x1e0 [ 247.669776][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 247.674382][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 247.679588][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 247.685505][ C1] ? __kthread_parkme+0x169/0x1d0 [ 247.690554][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 247.695774][ C1] kthread+0x2f0/0x390 [ 247.699858][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 247.705067][ C1] ? __pfx_kthread+0x10/0x10 [ 247.709673][ C1] ret_from_fork+0x4b/0x80 [ 247.714114][ C1] ? __pfx_kthread+0x10/0x10 [ 247.718719][ C1] ret_from_fork_asm+0x1a/0x30 [ 247.723516][ C1] [ 247.726542][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 247.732876][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 247.743393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 247.753461][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 247.758768][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d e5 92 9b 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 247.778388][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 247.784469][ C1] RAX: ffff888017af0000 RBX: ffff88801bae1864 RCX: 0000000000751ab9 [ 247.792540][ C1] RDX: 0000000000000001 RSI: ffff88801bae1800 RDI: ffff88801bae1864 [ 247.800521][ C1] RBP: 000000000003a678 R08: ffff8880b9337c7b R09: 1ffff11017266f8f [ 247.808499][ C1] R10: dffffc0000000000 R11: ffffffff8badac90 R12: ffff88801b348800 [ 247.816477][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eecaa20 [ 247.824457][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 247.833393][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.840002][ C1] CR2: 00007fcb1c4f3f98 CR3: 000000007c364000 CR4: 00000000003506f0 [ 247.848078][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.856144][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.864210][ C1] Call Trace: [ 247.867501][ C1] [ 247.870352][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 247.876702][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 247.882369][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 247.888197][ C1] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 247.894461][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 247.900719][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 247.906129][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 247.911774][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 247.916992][ C1] ? update_process_times+0x1ce/0x230 [ 247.922474][ C1] ? tick_nohz_handler+0x37c/0x500 [ 247.927598][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 247.933157][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 247.938547][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 247.944655][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 247.950566][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 247.956653][ C1] ? hrtimer_interrupt+0x396/0x990 [ 247.961798][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 247.967970][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 247.973794][ C1] [ 247.976746][ C1] [ 247.979684][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.985866][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 247.991180][ C1] ? acpi_safe_halt+0x21/0x30 [ 247.995867][ C1] acpi_idle_enter+0xe4/0x140 [ 248.000558][ C1] cpuidle_enter_state+0x112/0x480 [ 248.005679][ C1] ? __pfx_menu_select+0x10/0x10 [ 248.010632][ C1] cpuidle_enter+0x5d/0xa0 [ 248.015061][ C1] do_idle+0x375/0x5d0 [ 248.019154][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.025516][ C1] ? __pfx_do_idle+0x10/0x10 [ 248.030114][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 248.035338][ C1] cpu_startup_entry+0x42/0x60 [ 248.040123][ C1] start_secondary+0x100/0x100 [ 248.044909][ C1] common_startup_64+0x13e/0x147 [ 248.049871][ C1] [ 249.012787][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.019188][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.158392][ T29] audit: type=1326 audit(1723712232.688:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87a5799b9 code=0x7ffc0000 [ 249.448526][ T29] audit: type=1326 audit(1723712232.698:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd87a5799b9 code=0x7ffc0000 SYZFAIL: failed to send rpc fd=3 want=320 sent=0 n=-1 (errno 32: Broken pipe) [ 249.797161][ T29] audit: type=1326 audit(1723712339.768:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87a5799b9 code=0x7ffc0000 [ 249.848509][ T29] audit: type=1326 audit(1723712339.768:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87a5799b9 code=0x7ffc0000 [ 251.114556][ T5213] syz-executor (5213) used greatest stack depth: 19152 bytes left [ 251.391595][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.511885][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.562290][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.624369][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.771003][ T52] bridge_slave_1: left allmulticast mode [ 251.777522][ T52] bridge_slave_1: left promiscuous mode [ 251.786362][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.803555][ T52] bridge_slave_0: left allmulticast mode [ 251.809464][ T52] bridge_slave_0: left promiscuous mode [ 251.815170][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.109388][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.122154][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.132314][ T52] bond0 (unregistering): Released all slaves [ 252.563712][ T52] hsr_slave_0: left promiscuous mode [ 252.570195][ T52] hsr_slave_1: left promiscuous mode [ 252.576209][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.583787][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.593860][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.601377][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.622920][ T52] veth1_macvtap: left promiscuous mode [ 252.629915][ T52] veth0_macvtap: left promiscuous mode [ 252.635464][ T52] veth1_vlan: left promiscuous mode [ 252.641031][ T52] veth0_vlan: left promiscuous mode [ 253.007499][ T52] team0 (unregistering): Port device team_slave_1 removed [ 253.045774][ T52] team0 (unregistering): Port device team_slave_0 removed [ 253.752158][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.819476][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.911433][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.982376][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.189305][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.241657][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.309645][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.393568][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.566213][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.671424][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.770809][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.854141][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.008239][ T52] bridge_slave_1: left allmulticast mode [ 255.014129][ T52] bridge_slave_1: left promiscuous mode [ 255.026611][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.038019][ T52] bridge_slave_0: left allmulticast mode [ 255.045705][ T52] bridge_slave_0: left promiscuous mode [ 255.055966][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.067407][ T52] bridge_slave_1: left allmulticast mode [ 255.073403][ T52] bridge_slave_1: left promiscuous mode [ 255.079839][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.091285][ T52] bridge_slave_0: left allmulticast mode [ 255.096971][ T52] bridge_slave_0: left promiscuous mode [ 255.103442][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.114848][ T52] bridge_slave_1: left allmulticast mode [ 255.121405][ T52] bridge_slave_1: left promiscuous mode [ 255.127074][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.136452][ T52] bridge_slave_0: left allmulticast mode [ 255.142783][ T52] bridge_slave_0: left promiscuous mode [ 255.149110][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.800869][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.812674][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.826485][ T52] bond0 (unregistering): Released all slaves [ 255.905624][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.916327][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.927777][ T52] bond0 (unregistering): Released all slaves [ 256.011454][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.027211][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.037875][ T52] bond0 (unregistering): Released all slaves [ 256.042362][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.053264][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.865995][ T52] hsr_slave_0: left promiscuous mode [ 256.872277][ T52] hsr_slave_1: left promiscuous mode [ 256.881383][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.891515][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.900164][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.907598][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.927251][ T52] hsr_slave_0: left promiscuous mode [ 256.933580][ T52] hsr_slave_1: left promiscuous mode [ 256.942756][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.951374][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.959747][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.967153][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.978048][ T52] hsr_slave_0: left promiscuous mode [ 256.986208][ T52] hsr_slave_1: left promiscuous mode [ 256.992945][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.000784][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.008622][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.016094][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.052203][ T52] veth1_macvtap: left promiscuous mode [ 257.057713][ T52] veth0_macvtap: left promiscuous mode [ 257.064322][ T52] veth1_vlan: left promiscuous mode [ 257.069772][ T52] veth0_vlan: left promiscuous mode [ 257.076409][ T52] veth1_macvtap: left promiscuous mode [ 257.082137][ T52] veth0_macvtap: left promiscuous mode [ 257.087759][ T52] veth1_vlan: left promiscuous mode [ 257.094053][ T52] veth0_vlan: left promiscuous mode