last executing test programs: 2m21.418858438s ago: executing program 0 (id=65): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x5, 0x5, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x6, 0x7ff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a000000000a0000080900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000500000a400000000370000480340001800b0001006578746864720000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120800064000000001040004800900010073797a300000000014000000110001000059ce9eb1538c7c4400000a19d59bd62b91fd13696374cbc0624d39514a9f32e9062ad35bc949429e18ce61726a78b0e425c900000000000000c4a85be15456f9f0fa383e4c199e56ef9475bd217521df5c0983cc84a28377d6f95751deafaf0737c1a6abf0bf7784a547b3c892f5f5d8e5bf86074bb38ffe2ed0c089f9d30a8313b75d2245c1c334dc3e43bb70ebd48bc365a4dc7caf76409eaadd49fe86dc27"], 0x10c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) (async) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'gretap0\x00'}}, 0x1e) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="beba20a0c1e0ebebba36f9976f4534e406482dfcd42c0c15c5f860b9f0f210ab397fc037f4bae4d2492d041dcc130dddd97fef9ad9e9be51238c0ce5b63776383b9d57a67e81bed665925a1432d6dce425efc13c7143fe0a02a74ba06e7c29c5", 0x60}, {0x0}], 0x2}}], 0x1, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="beba20a0c1e0ebebba36f9976f4534e406482dfcd42c0c15c5f860b9f0f210ab397fc037f4bae4d2492d041dcc130dddd97fef9ad9e9be51238c0ce5b63776383b9d57a67e81bed665925a1432d6dce425efc13c7143fe0a02a74ba06e7c29c5", 0x60}, {0x0}], 0x2}}], 0x1, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 2m20.219258375s ago: executing program 0 (id=67): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119100000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2m20.128033619s ago: executing program 0 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000400168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x30, 0xffff, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xff, 0x3, 0x8}]}}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffffffffffa888}}}}}}}, 0x42) 2m19.670888291s ago: executing program 0 (id=72): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2400000}}]}, 0x38}}, 0x44080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3800005500e50100002e8328290000070000009f1ace57ec920a6cd4d893d55ec7e1cc9ab2dd564bfbc1371c1afa829eb01cdfafad3492186dfe06e6a499a77b6174e9e921cdeed70ced3ca32085c956c8ed79e115ca5a57fe78383d79df4ae1450875ae8b31ee198fb3bebee1c6a74e5f036edb3e59d925b60e0384d4942fb42b57553f406169a73086b86f43b873ae3bb2f407da0c917776886bb24160392d48d1805d37092240d9bca1e0ed3380b5", @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) fanotify_init(0x200, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, &(0x7f0000000380)=""/167, 0xa7) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) read$FUSE(r4, &(0x7f00000082c0)={0x2020}, 0x2020) 2m18.819157001s ago: executing program 0 (id=78): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x40, 0x7fff0000}]}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet(0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) 2m17.247658515s ago: executing program 0 (id=81): socket$alg(0x26, 0x5, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) socket$l2tp6(0xa, 0x2, 0x73) mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x2040000) r1 = syz_open_dev$vim2m(0x0, 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="840100001800010000000000000000001d0109004d000f8025b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2f"], 0x184}}, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x20942, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_io_uring_setup(0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)=0x79) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='jfs\x00', 0x0, 0x0) 2m2.179276649s ago: executing program 32 (id=81): socket$alg(0x26, 0x5, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) socket$l2tp6(0xa, 0x2, 0x73) mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x2040000) r1 = syz_open_dev$vim2m(0x0, 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="840100001800010000000000000000001d0109004d000f8025b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2f"], 0x184}}, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x20942, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_io_uring_setup(0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)=0x79) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='jfs\x00', 0x0, 0x0) 43.45374646s ago: executing program 1 (id=460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="80040000000000080a000100aaaaaaaaaa150000080004"], 0x318}}, 0x0) 42.914793749s ago: executing program 1 (id=465): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x7, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8, 0x4}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}}, 0x0) 42.039226633s ago: executing program 1 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, 0x0, 0x0, 0x2000000002, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (fail_nth: 10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) syz_open_dev$vcsn(0x0, 0x1cb1, 0x40240) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000280)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}) unshare(0x22020400) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x228200, 0x0) fgetxattr(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) unshare(0x2a020400) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, 0x0, 0x0) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 41.531192585s ago: executing program 1 (id=469): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x82, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000040)={{@my=0x1}, 0x2000000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x9, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 40.8476503s ago: executing program 1 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}, 0x1, 0x0, 0xa6ff}, 0x0) 39.874408846s ago: executing program 1 (id=475): syz_emit_ethernet(0x2a, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb0, &(0x7f00000004c0)=""/176, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x3, 0x9, 0x3}, {0x0, 0x2, 0xe, 0xb}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x244c, &(0x7f0000000680)={0x0, 0x20, 0x400, 0x0, 0xfffffffc}, 0x0, 0x0) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) r8 = socket(0x10, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x1, 0x200, 0x3, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0x4, [{@loopback, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x40, 0x1, 0x9, [{@loopback, 0xbf}]}]}}}}}) 24.320396736s ago: executing program 33 (id=475): syz_emit_ethernet(0x2a, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb0, &(0x7f00000004c0)=""/176, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x3, 0x9, 0x3}, {0x0, 0x2, 0xe, 0xb}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x244c, &(0x7f0000000680)={0x0, 0x20, 0x400, 0x0, 0xfffffffc}, 0x0, 0x0) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) r8 = socket(0x10, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x1, 0x200, 0x3, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0x4, [{@loopback, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x40, 0x1, 0x9, [{@loopback, 0xbf}]}]}}}}}) 17.407282381s ago: executing program 3 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [], {0x14}}, 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)=',', 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 13.684101702s ago: executing program 3 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000040300004802c0001800c000100636f756e746572001c0002800c00024000400000000000000c00014000000000000000080900010073797a30000000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082abd7000ffdb2c0005000201aaaa01000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="8d437a5771"]}]}, 0x30}}, 0xc000) waitid(0x1, r2, &(0x7f0000000480), 0x20000000, &(0x7f0000000500)) 12.164165529s ago: executing program 3 (id=542): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x1e9002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) write$sndseq(r0, &(0x7f0000001200)=[{0x5, 0x3, 0x0, 0x0, @tick=0xfffffffe, {}, {}, @raw8={"14104da2c4516b845be2d30c"}}], 0x1c) 11.870847648s ago: executing program 3 (id=544): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_init_net_socket$ax25(0x3, 0x5, 0x8) setresuid(0x0, r2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="470100d4000019000500feff"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {0x0, 0xffe0}, {0xf}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x0, 0xc, 0x80}}, {0x4}}]}]}, 0x68}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20000010) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x840000000002, 0x3, 0xfa) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0x81, 0xd, 0x2c2f, 0x7f, 0x1, "1381146fee396d8d24902b030211e952c832fe"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000018c0)=0x13) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x46, 0xcf, 0x10, 0x4dd, 0x8002, 0xfcb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x9, 0x3e, {0x3e, 0x1, "52b47417f4ff7b39f991f1f2aabcfc387edcd0160c8a56257e3a26bba31f820309a894ec3abf52663f16805193ede0fa7fd7ba57541bef78e801791e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000740)={0x0, 0xf, 0x85, {0x5, 0xf, 0x85, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x1, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x12, "5dd6e18e58df02d6d7dbdc0406ea92fa"}, @generic={0x54, 0x10, 0xb, "7adb4f75746010f333979ebb14d0f51419dcbc19056f225ee1e9cee3d236071f691a91b027388677bc3f8f545f35b30d08879406f8fb764f5c8890c458075d29e7a9f8e8cf2b026f05ae00089fd99999aa"}, @ext_cap={0x7, 0x10, 0x2, 0x55a58a1c9a61f481, 0xc, 0xe, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xfa, 0x5, 0xfffb}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0xa, 0x69, "a5f3a70d", "710f2ecb"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0x1, 0xff, 0x3, 0xe412, 0x6}}}, &(0x7f0000000680)={0xdc, &(0x7f0000000240)={0x0, 0x14, 0x4a, "27b74e31bf0e8a1c009ac6e248c193592409f0b2cc0969c8f6da2daedbbcbeb771760fa4eb407d5a25d45cb7859776efcba8a13d7b065962fadeb6c71e6a70340a6e02c7d90cc5705359"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000440)={0x40, 0xb, 0x2, "5201"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000540)={0x40, 0x19, 0x2, "a987"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x31}, &(0x7f0000000100)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x2}}) 10.119096188s ago: executing program 3 (id=550): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x11, 0xa, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000100)="014f768e9a", 0x5}) sendmsg$can_bcm(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x21, r8, 0x202, &(0x7f0000000000)={0x0}) ptrace$cont(0x9, r8, 0x4, 0x6) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x2000c004) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r0}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001040)={r9, 0x2a68, 0x6}, &(0x7f00000010c0)=0x8) 10.118686889s ago: executing program 4 (id=551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffca, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 9.959122483s ago: executing program 2 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380), 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)=',', 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 9.811891879s ago: executing program 5 (id=553): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x3882868, &(0x7f0000000340)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x5}}, {@ignoreqv}, {@msize={'msize', 0x3d, 0x4b387188}}, {@dfltuid}, {@nodevmap}, {@nodevmap}, {@loose}, {@uname={'uname', 0x3d, '-,^+'}}, {@access_uid}], [{@smackfshat={'smackfshat', 0x3d, '+---('}}]}}) 8.90755115s ago: executing program 2 (id=554): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x3882868, &(0x7f0000000340)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x5}}, {@ignoreqv}, {@msize={'msize', 0x3d, 0x4b387188}}, {@dfltuid}, {@nodevmap}, {@nodevmap}, {@loose}, {@uname={'uname', 0x3d, '-,^+'}}, {@access_uid}], [{@smackfshat={'smackfshat', 0x3d, '+---('}}]}}) 8.858904091s ago: executing program 4 (id=555): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x797ebf7b9149008}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000001c0)="432befe4", 0x4}], 0x2}, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0x48) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2000000000000007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f00000000c0)=@md5={0x1, "06bd095ee79087fef4ac806b53a4f6da"}, 0x11, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) write$P9_RLINK(r8, &(0x7f0000000640)={0x7, 0x47, 0x2}, 0x7) syz_clone(0x40020000, &(0x7f0000000240)="d73d5dd4b3060b51f7701efbf37deefc3ee6f886873c98df8c9a687a5517239ae63b3194a63b3b6fa6bde5239698ce1dd95258e0dd185a494183b82b03c2a7b912b2d38adbb0bb9914e3e86e24a7212ab80dbffa8f26069c45a786eefc1e5dbd7fe7979eb1748f14351b5a06f2f3f770eb04e3a3e87f83dca89cbbbfc9187d0868c30c1ec6a3397d00aeaa7240963b3ea12592c7e2bb3990983680fb139c50a34c1432d95f5e8d38ebc8c3427bca3b0dc4ba", 0xb2, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000540)="fb25857819c26f52d53b4873c6429bd3ae3ac7875372c4ce0a4d8d7232e71760ce46f48713726eab881f10415c4b4fc6d01daaa59c38a42fe842aee0773cdea5e26d882576e5ef118094eef4296aeb7c9b467a3e914b110fd3f0ecf8d9811f879061ea72ad12833b87b5c6c35942b6d1a90df0a45799dc55da8675598a5c6f009efa2103eee3ebc62e79816db213a62b663fd19b0155bc06d4e91ca533a4068922b8c205380bf22d76410b26990e056add6572399c0aaf67a10b760a92043702eda02108ddcf1b9316ea72c83698acffb9a2563d0b7b79804e0427") r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) keyctl$dh_compute(0x17, &(0x7f0000000000)={r9, r9, r9}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'sha384-ssse3\x00'}}) 8.744960987s ago: executing program 5 (id=556): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000002fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x44) 8.494563335s ago: executing program 2 (id=557): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a69, 0x8001, '\x00', @ptr=0x20002000}}) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x2, 0x422401) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083598082e59a49e8aefc0b45ff810500000000070058000b480400945f640094272d7061d328b92d00000000", 0x35}], 0x1) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000001440)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x8b\xf4\x87\xe5I\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x066\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06', 0x0) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x4000007b, r7, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x80) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r9}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000440)={0x8, r9}) (async) recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/16, 0x10}, 0x9}], 0x0, 0x10025, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) (async) r10 = syz_io_uring_setup(0x604b, &(0x7f0000000200)={0x0, 0xe9d3, 0x200, 0x2, 0x281}, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000400)={0x1, 'bond_slave_1\x00', {}, 0x4}) (async) io_uring_setup(0x7b8d, &(0x7f0000000340)={0x0, 0x37eb, 0xa48, 0x0, 0x2db, 0x0, r10}) (async) r11 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000004180)={"0070491d", 0x0, 0x5, 0x2, 0x0, 0xc7, '\x00', "426ec62b", "0500", '\x00', ["e86621d9cc668c391f77c506", "3549ffffffffffffff00", "2fc7977386a7a0f3fffffff0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r11, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x21, 0x0, 0xffffffff, "01e60000000000000034dbb39fe6083a", 0x3, 0x0, 0x1, 0x0, 0x0, 0x26}) (async) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='virtiofs\x00', 0x0, &(0x7f0000000140)='&\x00') 8.318931278s ago: executing program 5 (id=558): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000064dd8950782a08f7b162018433f26d259985af4d6feffffff80cbeac62135b857bc377586deb97e869eae6d0167c845d398688fa915c5dc3b2a4b8a3976348ff420ef528af3c804000000100000005e2bcfed5a795c57a74f1ba56b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x5c1}], 0x1}}], 0x2, 0x240080a0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='9p\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000040)='%((@\x00') r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x7) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="8401000000000000000005001e0900000000000000000000000000fe800001000100aa0000000020000000ea00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001064e00000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400686d616328736861312d6176783229000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000"], 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='oom_score\x00') exit(0x0) lseek(r8, 0x2000, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x2}) setsockopt$MRT_FLUSH(r10, 0x0, 0xd1, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 8.265708809s ago: executing program 2 (id=559): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x40, 0x7fff0000}]}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) 6.326912478s ago: executing program 2 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [], {0x14}}, 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)=',', 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 6.273318829s ago: executing program 6 (id=510): r0 = socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x20, 0xfffffed4}}, 0x40) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 6.215405125s ago: executing program 5 (id=561): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000)=0x1, 0x0) close(r0) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.459287765s ago: executing program 5 (id=562): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f0000000340), 0x0, 0x4, 0x9) 3.458680037s ago: executing program 2 (id=563): syz_usb_connect(0x4, 0x21e, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) prlimit64(r0, 0x8, &(0x7f0000000180)={0x7fffffffffffffff}, &(0x7f00000001c0)) clock_adjtime(0x7, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58030000170001000000000000000000e00000020000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000010000000000000008000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000ac1414aa000000000000000000000000000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e0000000000000000000000000000000000000000000000000014000d00ac1e0001000000000000000000000000e60008"], 0x358}}, 0x0) 3.423697316s ago: executing program 4 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffca, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000010100800c000000000000000000000014000100fe8000000000000000000000000000aa50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd0000000000000000"], 0x114}], 0x1}, 0x0) 1.703217036s ago: executing program 5 (id=565): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) sendto$inet(r3, &(0x7f00000000c0)="d139d82ff154da98c188bb742945d15f4ad94030239e6a2af0dd398b7529ac306212ee5e2d591acec54c4fed52811123387bf81f81a62083b4033e0591a0e31ad540f0ce13e7585d4d782225eb6a80bef801510ee1b9d76d2c7483474dfdc34e5ba9adf08088b6077b25ace8e2ef6c683633521e4ab9bc467aa979b52188001e0bf21534982675c0509fa08705100051c534bef590bcac0467360f8850bb5c7ac6a9050bfc2fad07e2d31db55ebc313b5ca6d0a3637165e9b8e638322579bcc5a0aaac6a4e54241bfff5d1bbe2a4d55febf3af2b59bcda749fcbc67aed24bdc86ef3529d3bddc5026df21f80e08b0a", 0xef, 0x8000, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x6, 0x89a3) sendmmsg$inet6(r4, &(0x7f0000000200), 0x0, 0x2008c0c1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1003}, 0x4) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000006380)={0x2020}, 0x2020) syz_clone(0xaa106400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.70234442s ago: executing program 4 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd70d13b285600fbdbdf25050000800e00010069623a64766d7230300000000c000280080001"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x3, 0x800, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x34, r4, 0x100, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4020000) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8014a80}, 0x6d, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1411, 0x50b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000039b000000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008044) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x80082) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000e0a1886bac2af9c794bf7e870001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff010000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14040400fe8800000000000000000000000000010c000280050001000000000008000740000000001800068014000400200100000000000000000000000000010100"/184], 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x17, 0x78, 0x1}, 0x18}, 0x1, 0x5502000000000000}, 0x0) 1.01411027s ago: executing program 4 (id=567): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffe]}, 0x0, 0x8) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@var={0x6, 0x0, 0x0, 0xe, 0x4}, @ptr={0x9, 0x0, 0x0, 0x2, 0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x7d, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x6}}, @const={0xc, 0x0, 0x0, 0xa, 0x4}, @union={0x7, 0x1, 0x0, 0x5, 0x0, 0x51b7, [{0x10, 0x0, 0x1ff}]}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000580)=""/86, 0x9d, 0x56, 0x1, 0xe4b, 0x0, @void, @value}, 0x28) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xa002, 0x0) 835.183757ms ago: executing program 3 (id=568): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r0 = syz_io_uring_setup(0x2232, &(0x7f0000000280)={0x0, 0x2, 0x100}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13}) io_uring_enter(r0, 0x53d1, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r0, 0x53d1, 0x0, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001240)=0x803, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000150081ae08060cdc030000007f03e3f7004003006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00034006080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, 0x0, &(0x7f0000001200)) (async) getsockopt$bt_hci(r3, 0x84, 0x81, 0x0, &(0x7f0000001200)) 0s ago: executing program 4 (id=569): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='fdb_delete\x00', r4}, 0x18) r5 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000018010040"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.193' (ED25519) to the list of known hosts. [ 58.171986][ T5805] cgroup: Unknown subsys name 'net' [ 58.307672][ T5805] cgroup: Unknown subsys name 'cpuset' [ 58.316406][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.551285][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.942895][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.952121][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.956831][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.960224][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.969198][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.983257][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.983366][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.991043][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.999048][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.005526][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.012922][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.025579][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.028718][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.040682][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.050252][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.050397][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.057778][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.075921][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.077497][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.087405][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.091054][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.097378][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.104556][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.112193][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.127232][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.134699][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.152805][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.170038][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.180654][ T5823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.188141][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.581195][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 62.627974][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 62.651298][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 62.737746][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 62.813275][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 62.837894][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.846887][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.854462][ T5820] bridge_slave_0: entered allmulticast mode [ 62.861219][ T5820] bridge_slave_0: entered promiscuous mode [ 62.869848][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.877005][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.884297][ T5820] bridge_slave_1: entered allmulticast mode [ 62.891226][ T5820] bridge_slave_1: entered promiscuous mode [ 63.000020][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.015436][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.024669][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.031844][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.040365][ T5819] bridge_slave_0: entered allmulticast mode [ 63.047143][ T5819] bridge_slave_0: entered promiscuous mode [ 63.054876][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.061995][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.070124][ T5817] bridge_slave_0: entered allmulticast mode [ 63.076909][ T5817] bridge_slave_0: entered promiscuous mode [ 63.091759][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.099052][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.106668][ T5816] bridge_slave_0: entered allmulticast mode [ 63.113263][ T5816] bridge_slave_0: entered promiscuous mode [ 63.136966][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.144216][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.151378][ T5819] bridge_slave_1: entered allmulticast mode [ 63.158736][ T5819] bridge_slave_1: entered promiscuous mode [ 63.165607][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.172694][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.180129][ T5817] bridge_slave_1: entered allmulticast mode [ 63.186747][ T5817] bridge_slave_1: entered promiscuous mode [ 63.198528][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.205788][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.213016][ T5816] bridge_slave_1: entered allmulticast mode [ 63.220018][ T5816] bridge_slave_1: entered promiscuous mode [ 63.238807][ T5820] team0: Port device team_slave_0 added [ 63.247201][ T5820] team0: Port device team_slave_1 added [ 63.308521][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.318695][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.326091][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.333284][ T5815] bridge_slave_0: entered allmulticast mode [ 63.340338][ T5815] bridge_slave_0: entered promiscuous mode [ 63.358600][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.376012][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.382989][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.409393][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.423709][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.433710][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.440888][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.448212][ T5815] bridge_slave_1: entered allmulticast mode [ 63.455415][ T5815] bridge_slave_1: entered promiscuous mode [ 63.464305][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.475625][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.485242][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.492191][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.518250][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.547249][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.600492][ T5819] team0: Port device team_slave_0 added [ 63.615029][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.637527][ T5816] team0: Port device team_slave_0 added [ 63.647728][ T5819] team0: Port device team_slave_1 added [ 63.655405][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.675014][ T5817] team0: Port device team_slave_0 added [ 63.690596][ T5816] team0: Port device team_slave_1 added [ 63.724094][ T5815] team0: Port device team_slave_0 added [ 63.731824][ T5817] team0: Port device team_slave_1 added [ 63.753169][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.761011][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.788343][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.810316][ T5815] team0: Port device team_slave_1 added [ 63.834734][ T5820] hsr_slave_0: entered promiscuous mode [ 63.841107][ T5820] hsr_slave_1: entered promiscuous mode [ 63.848482][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.856177][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.882726][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.899796][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.906990][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.933409][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.970709][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.977727][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.003941][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.020194][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.027448][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.053662][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.067026][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.074078][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.100101][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.111743][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.119098][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.145529][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.157969][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.165030][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.192119][ T5823] Bluetooth: hci0: command tx timeout [ 64.192818][ T5827] Bluetooth: hci4: command tx timeout [ 64.198177][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.209281][ T5829] Bluetooth: hci1: command tx timeout [ 64.253921][ T5827] Bluetooth: hci2: command tx timeout [ 64.256659][ T5829] Bluetooth: hci3: command tx timeout [ 64.276343][ T5816] hsr_slave_0: entered promiscuous mode [ 64.282584][ T5816] hsr_slave_1: entered promiscuous mode [ 64.291796][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.299685][ T5816] Cannot create hsr debugfs directory [ 64.313690][ T5819] hsr_slave_0: entered promiscuous mode [ 64.320640][ T5819] hsr_slave_1: entered promiscuous mode [ 64.326995][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.335074][ T5819] Cannot create hsr debugfs directory [ 64.350919][ T5815] hsr_slave_0: entered promiscuous mode [ 64.358060][ T5815] hsr_slave_1: entered promiscuous mode [ 64.364428][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.372025][ T5815] Cannot create hsr debugfs directory [ 64.485236][ T5817] hsr_slave_0: entered promiscuous mode [ 64.491374][ T5817] hsr_slave_1: entered promiscuous mode [ 64.498975][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.507205][ T5817] Cannot create hsr debugfs directory [ 64.736191][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.763031][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.783406][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.808851][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.849262][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.867751][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.886098][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.899979][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.922455][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.953586][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.973384][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.001761][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.058234][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.070834][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.097277][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.107963][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.152946][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.163297][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.190377][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.199555][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.268156][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.331547][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.344259][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.353817][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.370585][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.393942][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.401206][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.413554][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.420709][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.438457][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.445605][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.464344][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.476908][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.484069][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.498958][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.506111][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.545476][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.553086][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.592211][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.665499][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.676314][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.697280][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.704476][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.727881][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.748415][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.755600][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.822969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.830136][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.887090][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.894261][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.953684][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.100452][ T5819] veth0_vlan: entered promiscuous mode [ 66.123649][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.161310][ T5819] veth1_vlan: entered promiscuous mode [ 66.197159][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.254963][ T5829] Bluetooth: hci0: command tx timeout [ 66.255908][ T5827] Bluetooth: hci1: command tx timeout [ 66.260433][ T5823] Bluetooth: hci4: command tx timeout [ 66.282228][ T5819] veth0_macvtap: entered promiscuous mode [ 66.308285][ T5820] veth0_vlan: entered promiscuous mode [ 66.336615][ T5827] Bluetooth: hci2: command tx timeout [ 66.336625][ T5829] Bluetooth: hci3: command tx timeout [ 66.361969][ T5820] veth1_vlan: entered promiscuous mode [ 66.371862][ T5819] veth1_macvtap: entered promiscuous mode [ 66.403386][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.448558][ T5820] veth0_macvtap: entered promiscuous mode [ 66.473304][ T5820] veth1_macvtap: entered promiscuous mode [ 66.483698][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.501107][ T5816] veth0_vlan: entered promiscuous mode [ 66.528625][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.550764][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.578230][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.588247][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.598153][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607426][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.627795][ T5816] veth1_vlan: entered promiscuous mode [ 66.648306][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.659479][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.671865][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.682844][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.693625][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.705805][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.734219][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.743266][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.752332][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.761237][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.809998][ T5817] veth0_vlan: entered promiscuous mode [ 66.830609][ T5815] veth0_vlan: entered promiscuous mode [ 66.871167][ T5815] veth1_vlan: entered promiscuous mode [ 66.894944][ T5816] veth0_macvtap: entered promiscuous mode [ 66.907560][ T5817] veth1_vlan: entered promiscuous mode [ 66.919711][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.920419][ T5816] veth1_macvtap: entered promiscuous mode [ 66.941316][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.988051][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.998996][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.013959][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.024668][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.037144][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.071141][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.083648][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.095357][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.105882][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.116634][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.135164][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.143966][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.162896][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.171938][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.181605][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.190951][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.217713][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.226305][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.246606][ T5815] veth0_macvtap: entered promiscuous mode [ 67.261976][ T5817] veth0_macvtap: entered promiscuous mode [ 67.276544][ T5817] veth1_macvtap: entered promiscuous mode [ 67.289465][ T5815] veth1_macvtap: entered promiscuous mode [ 67.302999][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.334988][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.340588][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.353238][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.364875][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.365537][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.375876][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.401989][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.412615][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.424596][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.470492][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.484517][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.523861][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.544198][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.563506][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.592506][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.620866][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.639167][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.674449][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.737375][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.748458][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.784812][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.801651][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.811994][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.829651][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.841627][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.859335][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.870812][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.977959][ T5861] IPVS: starting estimator thread 0... [ 68.144688][ T5911] IPVS: using max 24 ests per chain, 57600 per kthread [ 68.206477][ T5905] pim6reg: entered allmulticast mode [ 68.334071][ T5827] Bluetooth: hci0: command tx timeout [ 68.352060][ T5827] Bluetooth: hci4: command tx timeout [ 68.361638][ T5829] Bluetooth: hci1: command tx timeout [ 68.375807][ T5901] pim6reg: left allmulticast mode [ 68.414517][ T5827] Bluetooth: hci3: command tx timeout [ 68.420154][ T5823] Bluetooth: hci2: command tx timeout [ 68.494721][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.513218][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.529893][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.557856][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.597028][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.641438][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.673967][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.705550][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.748573][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.772713][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.810291][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.822310][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.847171][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.927929][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.935220][ T5923] netlink: 700 bytes leftover after parsing attributes in process `syz.0.8'. [ 68.943526][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.972619][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.982816][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.996899][ T4129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.013089][ T4129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.029780][ T5923] veth3: entered promiscuous mode [ 69.212325][ T4129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.221279][ T4129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.293964][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.301874][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.428395][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.437500][ T4129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.446202][ T4129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.454757][ T5900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.460417][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.705081][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 69.714003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.722649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.731378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.874377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 69.977630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.173619][ T5942] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.182005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.489123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.572096][ T5827] Bluetooth: hci4: command tx timeout [ 70.578851][ T5827] Bluetooth: hci1: command tx timeout [ 70.584790][ T5827] Bluetooth: hci0: command tx timeout [ 70.590351][ T5827] Bluetooth: hci3: command tx timeout [ 70.596876][ T5823] Bluetooth: hci2: command tx timeout [ 70.687267][ T5900] usb 3-1: too many configurations: 64, using maximum allowed: 8 [ 70.732137][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 70.762978][ T5900] usb 3-1: can't read configurations, error -61 [ 70.887359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.895910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.916355][ T5949] input: syz0 as /devices/virtual/input/input5 [ 70.923996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.929720][ T5950] 9pnet_fd: Insufficient options for proto=fd [ 71.064806][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.250953][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 71.265282][ T5900] usb 3-1: too many configurations: 64, using maximum allowed: 8 [ 71.285760][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 71.293382][ T5900] usb 3-1: can't read configurations, error -61 [ 71.326968][ T5900] usb usb3-port1: attempt power cycle [ 71.414547][ T5961] netlink: 288 bytes leftover after parsing attributes in process `syz.1.18'. [ 71.567832][ T5967] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 71.589084][ T5968] syz.1.18: attempt to access beyond end of device [ 71.589084][ T5968] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 71.597363][ T5967] dccp_invalid_packet: P.Data Offset(0) too small [ 71.609477][ T5968] syz.1.18: attempt to access beyond end of device [ 71.609477][ T5968] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 71.621211][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.635662][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.645115][ T5968] Mount JFS Failure: -5 [ 71.646473][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.669571][ T5968] jfs_mount failed w/return code = -5 [ 71.699778][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.719286][ T5900] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 71.757774][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.758913][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 71.782221][ T5900] usb 3-1: too many configurations: 64, using maximum allowed: 8 [ 71.792246][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 71.799982][ T5900] usb 3-1: can't read configurations, error -61 [ 71.811115][ T5970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.912444][ T5829] block nbd0: Receive control failed (result -107) [ 71.934453][ T5970] nbd0: detected capacity change from 0 to 256 [ 71.943959][ T5900] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 71.971567][ T5821] block nbd0: Dead connection, failed to find a fallback [ 72.022727][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 72.652425][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.701269][ T5900] usb 3-1: device descriptor read/all, error -71 [ 72.710151][ T5900] usb usb3-port1: unable to enumerate USB device [ 72.765544][ T5983] Zero length message leads to an empty skb [ 74.355144][ T6001] ======================================================= [ 74.355144][ T6001] WARNING: The mand mount option has been deprecated and [ 74.355144][ T6001] and is ignored by this kernel. Remove the mand [ 74.355144][ T6001] option from the mount to silence this warning. [ 74.355144][ T6001] ======================================================= [ 74.390039][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.899936][ T6013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 77.203937][ T6045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 77.269539][ T6048] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.283930][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 77.292703][ T6050] bridge_slave_1: left allmulticast mode [ 77.426362][ T6050] bridge_slave_1: left promiscuous mode [ 77.446196][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.761040][ T6050] bridge_slave_0: left allmulticast mode [ 77.784635][ T6050] bridge_slave_0: left promiscuous mode [ 77.790397][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.042572][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 78.404614][ T6065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.588178][ T6074] overlayfs: conflicting lowerdir path [ 80.625313][ T6083] netlink: 84 bytes leftover after parsing attributes in process `syz.1.52'. [ 82.020359][ T25] cfg80211: failed to load regulatory.db [ 82.093289][ T6119] SET target dimension over the limit! [ 83.362928][ T6134] netlink: 'syz.4.70': attribute type 29 has an invalid length. [ 83.383570][ T6134] netlink: 'syz.4.70': attribute type 29 has an invalid length. [ 83.408743][ T6134] netlink: 500 bytes leftover after parsing attributes in process `syz.4.70'. [ 83.496600][ T6136] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 83.504283][ T6136] netlink: 224 bytes leftover after parsing attributes in process `syz.1.66'. [ 83.518751][ T6134] unsupported nla_type 40 [ 84.462373][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 84.773907][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.003843][ T25] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 85.093950][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 85.102264][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.118909][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.143825][ T5869] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 85.154150][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.185342][ T5869] usb 5-1: config 0 descriptor?? [ 85.207261][ T25] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 85.252590][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.275117][ T25] usb 4-1: config 0 has no interface number 0 [ 85.282994][ T25] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 85.301750][ T25] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 85.313368][ T25] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.811310][ T25] usb 4-1: config 0 interface 52 has no altsetting 0 [ 86.089727][ T25] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 86.099014][ T25] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 86.107508][ T25] usb 4-1: Product: syz [ 86.111727][ T25] usb 4-1: Manufacturer: syz [ 86.116679][ T25] usb 4-1: SerialNumber: syz [ 86.147137][ T25] usb 4-1: config 0 descriptor?? [ 86.347120][ T5869] usbhid 5-1:0.0: can't add hid device: -32 [ 86.353477][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 86.363865][ T25] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 86.372841][ T25] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 86.393548][ T6180] netlink: 288 bytes leftover after parsing attributes in process `syz.0.81'. [ 86.989657][ T5869] usb 4-1: USB disconnect, device number 2 [ 87.172155][ T6192] erspan1: entered promiscuous mode [ 88.052923][ T5871] usb 5-1: USB disconnect, device number 2 [ 88.362304][ T6204] vlan2: entered promiscuous mode [ 88.431080][ T6204] bond0: (slave vlan2): Opening slave failed [ 91.919765][ T6241] vlan2: entered promiscuous mode [ 92.243047][ T6251] erspan1: entered promiscuous mode [ 92.906250][ T6255] 9pnet_fd: Insufficient options for proto=fd [ 93.914999][ T5861] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 93.989697][ T6282] netlink: 100 bytes leftover after parsing attributes in process `syz.2.111'. [ 94.005343][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'. [ 94.055618][ T5871] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.065731][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 94.089218][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.104371][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 94.119267][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 94.134603][ T5861] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 94.145114][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.153184][ T5861] usb 5-1: Product: syz [ 94.157662][ T5861] usb 5-1: Manufacturer: syz [ 94.162709][ T5861] usb 5-1: SerialNumber: syz [ 94.186102][ T5861] usb 5-1: config 0 descriptor?? [ 94.196809][ T5861] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 94.211307][ T5861] cyphidcom ttyUSB0: required endpoint is missing [ 94.249423][ T5871] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 94.259507][ T5871] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 16 [ 94.279413][ T5871] usb 2-1: config 1 interface 0 has no altsetting 0 [ 94.313016][ T5871] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.367340][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.406597][ T5871] usb 2-1: Product: 褷驿깼咂迣岥훚燘찊ﮙ䪂唗៲硫茑锦咨㸰ᣇ䘡滌袵춙ꁷ䪆䯙܉鳐ӥ䈀纠ힺ滖薙靼ﯽ⩙浻녘྘Ҍ纘ᗩ磔㕇뿖䃣凁度︻罎曭忖⩰뭙ໄ李煯ὂ䈔僄̍嘱䏠ꎪ㍑㇨㈑葸路㨎뽋벟詜⦠↸⸲颫透暉Ƹ洀⁴ᾏ譈ꏞ坹厩料秘⒡쾢㕲巁 [ 94.540022][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.727084][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.909935][ T5871] usb 2-1: Manufacturer: 睓ᶜ퓥ᛤ宓⯍顺祉籝䜂恂塌⽩Ṣ韻苨쇧缻ㆉ扂筭㴯৬멘辨趡넵ྯ㈜莔隘歽왍᲌੪郕䃖퀜䵩䈹Ⴒ쐛ﵢ跠糗 [ 94.935239][ T5906] usb 5-1: USB disconnect, device number 3 [ 94.952499][ T5906] cypress_m8 5-1:0.0: device disconnected [ 94.961459][ T5871] usb 2-1: SerialNumber: syz [ 94.974448][ T6278] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.984757][ T6278] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.000024][ T6292] FAULT_INJECTION: forcing a failure. [ 95.000024][ T6292] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.014109][ T6292] CPU: 0 UID: 0 PID: 6292 Comm: syz.3.114 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 95.024737][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.034824][ T6292] Call Trace: [ 95.038131][ T6292] [ 95.041070][ T6292] dump_stack_lvl+0x241/0x360 [ 95.045760][ T6292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.050969][ T6292] ? __pfx__printk+0x10/0x10 [ 95.055593][ T6292] ? snprintf+0xda/0x120 [ 95.059875][ T6292] should_fail_ex+0x3b0/0x4e0 [ 95.064580][ T6292] _copy_to_user+0x31/0xb0 [ 95.069026][ T6292] simple_read_from_buffer+0xca/0x150 [ 95.074420][ T6292] proc_fail_nth_read+0x1e9/0x250 [ 95.079490][ T6292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.085060][ T6292] ? rw_verify_area+0x55e/0x6f0 [ 95.089933][ T6292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.095499][ T6292] vfs_read+0x1fc/0xb70 [ 95.099680][ T6292] ? __pfx___mutex_lock+0x10/0x10 [ 95.104716][ T6292] ? __pfx_vfs_read+0x10/0x10 [ 95.109417][ T6292] ? __fget_files+0x2a/0x410 [ 95.114018][ T6292] ? __fget_files+0x395/0x410 [ 95.118704][ T6292] ? __fget_files+0x2a/0x410 [ 95.123312][ T6292] ksys_read+0x18f/0x2b0 [ 95.127570][ T6292] ? __pfx_ksys_read+0x10/0x10 [ 95.132347][ T6292] ? do_syscall_64+0x100/0x230 [ 95.137108][ T6292] ? do_syscall_64+0xb6/0x230 [ 95.141794][ T6292] do_syscall_64+0xf3/0x230 [ 95.146311][ T6292] ? clear_bhb_loop+0x35/0x90 [ 95.151015][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.156912][ T6292] RIP: 0033:0x7f055757e8ec [ 95.161335][ T6292] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.180943][ T6292] RSP: 002b:00007f05582eb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.189357][ T6292] RAX: ffffffffffffffda RBX: 00007f0557746080 RCX: 00007f055757e8ec [ 95.197329][ T6292] RDX: 000000000000000f RSI: 00007f05582eb0b0 RDI: 0000000000000005 [ 95.205312][ T6292] RBP: 00007f05582eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.213289][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.221258][ T6292] R13: 0000000000000001 R14: 00007f0557746080 R15: 00007ffc16c3cb38 [ 95.229261][ T6292] [ 95.612581][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.622427][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.632196][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.643713][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.730712][ T6302] 9pnet_fd: Insufficient options for proto=fd [ 96.412953][ T6304] netlink: 'syz.2.117': attribute type 29 has an invalid length. [ 96.463198][ T6304] netlink: 'syz.2.117': attribute type 29 has an invalid length. [ 96.507581][ T6304] netlink: 500 bytes leftover after parsing attributes in process `syz.2.117'. [ 96.594653][ T5871] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 96.619743][ T5871] usb 2-1: USB disconnect, device number 2 [ 96.748786][ T6312] netlink: 700 bytes leftover after parsing attributes in process `syz.1.120'. [ 96.782999][ T6317] capability: warning: `syz.2.122' uses 32-bit capabilities (legacy support in use) [ 96.800363][ T6312] veth3: entered promiscuous mode [ 96.855168][ T6318] program syz.2.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.960146][ T6324] netlink: 288 bytes leftover after parsing attributes in process `syz.4.126'. [ 97.902378][ T6324] syz.4.126: attempt to access beyond end of device [ 97.902378][ T6324] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 97.915337][ T6324] syz.4.126: attempt to access beyond end of device [ 97.915337][ T6324] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 97.928213][ T6324] Mount JFS Failure: -5 [ 97.932833][ T6324] jfs_mount failed w/return code = -5 [ 97.958241][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 98.074668][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 98.154137][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.128'. [ 98.262398][ T6339] netlink: 308 bytes leftover after parsing attributes in process `syz.3.127'. [ 98.981193][ T6341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.567611][ T5829] block nbd1: Receive control failed (result -107) [ 99.606565][ T6331] nbd1: detected capacity change from 0 to 256 [ 99.637708][ T6209] block nbd1: Dead connection, failed to find a fallback [ 99.831679][ T6349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.385647][ T6354] afs: Unknown parameter 'uid<00000000000000000000' [ 100.460266][ T6357] GUP no longer grows the stack in syz.2.135 (6357): 20004000-20008000 (20002000) [ 100.487558][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.2.135 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 100.498206][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.508292][ T6357] Call Trace: [ 100.511583][ T6357] [ 100.514520][ T6357] dump_stack_lvl+0x241/0x360 [ 100.519208][ T6357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.524402][ T6357] ? __pfx__printk+0x10/0x10 [ 100.528986][ T6357] ? find_vma+0xf9/0x170 [ 100.533234][ T6357] __get_user_pages+0x4385/0x49e0 [ 100.538261][ T6357] ? __lock_acquire+0x1397/0x2100 [ 100.543321][ T6357] ? __pfx___get_user_pages+0x10/0x10 [ 100.548715][ T6357] get_user_pages_remote+0x31e/0xb60 [ 100.554011][ T6357] ? __pfx_get_user_pages_remote+0x10/0x10 [ 100.559817][ T6357] ? __access_remote_vm+0x320/0x800 [ 100.565019][ T6357] __access_remote_vm+0x229/0x800 [ 100.570049][ T6357] ? __pfx___access_remote_vm+0x10/0x10 [ 100.575634][ T6357] ? rep_movs_alternative+0x4c/0x70 [ 100.580835][ T6357] proc_pid_cmdline_read+0x5b2/0x860 [ 100.586133][ T6357] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 100.591945][ T6357] ? rw_verify_area+0x55e/0x6f0 [ 100.596801][ T6357] vfs_readv+0x6bc/0xa80 [ 100.601137][ T6357] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 100.606950][ T6357] ? __pfx_vfs_readv+0x10/0x10 [ 100.611714][ T6357] ? do_sys_openat2+0x17a/0x1d0 [ 100.616582][ T6357] ? __fget_files+0x2a/0x410 [ 100.621182][ T6357] ? __fget_files+0x395/0x410 [ 100.625855][ T6357] ? __fget_files+0x2a/0x410 [ 100.630451][ T6357] __x64_sys_preadv+0x1b7/0x2d0 [ 100.635312][ T6357] ? __pfx___x64_sys_preadv+0x10/0x10 [ 100.640686][ T6357] ? do_syscall_64+0x100/0x230 [ 100.645456][ T6357] ? do_syscall_64+0xb6/0x230 [ 100.650135][ T6357] do_syscall_64+0xf3/0x230 [ 100.654640][ T6357] ? clear_bhb_loop+0x35/0x90 [ 100.659315][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.665210][ T6357] RIP: 0033:0x7ffbcb17fed9 [ 100.669626][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.689229][ T6357] RSP: 002b:00007ffbcbfc4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 100.697650][ T6357] RAX: ffffffffffffffda RBX: 00007ffbcb345fa0 RCX: 00007ffbcb17fed9 [ 100.705624][ T6357] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005 [ 100.713592][ T6357] RBP: 00007ffbcb1f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 100.721563][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.729535][ T6357] R13: 0000000000000000 R14: 00007ffbcb345fa0 R15: 00007ffd7753b528 [ 100.737518][ T6357] [ 101.173954][ T5871] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 101.403986][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.481363][ T6383] netlink: 84 bytes leftover after parsing attributes in process `syz.4.143'. [ 101.482105][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.518479][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.540038][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.554315][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.567307][ T5823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 101.569523][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.584411][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.588020][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.592744][ T25] usb 4-1: Product: syz [ 101.648174][ T25] usb 4-1: Manufacturer: syz [ 101.663055][ T25] usb 4-1: SerialNumber: syz [ 101.703194][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.748505][ T5869] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.979897][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 101.994137][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.049512][ T6395] netlink: 100 bytes leftover after parsing attributes in process `syz.4.146'. [ 102.114476][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.122006][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.133970][ T6382] bridge_slave_0: entered allmulticast mode [ 102.146286][ T6382] bridge_slave_0: entered promiscuous mode [ 102.154077][ T5906] usb 2-1: device descriptor read/64, error -71 [ 102.192904][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.209108][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.223290][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.230881][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.239337][ T6382] bridge_slave_1: entered allmulticast mode [ 102.246821][ T6382] bridge_slave_1: entered promiscuous mode [ 102.326822][ T6401] vlan2: entered promiscuous mode [ 102.337027][ T6401] bond0: (slave vlan2): Opening slave failed [ 102.380651][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.401565][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.411052][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.429453][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.444525][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.458702][ T5861] usb 4-1: USB disconnect, device number 3 [ 102.522620][ T6382] team0: Port device team_slave_0 added [ 102.549530][ T6382] team0: Port device team_slave_1 added [ 102.587278][ T5906] usb 2-1: device descriptor read/64, error -71 [ 102.620265][ T6406] FAULT_INJECTION: forcing a failure. [ 102.620265][ T6406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.637312][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.2.148 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 102.639523][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.647937][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.647970][ T6406] Call Trace: [ 102.647978][ T6406] [ 102.647986][ T6406] dump_stack_lvl+0x241/0x360 [ 102.648017][ T6406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.648039][ T6406] ? __pfx__printk+0x10/0x10 [ 102.648065][ T6406] ? snprintf+0xda/0x120 [ 102.648087][ T6406] should_fail_ex+0x3b0/0x4e0 [ 102.648110][ T6406] _copy_to_user+0x31/0xb0 [ 102.648136][ T6406] simple_read_from_buffer+0xca/0x150 [ 102.648160][ T6406] proc_fail_nth_read+0x1e9/0x250 [ 102.648183][ T6406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.648206][ T6406] ? rw_verify_area+0x55e/0x6f0 [ 102.648229][ T6406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.648251][ T6406] vfs_read+0x1fc/0xb70 [ 102.648279][ T6406] ? __pfx___mutex_lock+0x10/0x10 [ 102.648305][ T6406] ? __pfx_vfs_read+0x10/0x10 [ 102.648332][ T6406] ? __fget_files+0x2a/0x410 [ 102.648355][ T6406] ? __fget_files+0x395/0x410 [ 102.648375][ T6406] ? __fget_files+0x2a/0x410 [ 102.648412][ T6406] ksys_read+0x18f/0x2b0 [ 102.648438][ T6406] ? __pfx_ksys_read+0x10/0x10 [ 102.648463][ T6406] ? do_syscall_64+0x100/0x230 [ 102.648490][ T6406] ? do_syscall_64+0xb6/0x230 [ 102.648516][ T6406] do_syscall_64+0xf3/0x230 [ 102.648540][ T6406] ? clear_bhb_loop+0x35/0x90 [ 102.648560][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.648584][ T6406] RIP: 0033:0x7ffbcb17e8ec [ 102.648602][ T6406] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.648618][ T6406] RSP: 002b:00007ffbcbfc4050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.648641][ T6406] RAX: ffffffffffffffda RBX: 00007ffbcb345fa0 RCX: 00007ffbcb17e8ec [ 102.648655][ T6406] RDX: 000000000000000f RSI: 00007ffbcbfc40b0 RDI: 0000000000000004 [ 102.648669][ T6406] RBP: 00007ffbcbfc40a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.648681][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.648693][ T6406] R13: 0000000000000000 R14: 00007ffbcb345fa0 R15: 00007ffd7753b528 [ 102.648719][ T6406] [ 102.705365][ T5906] usb usb2-port1: attempt power cycle [ 102.707119][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.899415][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.938352][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.958880][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.057335][ T5869] usb 4-1: Service connection timeout for: 256 [ 103.063547][ T5869] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 103.096866][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.145164][ T5869] ath9k_htc: Failed to initialize the device [ 103.179404][ T5861] usb 4-1: ath9k_htc: USB layer deinitialized [ 103.181884][ T6411] FAULT_INJECTION: forcing a failure. [ 103.181884][ T6411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.231172][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.4.152 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 103.241840][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.251947][ T6411] Call Trace: [ 103.255245][ T6411] [ 103.258207][ T6411] dump_stack_lvl+0x241/0x360 [ 103.262916][ T6411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.268431][ T6411] ? __pfx__printk+0x10/0x10 [ 103.273059][ T6411] ? snprintf+0xda/0x120 [ 103.277329][ T6411] should_fail_ex+0x3b0/0x4e0 [ 103.282028][ T6411] _copy_to_user+0x31/0xb0 [ 103.286474][ T6411] simple_read_from_buffer+0xca/0x150 [ 103.291870][ T6411] proc_fail_nth_read+0x1e9/0x250 [ 103.296971][ T6411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.302537][ T6411] ? rw_verify_area+0x55e/0x6f0 [ 103.307415][ T6411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.312981][ T6411] vfs_read+0x1fc/0xb70 [ 103.317162][ T6411] ? __pfx___mutex_lock+0x10/0x10 [ 103.322212][ T6411] ? __pfx_vfs_read+0x10/0x10 [ 103.326919][ T6411] ? __fget_files+0x2a/0x410 [ 103.331532][ T6411] ? __fget_files+0x395/0x410 [ 103.336223][ T6411] ? __fget_files+0x2a/0x410 [ 103.340840][ T6411] ksys_read+0x18f/0x2b0 [ 103.345106][ T6411] ? __pfx_ksys_read+0x10/0x10 [ 103.349887][ T6411] ? do_syscall_64+0x100/0x230 [ 103.354682][ T6411] ? do_syscall_64+0xb6/0x230 [ 103.359389][ T6411] do_syscall_64+0xf3/0x230 [ 103.363935][ T6411] ? clear_bhb_loop+0x35/0x90 [ 103.368626][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.374538][ T6411] RIP: 0033:0x7f6bd417e8ec [ 103.378969][ T6411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.398584][ T6411] RSP: 002b:00007f6bd1ff6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.407015][ T6411] RAX: ffffffffffffffda RBX: 00007f6bd4345fa0 RCX: 00007f6bd417e8ec [ 103.415013][ T6411] RDX: 000000000000000f RSI: 00007f6bd1ff60b0 RDI: 0000000000000006 [ 103.423017][ T6411] RBP: 00007f6bd1ff60a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.431013][ T6411] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 103.439008][ T6411] R13: 0000000000000000 R14: 00007f6bd4345fa0 R15: 00007ffcc4af3698 [ 103.447030][ T6411] [ 103.473917][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.494916][ T6382] hsr_slave_0: entered promiscuous mode [ 103.511320][ T6382] hsr_slave_1: entered promiscuous mode [ 103.533662][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.554023][ T5906] usb 2-1: device descriptor read/8, error -71 [ 103.562608][ T6382] Cannot create hsr debugfs directory [ 103.657333][ T6421] netlink: 168 bytes leftover after parsing attributes in process `syz.4.155'. [ 103.698450][ T5823] Bluetooth: hci5: command tx timeout [ 103.866589][ T5906] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.894799][ T5906] usb 2-1: device descriptor read/8, error -71 [ 104.029263][ T5906] usb usb2-port1: unable to enumerate USB device [ 104.440744][ T6382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.457283][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.473237][ T6382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.492315][ T6429] netlink: 288 bytes leftover after parsing attributes in process `syz.3.156'. [ 104.595609][ T6382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.680642][ T6430] syz.3.156: attempt to access beyond end of device [ 104.680642][ T6430] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 104.699359][ T6430] syz.3.156: attempt to access beyond end of device [ 104.699359][ T6430] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 104.715394][ T6430] Mount JFS Failure: -5 [ 104.720368][ T6430] jfs_mount failed w/return code = -5 [ 105.085769][ T6382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.236850][ T6433] erspan1: entered promiscuous mode [ 105.374017][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.486553][ T6442] netlink: 84 bytes leftover after parsing attributes in process `syz.4.163'. [ 105.530101][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.548606][ T4129] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.555718][ T4129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.594786][ T4129] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.601959][ T4129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.775703][ T5823] Bluetooth: hci5: command tx timeout [ 105.783005][ T6382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.002739][ T6450] sp0: Synchronizing with TNC [ 106.040002][ T6458] SET target dimension over the limit! [ 107.206218][ T6462] netlink: 165 bytes leftover after parsing attributes in process `syz.4.169'. [ 107.390105][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.418717][ T6476] capability: warning: `syz.2.174' uses deprecated v2 capabilities in a way that may be insecure [ 107.469264][ T6476] program syz.2.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.523165][ T6479] FAULT_INJECTION: forcing a failure. [ 107.523165][ T6479] name failslab, interval 1, probability 0, space 0, times 1 [ 107.543994][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.3.175 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 107.554639][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.564727][ T6479] Call Trace: [ 107.568053][ T6479] [ 107.571008][ T6479] dump_stack_lvl+0x241/0x360 [ 107.575720][ T6479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.580958][ T6479] ? __pfx__printk+0x10/0x10 [ 107.585582][ T6479] ? fs_reclaim_acquire+0x93/0x130 [ 107.590725][ T6479] ? __pfx___might_resched+0x10/0x10 [ 107.596059][ T6479] should_fail_ex+0x3b0/0x4e0 [ 107.600771][ T6479] should_failslab+0xac/0x100 [ 107.605476][ T6479] __kmalloc_noprof+0xdd/0x4c0 [ 107.610263][ T6479] ? tomoyo_encode+0x26f/0x540 [ 107.615062][ T6479] tomoyo_encode+0x26f/0x540 [ 107.619863][ T6479] tomoyo_realpath_from_path+0x59e/0x5e0 [ 107.625533][ T6479] tomoyo_path_number_perm+0x236/0x860 [ 107.631195][ T6479] ? __lock_acquire+0x1397/0x2100 [ 107.636275][ T6479] ? tomoyo_path_number_perm+0x206/0x860 [ 107.641927][ T6479] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.647965][ T6479] ? __fget_files+0x2a/0x410 [ 107.652585][ T6479] ? __fget_files+0x2a/0x410 [ 107.657208][ T6479] security_file_ioctl+0xc6/0x2a0 [ 107.662267][ T6479] __se_sys_ioctl+0x46/0x170 [ 107.666887][ T6479] do_syscall_64+0xf3/0x230 [ 107.671459][ T6479] ? clear_bhb_loop+0x35/0x90 [ 107.676165][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.682084][ T6479] RIP: 0033:0x7f055757fed9 [ 107.686515][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.706149][ T6479] RSP: 002b:00007f055830c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.714606][ T6479] RAX: ffffffffffffffda RBX: 00007f0557745fa0 RCX: 00007f055757fed9 [ 107.722603][ T6479] RDX: 00000000200002c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 107.730600][ T6479] RBP: 00007f055830c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.738604][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.746602][ T6479] R13: 0000000000000000 R14: 00007f0557745fa0 R15: 00007ffc16c3cb38 [ 107.754616][ T6479] [ 107.842420][ T6382] veth0_vlan: entered promiscuous mode [ 107.852393][ T6382] veth1_vlan: entered promiscuous mode [ 107.864012][ T5823] Bluetooth: hci5: command tx timeout [ 107.870074][ T6382] veth0_macvtap: entered promiscuous mode [ 107.880497][ T6382] veth1_macvtap: entered promiscuous mode [ 107.886756][ T6479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.896300][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.913934][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.934930][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.945479][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.955842][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.967379][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.977837][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.989452][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.004730][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.021736][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.040768][ T6492] xt_bpf: check failed: parse error [ 108.078650][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.540180][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.579161][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.692367][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.713698][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.750976][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.815748][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.826079][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.840928][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.853052][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.913847][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.928303][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.987801][ T6382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.015479][ T6506] netlink: 84 bytes leftover after parsing attributes in process `syz.1.181'. [ 109.018983][ T6382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.060163][ T6382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.086774][ T6382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.318837][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.376682][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.465170][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.498579][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.063469][ T5823] Bluetooth: hci5: command tx timeout [ 111.441202][ T6535] ceph: Path missing in source [ 111.449093][ T6535] netlink: 244 bytes leftover after parsing attributes in process `syz.2.188'. [ 111.677656][ T6542] FAULT_INJECTION: forcing a failure. [ 111.677656][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 111.713122][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.4.192 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 111.723763][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.733841][ T6542] Call Trace: [ 111.737139][ T6542] [ 111.740099][ T6542] dump_stack_lvl+0x241/0x360 [ 111.744808][ T6542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.750030][ T6542] ? __pfx__printk+0x10/0x10 [ 111.754644][ T6542] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 111.760639][ T6542] ? __pfx___might_resched+0x10/0x10 [ 111.766031][ T6542] should_fail_ex+0x3b0/0x4e0 [ 111.770708][ T6542] should_failslab+0xac/0x100 [ 111.775387][ T6542] kmem_cache_alloc_node_noprof+0x77/0x380 [ 111.781189][ T6542] ? __alloc_skb+0x1c3/0x440 [ 111.785777][ T6542] __alloc_skb+0x1c3/0x440 [ 111.790194][ T6542] ? __pfx___alloc_skb+0x10/0x10 [ 111.795129][ T6542] ? netlink_autobind+0xd6/0x2f0 [ 111.800061][ T6542] ? netlink_autobind+0x2b0/0x2f0 [ 111.805089][ T6542] netlink_sendmsg+0x638/0xcb0 [ 111.809858][ T6542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.815150][ T6542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.820429][ T6542] __sock_sendmsg+0x221/0x270 [ 111.825114][ T6542] ____sys_sendmsg+0x52a/0x7e0 [ 111.829882][ T6542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.835162][ T6542] ? __fget_files+0x2a/0x410 [ 111.839760][ T6542] ? __fget_files+0x2a/0x410 [ 111.844351][ T6542] __sys_sendmsg+0x269/0x350 [ 111.848940][ T6542] ? __pfx_lock_release+0x10/0x10 [ 111.853968][ T6542] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.859095][ T6542] ? __pfx_vfs_write+0x10/0x10 [ 111.863889][ T6542] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.870228][ T6542] ? do_syscall_64+0x100/0x230 [ 111.874995][ T6542] ? do_syscall_64+0xb6/0x230 [ 111.879697][ T6542] do_syscall_64+0xf3/0x230 [ 111.884228][ T6542] ? clear_bhb_loop+0x35/0x90 [ 111.888934][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.894848][ T6542] RIP: 0033:0x7f6bd417fed9 [ 111.899367][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.918992][ T6542] RSP: 002b:00007f6bd1ff6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.927421][ T6542] RAX: ffffffffffffffda RBX: 00007f6bd4345fa0 RCX: 00007f6bd417fed9 [ 111.935400][ T6542] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 111.943368][ T6542] RBP: 00007f6bd1ff60a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.951339][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.959308][ T6542] R13: 0000000000000000 R14: 00007f6bd4345fa0 R15: 00007ffcc4af3698 [ 111.967296][ T6542] [ 112.264952][ T6551] FAULT_INJECTION: forcing a failure. [ 112.264952][ T6551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.306803][ T6551] CPU: 0 UID: 0 PID: 6551 Comm: syz.5.194 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 112.317459][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.327547][ T6551] Call Trace: [ 112.330856][ T6551] [ 112.333832][ T6551] dump_stack_lvl+0x241/0x360 [ 112.338558][ T6551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.343806][ T6551] ? __pfx__printk+0x10/0x10 [ 112.348435][ T6551] ? __pfx_lock_release+0x10/0x10 [ 112.353502][ T6551] should_fail_ex+0x3b0/0x4e0 [ 112.358213][ T6551] _copy_from_user+0x2f/0xc0 [ 112.362839][ T6551] video_usercopy+0x378/0x1180 [ 112.367649][ T6551] ? __pfx___video_do_ioctl+0x10/0x10 [ 112.373067][ T6551] ? __pfx_video_usercopy+0x10/0x10 [ 112.378302][ T6551] ? smack_file_ioctl+0x2f7/0x3a0 [ 112.383376][ T6551] ? __fget_files+0x2a/0x410 [ 112.388008][ T6551] ? __fget_files+0x2a/0x410 [ 112.392635][ T6551] v4l2_ioctl+0x189/0x1e0 [ 112.397000][ T6551] ? __pfx_v4l2_ioctl+0x10/0x10 [ 112.401891][ T6551] __se_sys_ioctl+0xf5/0x170 [ 112.406532][ T6551] do_syscall_64+0xf3/0x230 [ 112.411069][ T6551] ? clear_bhb_loop+0x35/0x90 [ 112.415786][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.421726][ T6551] RIP: 0033:0x7f8fe4d7fed9 [ 112.426180][ T6551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.445850][ T6551] RSP: 002b:00007f8fe5c32058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.455506][ T6551] RAX: ffffffffffffffda RBX: 00007f8fe4f45fa0 RCX: 00007f8fe4d7fed9 [ 112.455529][ T6551] RDX: 00000000200002c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 112.455544][ T6551] RBP: 00007f8fe5c320a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.455557][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.455568][ T6551] R13: 0000000000000000 R14: 00007f8fe4f45fa0 R15: 00007ffd633e8678 [ 112.455593][ T6551] [ 112.777466][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 113.071828][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 113.609666][ T6582] vlan2: entered promiscuous mode [ 115.357398][ T6608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.406115][ T6595] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.413194][ T6595] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.488404][ T6595] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.495412][ T6595] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.501336][ T6595] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.508254][ T6595] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.515110][ T6595] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.521045][ T6595] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.527706][ T6595] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.805130][ T6595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.811158][ T6595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.820227][ T6595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.827205][ T6595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.833242][ T6595] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.840338][ T6595] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.848402][ T6595] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 115.856246][ T6595] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 115.863125][ T6595] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 115.921586][ T6610] xt_nat: multiple ranges no longer supported [ 116.342958][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.364246][ T5824] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 117.159833][ T5824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.549743][ T6632] netlink: 'syz.1.221': attribute type 4 has an invalid length. [ 117.645284][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.651372][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.692530][ T5824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.750051][ T5824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.761336][ T5824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.771519][ T5824] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 117.780982][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.018784][ T6638] netlink: 84 bytes leftover after parsing attributes in process `syz.2.223'. [ 118.392002][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.392238][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.398196][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 118.414286][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.425571][ T5824] hub 6-1:1.0: bad descriptor, ignoring hub [ 118.431636][ T5824] hub 6-1:1.0: probe with driver hub failed with error -5 [ 118.439597][ T5824] cdc_wdm 6-1:1.0: skipping garbage [ 118.444952][ T5824] cdc_wdm 6-1:1.0: skipping garbage [ 118.467821][ T5824] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 118.484249][ T5824] cdc_wdm 6-1:1.0: Unknown control protocol [ 118.690068][ T6653] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.710972][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.5.214'. [ 118.750330][ T6612] can: request_module (can-proto-3) failed. [ 118.805349][ T6658] Bluetooth: MGMT ver 1.23 [ 118.834539][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.892703][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.214'. [ 118.991841][ T6665] mmap: syz.2.227 (6665) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.735726][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.753596][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.166484][ T6675] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 120.215875][ T5824] usb 6-1: USB disconnect, device number 2 [ 120.534787][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.541459][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 120.547963][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.554326][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.655273][ T5900] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.677612][ T6701] netlink: 308 bytes leftover after parsing attributes in process `syz.2.235'. [ 120.844426][ T5900] usb 2-1: device descriptor read/64, error -71 [ 121.095444][ T5900] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.591479][ T6703] xt_cluster: node mask cannot exceed total number of nodes [ 121.602213][ T6703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.611000][ T5900] usb 2-1: device descriptor read/64, error -71 [ 121.724170][ T5900] usb usb2-port1: attempt power cycle [ 121.781583][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.788017][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.295578][ T5900] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.555502][ T5900] usb 2-1: device descriptor read/8, error -71 [ 122.579850][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 122.587264][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.594665][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.833995][ T5900] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.855605][ T5900] usb 2-1: device descriptor read/8, error -71 [ 122.986939][ T5900] usb usb2-port1: unable to enumerate USB device [ 123.389214][ T5824] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.444645][ T6734] dccp_invalid_packet: P.Data Offset(0) too small [ 123.734015][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 123.917752][ T5824] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 124.765305][ T5824] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 124.775173][ T5824] usb 4-1: config 1 interface 0 has no altsetting 0 [ 124.790795][ T5824] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.799960][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.858880][ T5824] usb 4-1: Product: syz [ 124.864107][ T5824] usb 4-1: Manufacturer:  [ 124.868740][ T5824] usb 4-1: SerialNumber: syz [ 124.922421][ T6729] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.931511][ T6729] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.165190][ T5824] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 125.241253][ T5824] usb 4-1: USB disconnect, device number 5 [ 125.280027][ T6759] FAULT_INJECTION: forcing a failure. [ 125.280027][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.306607][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.1.255 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 125.317245][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.327327][ T6759] Call Trace: [ 125.330613][ T6759] [ 125.333547][ T6759] dump_stack_lvl+0x241/0x360 [ 125.338232][ T6759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.343430][ T6759] ? __pfx__printk+0x10/0x10 [ 125.348020][ T6759] ? __pfx_lock_release+0x10/0x10 [ 125.353047][ T6759] should_fail_ex+0x3b0/0x4e0 [ 125.357724][ T6759] _copy_from_iter+0x21f/0x1e70 [ 125.362572][ T6759] ? __virt_addr_valid+0x183/0x530 [ 125.367692][ T6759] ? __pfx_lock_release+0x10/0x10 [ 125.372719][ T6759] ? __pfx__copy_from_iter+0x10/0x10 [ 125.378012][ T6759] ? __virt_addr_valid+0x183/0x530 [ 125.383123][ T6759] ? __virt_addr_valid+0x183/0x530 [ 125.388236][ T6759] ? __virt_addr_valid+0x45f/0x530 [ 125.393349][ T6759] ? __check_object_size+0x48e/0x900 [ 125.398633][ T6759] hci_sock_sendmsg+0x4f1/0x11c0 [ 125.403568][ T6759] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 125.410335][ T6759] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 125.415720][ T6759] ? get_pid_task+0x23/0x1f0 [ 125.420327][ T6759] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 125.425701][ T6759] __sock_sendmsg+0x221/0x270 [ 125.430388][ T6759] sock_write_iter+0x2d7/0x3f0 [ 125.435153][ T6759] ? __pfx_sock_write_iter+0x10/0x10 [ 125.440444][ T6759] ? bpf_lsm_file_permission+0x9/0x10 [ 125.445813][ T6759] ? security_file_permission+0x74/0x280 [ 125.451447][ T6759] vfs_write+0xaeb/0xd30 [ 125.455692][ T6759] ? __pfx_sock_write_iter+0x10/0x10 [ 125.460980][ T6759] ? __pfx_vfs_write+0x10/0x10 [ 125.465753][ T6759] ? __fget_files+0x2a/0x410 [ 125.470341][ T6759] ? __fget_files+0x2a/0x410 [ 125.474932][ T6759] ksys_write+0x18f/0x2b0 [ 125.479266][ T6759] ? __pfx_ksys_write+0x10/0x10 [ 125.484124][ T6759] ? do_syscall_64+0x100/0x230 [ 125.488908][ T6759] ? do_syscall_64+0xb6/0x230 [ 125.493587][ T6759] do_syscall_64+0xf3/0x230 [ 125.498091][ T6759] ? clear_bhb_loop+0x35/0x90 [ 125.502764][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.508657][ T6759] RIP: 0033:0x7f35a537fed9 [ 125.513073][ T6759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.532675][ T6759] RSP: 002b:00007f35a60d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.541094][ T6759] RAX: ffffffffffffffda RBX: 00007f35a5545fa0 RCX: 00007f35a537fed9 [ 125.549062][ T6759] RDX: 000000000000000d RSI: 0000000020000000 RDI: 0000000000000005 [ 125.557026][ T6759] RBP: 00007f35a60d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.564993][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.572959][ T6759] R13: 0000000000000000 R14: 00007f35a5545fa0 R15: 00007ffefa6821e8 [ 125.580942][ T6759] [ 126.702496][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 127.184233][ T6787] process 'syz.3.261' launched './file2' with NULL argv: empty string added [ 127.536730][ T6808] netlink: 'syz.3.266': attribute type 2 has an invalid length. [ 127.554358][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.708519][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 127.722414][ T5906] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 127.752426][ T6812] netlink: 288 bytes leftover after parsing attributes in process `syz.5.270'. [ 127.755765][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.857823][ T6814] syz.5.270: attempt to access beyond end of device [ 127.857823][ T6814] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 127.870999][ T6814] syz.5.270: attempt to access beyond end of device [ 127.870999][ T6814] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 127.884212][ T6814] Mount JFS Failure: -5 [ 127.888401][ T6814] jfs_mount failed w/return code = -5 [ 128.749998][ T6818] netlink: 'syz.1.271': attribute type 29 has an invalid length. [ 128.761992][ T6818] netlink: 'syz.1.271': attribute type 29 has an invalid length. [ 128.776792][ T6818] netlink: 500 bytes leftover after parsing attributes in process `syz.1.271'. [ 129.258902][ T5906] usb 5-1: config 0 descriptor?? [ 129.355849][ T5906] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 129.370292][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 129.379513][ T6820] bridge_slave_1: left allmulticast mode [ 129.388078][ T6820] bridge_slave_1: left promiscuous mode [ 129.410694][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.973570][ T6827] program syz.3.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.974075][ T5906] gspca_nw80x: reg_w err -110 [ 130.978904][ T5906] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 131.075393][ T6820] bridge_slave_0: left allmulticast mode [ 131.081420][ T6820] bridge_slave_0: left promiscuous mode [ 131.121261][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.162393][ T58] usb 5-1: USB disconnect, device number 4 [ 131.852696][ T6847] overlayfs: conflicting lowerdir path [ 132.254189][ T6860] netlink: 308 bytes leftover after parsing attributes in process `syz.2.281'. [ 133.094423][ T6850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.104368][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.110699][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.873906][ T5861] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 135.045337][ T6885] dccp_invalid_packet: P.Data Offset(0) too small [ 135.170431][ T6888] netlink: 92 bytes leftover after parsing attributes in process `syz.3.292'. [ 135.178950][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 135.220008][ T6890] bridge_slave_1: left allmulticast mode [ 135.245398][ T6890] bridge_slave_1: left promiscuous mode [ 135.264695][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.289562][ T6890] bridge_slave_0: left allmulticast mode [ 135.298057][ T6890] bridge_slave_0: left promiscuous mode [ 135.298411][ T6895] SET target dimension over the limit! [ 135.304126][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.327403][ T5861] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 135.336022][ T5861] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 135.345631][ T5861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.355871][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.364862][ T5861] usb 2-1: config 0 has no interface number 0 [ 135.370978][ T5861] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 135.382295][ T5861] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.392325][ T5861] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 135.405500][ T5861] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 135.415398][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.420498][ T6886] Falling back ldisc for ptm0. [ 135.426467][ T5861] usb 2-1: config 0 descriptor?? [ 135.438258][ T5861] gspca_main: spca561-2.14.0 probing abcd:cdee [ 135.641863][ T5861] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 135.654762][ T5861] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.695060][ T5861] usb 2-1: MIDIStreaming interface descriptor not found [ 135.966967][ T5861] usb 2-1: USB disconnect, device number 11 [ 136.207340][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.885080][ T5906] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.044692][ T5906] usb 6-1: no configurations [ 138.054186][ T5906] usb 6-1: can't read configurations, error -22 [ 138.110244][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 138.334235][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 138.415746][ T6949] input: syz0 as /devices/virtual/input/input7 [ 138.484414][ T5906] usb 6-1: no configurations [ 138.489085][ T5906] usb 6-1: can't read configurations, error -22 [ 138.500478][ T5906] usb usb6-port1: attempt power cycle [ 138.824567][ T6954] dccp_invalid_packet: P.Data Offset(0) too small [ 138.878632][ T5906] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 138.935134][ T5906] usb 6-1: no configurations [ 138.939838][ T5906] usb 6-1: can't read configurations, error -22 [ 139.083944][ T5906] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 139.139642][ T5906] usb 6-1: no configurations [ 139.144786][ T5906] usb 6-1: can't read configurations, error -22 [ 139.162852][ T5906] usb usb6-port1: unable to enumerate USB device [ 139.591648][ T6969] netlink: 'syz.3.317': attribute type 29 has an invalid length. [ 139.600687][ T6969] netlink: 'syz.3.317': attribute type 29 has an invalid length. [ 139.613591][ T6969] netlink: 500 bytes leftover after parsing attributes in process `syz.3.317'. [ 140.073171][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.319'. [ 140.185299][ T5824] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.473908][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 140.480679][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.492251][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.503513][ T5824] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 140.513249][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.553644][ T5824] usb 3-1: config 0 descriptor?? [ 140.910436][ T6993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.639274][ T7000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.665492][ T6989] geneve2: entered promiscuous mode [ 141.670820][ T6989] geneve2: entered allmulticast mode [ 141.776324][ T5824] usbhid 3-1:0.0: can't add hid device: -71 [ 141.782517][ T5824] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 142.245028][ T5824] usb 3-1: USB disconnect, device number 7 [ 142.472615][ T7013] dccp_invalid_packet: P.Data Offset(0) too small [ 142.614371][ T58] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.640412][ T7017] netlink: 308 bytes leftover after parsing attributes in process `syz.4.325'. [ 143.764846][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 143.772643][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.784548][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.837765][ T58] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.862100][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.890220][ T58] usb 4-1: config 0 descriptor?? [ 144.277590][ T7026] afs: Unknown parameter 'Dyo' [ 144.282942][ T7026] trusted_key: syz.1.332 sent an empty control message without MSG_MORE. [ 144.632244][ T58] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 144.646918][ T58] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 144.658473][ T58] microsoft 0003:045E:07DA.0001: no inputs found [ 144.664981][ T58] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 144.842975][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.860780][ T5861] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 144.879611][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.013917][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 145.021662][ T5861] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.033698][ T5861] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.058926][ T5861] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.082957][ T5861] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.105460][ T5861] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.116503][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 145.124824][ T5861] usb 6-1: Product: syz [ 145.153038][ T5824] usb 4-1: USB disconnect, device number 6 [ 145.334050][ T58] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 145.474073][ T58] usb 2-1: device descriptor read/64, error -71 [ 145.674066][ T5861] usb 6-1: GET_CAPABILITIES returned 0 [ 145.679604][ T5861] usbtmc 6-1:16.0: can't read capabilities [ 145.908362][ T7046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.917857][ T58] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 146.461057][ T5861] IPVS: starting estimator thread 0... [ 146.565984][ T58] usb 2-1: device descriptor read/64, error -71 [ 146.573229][ T7049] IPVS: using max 24 ests per chain, 57600 per kthread [ 146.687076][ T58] usb usb2-port1: attempt power cycle [ 146.861199][ T7063] dccp_invalid_packet: P.Data Offset(0) too small [ 147.100416][ T5824] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.215189][ T58] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 147.714522][ T58] usb 2-1: device descriptor read/8, error -71 [ 147.786660][ T5861] usb 6-1: USB disconnect, device number 7 [ 147.794172][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 147.810021][ T5824] usb 5-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=6b.09 [ 147.820676][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.851970][ T5824] usb 5-1: Product: syz [ 147.856589][ T5824] usb 5-1: Manufacturer: syz [ 147.861214][ T5824] usb 5-1: SerialNumber: syz [ 147.881197][ T5824] usb 5-1: config 0 descriptor?? [ 147.891654][ T5824] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6288 [ 147.974347][ T58] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 148.006211][ T58] usb 2-1: device descriptor read/8, error -71 [ 148.195852][ T58] usb usb2-port1: unable to enumerate USB device [ 149.102297][ T7074] block device autoloading is deprecated and will be removed. [ 149.111312][ T7074] syz.5.348: attempt to access beyond end of device [ 149.111312][ T7074] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 149.132530][ T7074] sp0: Synchronizing with TNC [ 149.323967][ T5824] gspca_sn9c20x: Write register 1000 failed -110 [ 149.330366][ T5824] gspca_sn9c20x: Device initialization failed [ 149.337904][ T5824] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 149.387021][ T7081] netlink: 84 bytes leftover after parsing attributes in process `syz.1.350'. [ 149.510472][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.550844][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.703030][ T7088] netlink: 308 bytes leftover after parsing attributes in process `syz.2.351'. [ 150.319909][ T5906] usb 5-1: USB disconnect, device number 5 [ 150.331563][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.351117][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.673355][ T7091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.890603][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.921267][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.932155][ T7090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.967914][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.978909][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.988317][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 151.112724][ T7104] netlink: 'syz.1.357': attribute type 29 has an invalid length. [ 151.117097][ T7104] netlink: 'syz.1.357': attribute type 29 has an invalid length. [ 153.635741][ T5906] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 153.957946][ T7138] Bluetooth: MGMT ver 1.23 [ 154.499861][ T7145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.930727][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 155.039599][ T5906] usb 2-1: device descriptor read/all, error -71 [ 157.728855][ T7190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.906132][ T5861] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.104048][ T5861] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 158.128038][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.149213][ T5861] usb 5-1: config 0 has no interface number 0 [ 158.201092][ T5861] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 158.219544][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.236770][ T5861] usb 5-1: config 0 descriptor?? [ 158.254174][ T5861] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 158.261387][ T5861] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 158.386037][ T7204] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 158.410378][ T7204] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 158.446897][ T7204] __nla_validate_parse: 5 callbacks suppressed [ 158.446916][ T7204] netlink: 500 bytes leftover after parsing attributes in process `syz.2.388'. [ 158.484367][ T7206] cgroup2: Unknown parameter 'trans' [ 158.544006][ T5906] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 158.736049][ T5906] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 158.745566][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.793370][ T29] audit: type=1326 audit(1733680405.627:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 158.824717][ T5906] usb 2-1: config 0 descriptor?? [ 158.941383][ T29] audit: type=1326 audit(1733680405.657:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 159.164298][ T29] audit: type=1326 audit(1733680405.657:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 159.510718][ T29] audit: type=1326 audit(1733680405.657:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 159.569530][ T5906] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 159.580805][ T29] audit: type=1326 audit(1733680405.657:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 159.619088][ T29] audit: type=1326 audit(1733680405.657:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 159.725109][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 159.725124][ T29] audit: type=1326 audit(1733680405.657:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 159.792135][ T5906] gspca_cpia1: usb_control_msg 03, error -32 [ 159.840655][ T29] audit: type=1326 audit(1733680405.657:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 159.918009][ T5906] gspca_cpia1: usb_control_msg 03, error -71 [ 159.932462][ T5906] gspca_cpia1: usb_control_msg 01, error -71 [ 159.940334][ T5906] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 159.955198][ T29] audit: type=1326 audit(1733680405.657:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 160.015961][ T5906] usb 2-1: USB disconnect, device number 18 [ 160.063925][ T29] audit: type=1326 audit(1733680405.657:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcb17fed9 code=0x7ffc0000 [ 160.108608][ T58] usb 5-1: USB disconnect, device number 6 [ 161.830206][ T7256] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 161.838085][ T7256] netlink: 224 bytes leftover after parsing attributes in process `syz.3.400'. [ 162.254744][ T7258] netlink: 700 bytes leftover after parsing attributes in process `syz.5.402'. [ 163.535762][ T7258] veth3: entered promiscuous mode [ 165.291924][ T7290] netlink: 'syz.1.412': attribute type 29 has an invalid length. [ 165.539597][ T7296] netlink: 'syz.1.412': attribute type 29 has an invalid length. [ 165.565999][ T7290] netlink: 500 bytes leftover after parsing attributes in process `syz.1.412'. [ 166.709882][ T7310] netlink: 84 bytes leftover after parsing attributes in process `syz.2.417'. [ 166.861351][ T7318] hsr0: entered promiscuous mode [ 167.586036][ T7318] hsr0: left promiscuous mode [ 167.855527][ T7328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.927301][ T7331] dccp_invalid_packet: P.Data Offset(0) too small [ 169.370414][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 170.554769][ T7379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.561213][ T7379] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 170.656038][ T7379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.662161][ T7379] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 170.677213][ T7379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.683308][ T7379] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 170.696836][ T7379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.702931][ T7379] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 170.718054][ T7379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.724247][ T7379] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 170.738916][ T7379] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 170.745057][ T7379] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 173.080656][ T7382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.564485][ T7395] overlayfs: overlapping lowerdir path [ 174.663217][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 174.892109][ T7402] bridge_slave_1: left allmulticast mode [ 175.113949][ T7402] bridge_slave_1: left promiscuous mode [ 175.125268][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.162945][ T7402] bridge_slave_0: left allmulticast mode [ 175.177772][ T7402] bridge_slave_0: left promiscuous mode [ 175.183731][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.013148][ T7417] warning: `syz.3.449' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.085253][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 177.623952][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 177.673914][ T7423] netlink: 44 bytes leftover after parsing attributes in process `syz.1.450'. [ 177.754928][ T7437] netlink: 'syz.3.454': attribute type 29 has an invalid length. [ 177.764588][ T7437] netlink: 'syz.3.454': attribute type 29 has an invalid length. [ 177.775044][ T7437] netlink: 500 bytes leftover after parsing attributes in process `syz.3.454'. [ 178.416951][ T7440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.938122][ T7449] 9pnet_fd: Insufficient options for proto=fd [ 179.238790][ T7453] overlayfs: overlapping lowerdir path [ 179.633934][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.843946][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 179.852303][ T58] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.935987][ T7459] netlink: 700 bytes leftover after parsing attributes in process `syz.1.460'. [ 179.972071][ T58] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 179.980610][ T58] usb 5-1: config 127 has no interface number 0 [ 179.987311][ T58] usb 5-1: config 127 interface 25 has no altsetting 0 [ 180.014338][ T7459] veth5: entered promiscuous mode [ 180.240483][ T58] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 180.249696][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.257818][ T58] usb 5-1: Product: syz [ 180.262881][ T58] usb 5-1: Manufacturer: syz [ 180.267597][ T58] usb 5-1: SerialNumber: syz [ 181.079537][ T58] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 181.204367][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.5.463'. [ 181.284021][ T7477] FAULT_INJECTION: forcing a failure. [ 181.284021][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.320232][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.1.466 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 181.330879][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.340961][ T7477] Call Trace: [ 181.344265][ T7477] [ 181.347215][ T7477] dump_stack_lvl+0x241/0x360 [ 181.351924][ T7477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.357172][ T7477] ? __pfx__printk+0x10/0x10 [ 181.361790][ T7477] ? snprintf+0xda/0x120 [ 181.366056][ T7477] should_fail_ex+0x3b0/0x4e0 [ 181.370856][ T7477] _copy_to_user+0x31/0xb0 [ 181.375310][ T7477] simple_read_from_buffer+0xca/0x150 [ 181.380702][ T7477] proc_fail_nth_read+0x1e9/0x250 [ 181.385734][ T7477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.391285][ T7477] ? rw_verify_area+0x55e/0x6f0 [ 181.396143][ T7477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.401683][ T7477] vfs_read+0x1fc/0xb70 [ 181.405853][ T7477] ? __pfx___mutex_lock+0x10/0x10 [ 181.410891][ T7477] ? __pfx_vfs_read+0x10/0x10 [ 181.415568][ T7477] ? __fget_files+0x2a/0x410 [ 181.420160][ T7477] ? __fget_files+0x395/0x410 [ 181.424834][ T7477] ? __fget_files+0x2a/0x410 [ 181.429427][ T7477] ksys_read+0x18f/0x2b0 [ 181.433672][ T7477] ? __pfx_ksys_read+0x10/0x10 [ 181.438438][ T7477] ? do_syscall_64+0x100/0x230 [ 181.443205][ T7477] ? do_syscall_64+0xb6/0x230 [ 181.447884][ T7477] do_syscall_64+0xf3/0x230 [ 181.452388][ T7477] ? clear_bhb_loop+0x35/0x90 [ 181.457064][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.462959][ T7477] RIP: 0033:0x7f35a537e8ec [ 181.467372][ T7477] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.486975][ T7477] RSP: 002b:00007f35a60d5050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.495408][ T7477] RAX: ffffffffffffffda RBX: 00007f35a5545fa0 RCX: 00007f35a537e8ec [ 181.503378][ T7477] RDX: 000000000000000f RSI: 00007f35a60d50b0 RDI: 0000000000000006 [ 181.511344][ T7477] RBP: 00007f35a60d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 181.519308][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.527277][ T7477] R13: 0000000000000000 R14: 00007f35a5545fa0 R15: 00007ffefa6821e8 [ 181.535264][ T7477] [ 181.597870][ T58] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 182.054130][ T58] usb 5-1: device not accepting address 7, error -71 [ 182.165136][ T7488] 9pnet_fd: Insufficient options for proto=fd [ 183.276328][ T58] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 184.396694][ T58] usb 5-1: USB disconnect, device number 7 [ 184.558393][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.571337][ T7513] dccp_invalid_packet: P.Data Offset(0) too small [ 184.601831][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.335111][ T5906] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 185.378169][ T7518] Illegal XDP return value 4284665856 on prog (id 88) dev N/A, expect packet loss! [ 191.686123][ T7546] vlan2: entered allmulticast mode [ 191.696576][ T7546] bond0: entered allmulticast mode [ 191.701734][ T7546] bond_slave_0: entered allmulticast mode [ 191.712010][ T7546] bond_slave_1: entered allmulticast mode [ 191.725128][ T7546] bond0: left allmulticast mode [ 191.741056][ T7546] bond_slave_0: left allmulticast mode [ 191.765314][ T7546] bond_slave_1: left allmulticast mode [ 191.903948][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.166852][ T5869] usb 4-1: device descriptor read/all, error -71 [ 192.247777][ T5900] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 192.273934][ T5861] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 192.424450][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 192.435879][ T5900] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 192.450413][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.497590][ T5861] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 192.541451][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.570771][ T5900] usb 5-1: config 0 descriptor?? [ 192.605949][ T5900] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 192.626992][ T5861] usb 6-1: config 0 descriptor?? [ 192.818328][ T5900] gp8psk: usb in 128 operation failed. [ 192.840289][ T5900] gp8psk: usb in 137 operation failed. [ 192.853684][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 192.902078][ T5900] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 192.915493][ T5900] usb 5-1: USB disconnect, device number 8 [ 193.050471][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 193.068706][ T7560] bridge_slave_1: left allmulticast mode [ 193.078541][ T7560] bridge_slave_1: left promiscuous mode [ 193.089386][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.103378][ T7560] bridge_slave_0: left allmulticast mode [ 193.118743][ T7560] bridge_slave_0: left promiscuous mode [ 193.134539][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.331823][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 194.379352][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.496'. [ 194.590416][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.600253][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.978872][ T7580] 9pnet_fd: Insufficient options for proto=fd [ 195.482662][ T7582] netlink: 'syz.3.498': attribute type 29 has an invalid length. [ 195.512154][ T7582] netlink: 'syz.3.498': attribute type 29 has an invalid length. [ 195.543370][ T7582] netlink: 500 bytes leftover after parsing attributes in process `syz.3.498'. [ 195.557381][ T5861] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 195.567817][ T5861] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 195.580629][ T5861] asix 6-1:0.0: probe with driver asix failed with error -71 [ 195.599609][ T5861] usb 6-1: USB disconnect, device number 9 [ 197.969561][ T7616] 9pnet_fd: Insufficient options for proto=fd [ 199.269680][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.280647][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.405770][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.874585][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.999775][ T5823] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.007417][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.074137][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.082859][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.717264][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.734223][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.943901][ T5827] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.989804][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.181695][ T7649] xt_ecn: cannot match TCP bits for non-tcp packets [ 201.394019][ T58] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.254143][ T58] usb 3-1: device descriptor read/64, error -71 [ 202.960577][ T7624] chnl_net:caif_netlink_parms(): no params data found [ 203.231295][ T58] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.240296][ T5823] Bluetooth: hci6: command tx timeout [ 203.334575][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.341793][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.354115][ T7624] bridge_slave_0: entered allmulticast mode [ 203.364876][ T7624] bridge_slave_0: entered promiscuous mode [ 203.374341][ T58] usb 3-1: device descriptor read/64, error -71 [ 203.389327][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.424289][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.448524][ T7624] bridge_slave_1: entered allmulticast mode [ 203.484816][ T58] usb usb3-port1: attempt power cycle [ 203.495928][ T7624] bridge_slave_1: entered promiscuous mode [ 203.569975][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.273933][ T7679] netlink: 'syz.5.526': attribute type 1 has an invalid length. [ 204.281669][ T7679] netlink: 224 bytes leftover after parsing attributes in process `syz.5.526'. [ 204.505156][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.717707][ T58] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.826781][ T7681] netlink: 308 bytes leftover after parsing attributes in process `syz.4.527'. [ 205.425280][ T58] usb 3-1: device descriptor read/8, error -71 [ 205.473923][ T5823] Bluetooth: hci6: command tx timeout [ 205.489213][ T7624] team0: Port device team_slave_0 added [ 205.511311][ T7624] team0: Port device team_slave_1 added [ 205.535130][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.5.528'. [ 205.545258][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.5.528'. [ 205.665633][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.685700][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.719219][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.733283][ T7694] netlink: 596 bytes leftover after parsing attributes in process `syz.5.531'. [ 205.756893][ T7692] netlink: 'syz.5.531': attribute type 29 has an invalid length. [ 205.776645][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.783866][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.809973][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.875470][ T7693] netlink: 'syz.5.531': attribute type 29 has an invalid length. [ 205.902642][ T7624] hsr_slave_0: entered promiscuous mode [ 205.916900][ T7624] hsr_slave_1: entered promiscuous mode [ 205.923433][ T7624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.950330][ T7624] Cannot create hsr debugfs directory [ 207.212309][ T7624] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 208.169899][ T5823] Bluetooth: hci6: command tx timeout [ 209.368430][ T7624] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.554693][ T7624] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.596006][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 209.722422][ T7624] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.876874][ T7726] netlink: 'syz.3.537': attribute type 2 has an invalid length. [ 210.435685][ T7729] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 210.436006][ T7729] netlink: 224 bytes leftover after parsing attributes in process `syz.2.538'. [ 210.689862][ T5823] Bluetooth: hci6: command tx timeout [ 210.889239][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.908282][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.927112][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.934313][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.945139][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.952302][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.087336][ T7624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.264176][ T5872] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.275501][ T7736] vlan2: entered allmulticast mode [ 211.290683][ T7736] bond0: entered allmulticast mode [ 211.296876][ T7736] bond_slave_0: entered allmulticast mode [ 211.326057][ T7736] bond_slave_1: entered allmulticast mode [ 211.336332][ T7736] bond0: left allmulticast mode [ 211.343877][ T7736] bond_slave_0: left allmulticast mode [ 211.358900][ T7736] bond_slave_1: left allmulticast mode [ 211.475497][ T7624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.483812][ T5872] usb 5-1: config 3 has an invalid interface number: 246 but max is 0 [ 211.514156][ T5872] usb 5-1: config 3 has no interface number 0 [ 211.520299][ T5872] usb 5-1: config 3 interface 246 has no altsetting 0 [ 211.549819][ T5872] usb 5-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=b1.3b [ 211.565133][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.589541][ T5872] usb 5-1: Product: syz [ 211.597505][ T5872] usb 5-1: Manufacturer: syz [ 211.607303][ T5872] usb 5-1: SerialNumber: syz [ 211.680611][ T7755] netlink: 48 bytes leftover after parsing attributes in process `syz.2.546'. [ 211.731207][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 211.837663][ T7624] veth0_vlan: entered promiscuous mode [ 212.112160][ T7624] veth1_vlan: entered promiscuous mode [ 212.939718][ T5872] cdc_ether 5-1:3.246: More than one union descriptor, skipping ... [ 212.947902][ T5872] usb 5-1: bad CDC descriptors [ 212.956312][ T5872] usb 5-1: USB disconnect, device number 9 [ 213.021137][ T7624] veth0_macvtap: entered promiscuous mode [ 213.213802][ T7624] veth1_macvtap: entered promiscuous mode [ 213.283688][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.309028][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.337428][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.447392][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.508446][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.569971][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.609633][ T7777] overlayfs: overlapping lowerdir path [ 213.615685][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.721860][ T7780] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 213.729695][ T7780] netlink: 224 bytes leftover after parsing attributes in process `syz.4.551'. [ 214.221528][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.231487][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.242098][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.252026][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.263298][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.377418][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.399084][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.428958][ T7782] overlayfs: overlapping lowerdir path [ 214.471362][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.528691][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.569399][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.593711][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.608751][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.618714][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.629402][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.639320][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.650157][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.660138][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.672289][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.691252][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.711272][ T7788] netlink: 'syz.5.556': attribute type 29 has an invalid length. [ 214.711436][ T7790] netlink: 596 bytes leftover after parsing attributes in process `syz.5.556'. [ 214.733901][ T58] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 214.739408][ T7789] netlink: 'syz.5.556': attribute type 29 has an invalid length. [ 214.784508][ T7624] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.799391][ T7624] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.813119][ T7624] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.821944][ T7624] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.852403][ T7794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.894140][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 214.934606][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.965170][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.015931][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.037466][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.071694][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.992929][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.008204][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.017714][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.700182][ T7092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.728904][ T7092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.888870][ T58] usb 5-1: GET_CAPABILITIES returned 0 [ 216.894735][ T58] usbtmc 5-1:16.0: can't read capabilities [ 217.156195][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.167816][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.176944][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.186053][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.195154][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.204272][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.219558][ T7815] lo speed is unknown, defaulting to 1000 [ 217.233877][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.274514][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.275330][ T7815] lo speed is unknown, defaulting to 1000 [ 217.283647][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 217.293050][ T7815] lo speed is unknown, defaulting to 1000 [ 217.298773][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.265436][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.274591][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.283710][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.292795][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.301865][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.310941][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 219.664883][ T7815] infiniband syz0: set active [ 219.670570][ T7815] infiniband syz0: added lo [ 219.735448][ T5906] lo speed is unknown, defaulting to 1000 [ 219.747709][ T7815] syz0: rxe_create_cq: returned err = -12 [ 219.764047][ T7815] infiniband syz0: Couldn't create ib_mad CQ [ 219.770249][ T7815] infiniband syz0: Couldn't open port 1 [ 219.795810][ T5906] usb 5-1: USB disconnect, device number 10 [ 219.897233][ T7815] RDS/IB: syz0: added [ 219.901871][ T7815] smc: adding ib device syz0 with port count 1 [ 219.944822][ T7815] smc: ib device syz0 port 1 has pnetid [ 219.996063][ T5906] lo speed is unknown, defaulting to 1000 [ 220.034987][ T7815] lo speed is unknown, defaulting to 1000 [ 220.235682][ T7832] netlink: 308 bytes leftover after parsing attributes in process `syz.2.563'. [ 220.353586][ T7834] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 220.361469][ T7834] netlink: 224 bytes leftover after parsing attributes in process `syz.4.564'. [ 221.707553][ T7838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.273979][ T30] INFO: task udevd:5821 blocked for more than 144 seconds. [ 223.281245][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 223.313450][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 223.397167][ T7815] lo speed is unknown, defaulting to 1000 [ 223.453100][ T30] task:udevd state:D stack:21464 pid:5821 tgid:5821 ppid:5193 flags:0x00004002 [ 223.475116][ T30] Call Trace: [ 223.478476][ T30] [ 223.481458][ T30] __schedule+0x17fb/0x4be0 [ 223.508235][ T30] ? __pfx___schedule+0x10/0x10 [ 223.513168][ T30] ? __blk_flush_plug+0x449/0x500 [ 223.533406][ T30] ? __pfx_lock_release+0x10/0x10 [ 223.571180][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.580322][ T30] ? schedule+0x90/0x320 [ 223.598584][ T30] schedule+0x14b/0x320 [ 223.608315][ T7815] lo speed is unknown, defaulting to 1000 [ 223.608728][ T30] schedule_timeout+0x15a/0x290 [ 223.626378][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 223.632086][ T30] ? __pfx_process_timeout+0x10/0x10 [ 223.641971][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 223.650979][ T30] nbd_queue_rq+0x7d9/0x2ef0 [ 223.657833][ T30] ? mark_lock+0x9a/0x360 [ 223.667928][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 223.673140][ T30] ? __lock_acquire+0x1397/0x2100 [ 223.688531][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 223.697232][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 223.702935][ T30] ? sbitmap_get+0x289/0x3f0 [ 223.712746][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 223.730796][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 223.739027][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 223.752475][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 223.760766][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 223.772707][ T30] ? __pfx___might_resched+0x10/0x10 [ 223.779817][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 223.793830][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 223.799615][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 223.814872][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 223.820319][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 223.823184][ T7815] lo speed is unknown, defaulting to 1000 [ 223.825811][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 223.849017][ T30] ? __pfx_update_io_ticks+0x10/0x10 [ 223.856793][ T30] ? blk_add_rq_to_plug+0x308/0x4b0 [ 223.862224][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 223.876285][ T30] ? blk_mq_submit_bio+0xf74/0x2390 [ 223.881553][ T30] __blk_flush_plug+0x420/0x500 [ 223.889457][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 223.895793][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 223.901334][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.907963][ T30] __submit_bio+0x46a/0x560 [ 223.912646][ T30] ? __pfx___submit_bio+0x10/0x10 [ 223.917954][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 223.935993][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 223.942059][ T30] ? __pfx___might_resched+0x10/0x10 [ 223.973868][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 223.984090][ T30] block_read_full_folio+0x93b/0xcd0 [ 223.993973][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 223.999401][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 224.015494][ T30] ? folio_add_lru+0x1cd/0x4f0 [ 224.020328][ T30] filemap_read_folio+0x14b/0x630 [ 224.030604][ T7815] lo speed is unknown, defaulting to 1000 [ 224.035852][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 224.041843][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 224.051299][ T30] do_read_cache_folio+0x3f5/0x850 [ 224.058626][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 224.064559][ T30] read_part_sector+0xb3/0x330 [ 224.069458][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 224.084712][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 224.101130][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 224.107353][ T30] ? snprintf+0xda/0x120 [ 224.115379][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 224.126726][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 224.136451][ T30] ? vsnprintf+0x184/0x1da0 [ 224.141088][ T30] ? __pfx_snprintf+0x10/0x10 [ 224.146381][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 224.151279][ T30] bdev_disk_changed+0x72c/0x13f0 [ 224.157027][ T30] ? __pfx___might_resched+0x10/0x10 [ 224.162456][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 224.163384][ T7815] lo speed is unknown, defaulting to 1000 [ 224.168915][ T30] ? wait_on_inode+0xc1/0x230 [ 224.179082][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 224.184625][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 224.235673][ T30] blkdev_get_whole+0x2d2/0x450 [ 224.246424][ T30] bdev_open+0x2d4/0xc50 [ 224.262422][ T30] blkdev_open+0x389/0x4f0 [ 224.271016][ T7815] lo speed is unknown, defaulting to 1000 [ 224.274574][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 224.292560][ T30] do_dentry_open+0xbe1/0x1b70 [ 224.315596][ T30] vfs_open+0x3e/0x330 [ 224.326483][ T30] path_openat+0x2c84/0x3590 [ 224.340703][ T30] ? __pfx_path_openat+0x10/0x10 [ 224.355908][ T30] do_filp_open+0x27f/0x4e0 [ 224.369662][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 224.386413][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 224.412204][ T30] do_sys_openat2+0x13e/0x1d0 [ 224.425273][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 224.438632][ T30] __x64_sys_openat+0x247/0x2a0 [ 224.463726][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 224.499429][ T30] ? do_syscall_64+0x100/0x230 [ 224.513872][ T30] ? do_syscall_64+0xb6/0x230 [ 224.523161][ T30] do_syscall_64+0xf3/0x230 [ 224.527981][ T30] ? clear_bhb_loop+0x35/0x90 [ 224.542176][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.548266][ T30] RIP: 0033:0x7fb629f169a4 [ 224.552721][ T30] RSP: 002b:00007ffdce677de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.568624][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb629f169a4 [ 224.578027][ T30] RDX: 0000000000080000 RSI: 0000561805d8a4b0 RDI: 00000000ffffff9c [ 224.586321][ T30] RBP: 0000561805d8a4b0 R08: 0000561805d9fa80 R09: 00007fb629ff1c10 [ 224.594587][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 224.604818][ T30] R13: 0000561805d9fa80 R14: 0000000000000000 R15: 0000000000000001 [ 224.612853][ T30] [ 224.616115][ T30] [ 224.616115][ T30] Showing all locks held in the system: [ 224.626268][ T30] 1 lock held by ksoftirqd/0/16: [ 224.669122][ T30] #0: ffff8880b863e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 224.691291][ T30] 1 lock held by khungtaskd/30: [ 224.713547][ T30] #0: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 224.723827][ T30] 2 locks held by kworker/u8:4/77: [ 224.728972][ T30] #0: ffff88814569d948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 224.741080][ T30] #1: ffffc9000213fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 224.755477][ T30] 2 locks held by getty/5570: [ 224.760193][ T30] #0: ffff88814d8320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 224.777781][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 224.791619][ T30] 3 locks held by udevd/5821: [ 224.801198][ T30] #0: ffff8881443464c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 224.819958][ T30] #1: ffff88814435e910 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 224.830484][ T30] #2: ffff88802553e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 224.847545][ T30] 2 locks held by syz.0.81/6184: [ 224.852542][ T30] #0: ffff8880788c20e0 (&type->s_umount_key#49/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 224.864761][ T30] #1: ffff8881443464c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 224.874349][ T30] 3 locks held by udevd/6209: [ 224.879055][ T30] #0: ffff88802543e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 224.888399][ T30] #1: ffff888142be1f90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 224.898253][ T30] #2: ffff888025607178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 224.910684][ T30] 2 locks held by syz.1.475/7515: [ 224.920247][ T30] #0: ffff88807ef1e0e0 (&type->s_umount_key#61/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 224.933929][ T30] #1: ffff88802543e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 224.943272][ T30] 1 lock held by syz.4.569/7848: [ 224.953790][ T30] #0: ffffffff8e93ce80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 224.970865][ T30] 1 lock held by syz.4.569/7850: [ 224.977350][ T30] 2 locks held by dhcpcd/7854: [ 224.982166][ T30] #0: ffff888045a56258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 224.995397][ T30] #1: ffffffff8e93cfb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 225.006774][ T30] [ 225.009160][ T30] ============================================= [ 225.009160][ T30] [ 225.025046][ T30] NMI backtrace for cpu 1 [ 225.029440][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 225.039977][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.050072][ T30] Call Trace: [ 225.053384][ T30] [ 225.056336][ T30] dump_stack_lvl+0x241/0x360 [ 225.061053][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.066284][ T30] ? __pfx__printk+0x10/0x10 [ 225.070917][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 225.075892][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 225.081383][ T30] ? _printk+0xd5/0x120 [ 225.085567][ T30] ? __pfx__printk+0x10/0x10 [ 225.090182][ T30] ? __wake_up_klogd+0xcc/0x110 [ 225.095063][ T30] ? __pfx__printk+0x10/0x10 [ 225.099773][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 225.104824][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 225.110852][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 225.116877][ T30] watchdog+0xff6/0x1040 [ 225.121158][ T30] ? watchdog+0x1ea/0x1040 [ 225.125622][ T30] ? __pfx_watchdog+0x10/0x10 [ 225.130334][ T30] kthread+0x2f0/0x390 [ 225.134434][ T30] ? __pfx_watchdog+0x10/0x10 [ 225.139135][ T30] ? __pfx_kthread+0x10/0x10 [ 225.143733][ T30] ret_from_fork+0x4b/0x80 [ 225.148156][ T30] ? __pfx_kthread+0x10/0x10 [ 225.152779][ T30] ret_from_fork_asm+0x1a/0x30 [ 225.157574][ T30] [ 225.161907][ T30] Sending NMI from CPU 1 to CPUs 0: [ 225.168079][ C0] NMI backtrace for cpu 0 [ 225.168095][ C0] CPU: 0 UID: 0 PID: 7850 Comm: syz.4.569 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 225.168115][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.168125][ C0] RIP: 0010:__lock_acquire+0x12d/0x2100 [ 225.168149][ C0] Code: 0f 84 1a 13 00 00 49 8d bc 24 d8 0a 00 00 48 89 f8 48 c1 e8 03 48 89 44 24 30 0f b6 04 30 84 c0 48 89 3c 24 0f 85 4c 16 00 00 <8b> 17 48 c7 c0 c0 c9 38 9a 48 c1 e8 03 0f b6 04 30 84 c0 48 89 54 [ 225.168164][ C0] RSP: 0018:ffffc90003267310 EFLAGS: 00000046 [ 225.168180][ C0] RAX: 0000000000000000 RBX: ffffffff93c46350 RCX: 0000000000000001 [ 225.168192][ C0] RDX: ffffffff93df5740 RSI: dffffc0000000000 RDI: ffff88802a108ad8 [ 225.168210][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 225.168221][ C0] R10: dffffc0000000000 R11: fffffbfff2030457 R12: ffff88802a108000 [ 225.168234][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888079007950 [ 225.168245][ C0] FS: 00007f6bd1fd56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 225.168260][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.168272][ C0] CR2: 000055b941afa600 CR3: 000000005b82a000 CR4: 00000000003526f0 [ 225.168287][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.168297][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.168308][ C0] Call Trace: [ 225.168314][ C0] [ 225.168321][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 225.168341][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 225.168359][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 225.168383][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 225.168406][ C0] ? nmi_handle+0x14f/0x5a0 [ 225.168424][ C0] ? nmi_handle+0x2a/0x5a0 [ 225.168441][ C0] ? __lock_acquire+0x12d/0x2100 [ 225.168458][ C0] ? default_do_nmi+0x63/0x160 [ 225.168475][ C0] ? exc_nmi+0x123/0x1f0 [ 225.168492][ C0] ? end_repeat_nmi+0xf/0x53 [ 225.168511][ C0] ? __lock_acquire+0x12d/0x2100 [ 225.168528][ C0] ? __lock_acquire+0x12d/0x2100 [ 225.168545][ C0] ? __lock_acquire+0x12d/0x2100 [ 225.168562][ C0] [ 225.168567][ C0] [ 225.168577][ C0] ? validate_chain+0x11e/0x5920 [ 225.168598][ C0] lock_acquire+0x1ed/0x550 [ 225.168614][ C0] ? __unix_dgram_recvmsg+0x246/0x12f0 [ 225.168633][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 225.168651][ C0] ? __pfx___might_resched+0x10/0x10 [ 225.168676][ C0] ? __pfx_validate_chain+0x10/0x10 [ 225.168696][ C0] ? validate_chain+0x11e/0x5920 [ 225.168716][ C0] ? __unix_dgram_recvmsg+0xcf4/0x12f0 [ 225.168733][ C0] __mutex_lock+0x1ac/0xee0 [ 225.168756][ C0] ? __unix_dgram_recvmsg+0x246/0x12f0 [ 225.168771][ C0] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 225.168795][ C0] ? __unix_dgram_recvmsg+0x246/0x12f0 [ 225.168811][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 225.168832][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.168858][ C0] ? __lock_acquire+0x1397/0x2100 [ 225.168877][ C0] __unix_dgram_recvmsg+0x246/0x12f0 [ 225.168898][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 225.168926][ C0] ? iovec_from_user+0x61/0x240 [ 225.168949][ C0] ? __import_iovec+0x3a8/0x870 [ 225.168970][ C0] ? unix_dgram_recvmsg+0xb6/0xe0 [ 225.168989][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 225.169008][ C0] sock_recvmsg_nosec+0x18e/0x1d0 [ 225.169033][ C0] ____sys_recvmsg+0x3cd/0x480 [ 225.169056][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 225.169079][ C0] ? do_recvmmsg+0x44e/0xab0 [ 225.169097][ C0] ? __might_fault+0xaa/0x120 [ 225.169119][ C0] do_recvmmsg+0x426/0xab0 [ 225.169141][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 225.169160][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 225.169185][ C0] ? futex_wait+0x285/0x360 [ 225.169203][ C0] ? __pfx_futex_wait+0x10/0x10 [ 225.169229][ C0] ? fd_install+0x9c/0x5d0 [ 225.169247][ C0] ? __pfx_lock_release+0x10/0x10 [ 225.169268][ C0] ? __pfx_do_futex+0x10/0x10 [ 225.169297][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 225.169317][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 225.169337][ C0] ? do_syscall_64+0x100/0x230 [ 225.169361][ C0] ? do_syscall_64+0xb6/0x230 [ 225.169383][ C0] do_syscall_64+0xf3/0x230 [ 225.169406][ C0] ? clear_bhb_loop+0x35/0x90 [ 225.169421][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.169445][ C0] RIP: 0033:0x7f6bd417fed9 [ 225.169459][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.169473][ C0] RSP: 002b:00007f6bd1fd5058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 225.169489][ C0] RAX: ffffffffffffffda RBX: 00007f6bd4346080 RCX: 00007f6bd417fed9 [ 225.169502][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 225.169513][ C0] RBP: 00007f6bd41f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 225.169523][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 225.169533][ C0] R13: 0000000000000000 R14: 00007f6bd4346080 R15: 00007ffcc4af3698 [ 225.169550][ C0] [ 225.676404][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 225.683317][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 225.693849][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.703937][ T30] Call Trace: [ 225.707241][ T30] [ 225.710254][ T30] dump_stack_lvl+0x241/0x360 [ 225.714994][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.720221][ T30] ? __pfx__printk+0x10/0x10 [ 225.724868][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 225.730877][ T30] ? vscnprintf+0x5d/0x90 [ 225.735237][ T30] panic+0x349/0x880 [ 225.739161][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 225.745344][ T30] ? __pfx_panic+0x10/0x10 [ 225.749783][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 225.755177][ T30] ? __irq_work_queue_local+0x137/0x410 [ 225.760743][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 225.766147][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 225.772331][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 225.778506][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 225.784681][ T30] watchdog+0x1035/0x1040 [ 225.789036][ T30] ? watchdog+0x1ea/0x1040 [ 225.793468][ T30] ? __pfx_watchdog+0x10/0x10 [ 225.798157][ T30] kthread+0x2f0/0x390 [ 225.802242][ T30] ? __pfx_watchdog+0x10/0x10 [ 225.806938][ T30] ? __pfx_kthread+0x10/0x10 [ 225.811551][ T30] ret_from_fork+0x4b/0x80 [ 225.816068][ T30] ? __pfx_kthread+0x10/0x10 [ 225.820680][ T30] ret_from_fork_asm+0x1a/0x30 [ 225.825476][ T30] [ 225.828651][ T30] Kernel Offset: disabled [ 225.832986][ T30] Rebooting in 86400 seconds..