last executing test programs: 55.988174682s ago: executing program 1 (id=360): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r1, @ANYBLOB="050700004000fddbdf2501000000400102800c00018008000100070000002c00018008000100000000000800010000000000080001000300000008000100020000000800010008000000140001800800011607000000080001000000000044000180080001000800000008000100080000000800010004000000080001000000000008000100060000000800010007000000080001000000000008000100010000001400018008000100020000000800010002000000440001800800010004000000080001000700000008000100050000000800010002000000080001000700000008000100020000000800010003000000080001000300000054000180"], 0x154}, 0x1, 0x0, 0x0, 0x44}, 0x0) 55.898808976s ago: executing program 0 (id=362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff, 0xff, 0xffffff00, 0xff], 'veth1_to_team\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0xc, 0x6, 0xa1ffaa7d9de9be28, 0x8}, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00', {0x693}}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xfffffffa, 0x70, 0x9, 0x81, 0x65d, 0xb, 0x6]}}}], {{'\x00', 0x0, 0xa4, 0xc8, 0x0, {0x4100000000000000}}, {0x24}}}}, 0x3bc) 55.89150062s ago: executing program 2 (id=363): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) capset(&(0x7f0000000200)={0x19980330, r0}, &(0x7f00000002c0)={0x4004, 0x4, 0x8001, 0x2be, 0x7, 0xc0d7}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x4c2041) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) getsockopt$inet_pktinfo(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x54) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) (async) capset(&(0x7f0000000200)={0x19980330, r0}, &(0x7f00000002c0)={0x4004, 0x4, 0x8001, 0x2be, 0x7, 0xc0d7}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x4c2041) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x54) (async) 55.68596822s ago: executing program 1 (id=365): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 55.624104086s ago: executing program 0 (id=366): bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000010180)=[{{0x0, 0x0, &(0x7f0000007200)=[{&(0x7f0000006f80)="ba187c338d7579ce", 0x8}, {&(0x7f0000007000)="41f014009446", 0x6}, {&(0x7f0000007080)="5472ea7b0bfab770d1134daf4fe778f8cd7f1db3f8da2b33c6d095e728b55d36198eb42b39f430bd5751ac360942b5c82a641cb3b7d07c52ae", 0x39}], 0x3}}], 0x1, 0x20040040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x36c, 0xffffffff, 0x1b8, 0x1b8, 0x1b8, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @loopback, [0xffffffff, 0xff, 0xff000000], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'gre0\x00', {}, {}, 0xff, 0x0, 0x6, 0x8}, 0x2f2, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'ip6gre0\x00', {0xe2d}}}}, {{@ipv6={@private2, @empty, [0x87000000, 0x0, 0xffffff00], [], 'ipvlan0\x00', 'batadv_slave_1\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x685, 0x9, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {}, 0x2b, 0x9, 0x2, 0x48}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0xff}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) r2 = socket$inet(0x2, 0x1, 0xfffffffc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x9}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e21, @remote}}, 0x1, 0xa5ee}, 0x88) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x20, 0x0, 0x1}) pipe2(&(0x7f0000000400), 0x80080) 55.542951811s ago: executing program 2 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe21, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}}], {0x14}}, 0xdc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911042000000009095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000440)) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0405619, &(0x7f0000001640)={0x5, 0xffffff, "008e06f5a58a381e6397687ee2fe24e41b647c05262643b7", {0xf, 0x8}, 0x9}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x4d4, 0x190, 0xc8, 0xc8, 0x258, 0xc8, 0x40c, 0x40c, 0x40c, 0x40c, 0x40c, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x258}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x530) 55.53404613s ago: executing program 1 (id=369): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="150000"], 0x18}}], 0x1, 0x2000162e) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{}, 0x7, 0x0, 0x0, 0x0, 0x0}}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) open_by_handle_at(r4, &(0x7f00000001c0)=@xfs={0x1c, 0x81, {0x5, 0x5, 0x3, 0x6}}, 0x34900) 55.456829854s ago: executing program 3 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x2, 0x4, 0x0, 0x0, 0x14, 0x0, {0x1, r3}}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0x10000000}}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004095}, 0x4c041) r5 = openat$vnet(0xffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000) ioctl$VHOST_VDPA_GET_STATUS(r5, 0x8001af71, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5233f", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES16, @ANYRESDEC=r4], 0x50}}, 0x4008840) 55.174488374s ago: executing program 2 (id=372): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x181401) r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x11, 0x0, 0x14, 0x0, 0x60, 0xfffffffc}}) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000001e40)={0x2020}, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) io_setup(0x58, 0x0) io_submit(0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0xffff, &(0x7f0000000100)) syz_emit_ethernet(0x4a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40840) 55.146601204s ago: executing program 3 (id=373): syz_emit_ethernet(0xb6, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x80, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf85, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "00000000040000012600041b"}, {0x5, 0x1, "000000001b00"}, {0x18, 0x1, "45976e75e433"}]}}}}}}, 0x0) 55.023224336s ago: executing program 4 (id=374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000008e0272000040"]) 55.00731029s ago: executing program 3 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000300000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 54.9784707s ago: executing program 0 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x4000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfffffffffffffe34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x44, 0xea602) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) 54.859004377s ago: executing program 0 (id=377): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x8, 0x5, 0x4c4, 0x138, 0x138, 0xffffffff, 0x0, 0x0, 0x3fc, 0x3fc, 0xffffffff, 0x3fc, 0x3fc, 0x5, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'gretap0\x00', 'wg2\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={{0x24}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x6}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@loopback, @gre_key}}}, {{@ipv6={@private2, @dev, [], [], 'bond_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv6=@dev, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'veth1_to_hsr\x00', 'veth0_vlan\x00'}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@loopback, @icmp_id, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan0\x00', 'macvtap0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x520) r1 = openat$full(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/5, 0x5}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/236, 0xec}], 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="080026009409f0000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 54.745412308s ago: executing program 3 (id=378): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x7f, 0xffffffffffffffff, 0x8, {0x1, 0x4b41bd79}, 0xd4}, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0x3) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r3, r4, 0x8000, '\x00', 0x1, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x80000b, 0x4, 0x3}}}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x920802, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}], [{@appraise_type}, {@seclabel}, {@audit}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) sched_getaffinity(0x0, 0x4, &(0x7f0000000100)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x00']}) 54.680017418s ago: executing program 0 (id=379): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) setsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000380)="67609f1bc76b660c7f522543621903dbd6dfb1322eb58ade49f7f6873e8c5b3a1e47a60fb805cbdca74d2ef9be337149a65b0c074f4b1001eff7a36fd2627258a02a3b46aba1f0f5f27cca55a28ffd26acca165107f55e8dfc020f192c7931515be26928a4af66540b951c34e67537616956b8022eaf08fef4a00257a4868b80ff3c2fcbe10ae082c9c46072d2c8e96da8a63af5cb6d56edf5d74507277a42ff37ed45231249e12d7e84a0cb2f08f24f1fd6010187f1a047", 0xb8) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x30000008}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0xc2a10a980d0dcec8}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0xe88, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_ACT={0xe58, 0x4, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe31, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xca, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x80007, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0xcf2f, 0x2, 0x8}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x9, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010026bd7000000000000200000001000001000000001400030073797a6b616c6ce57230000000000000"], 0x30}}, 0x0) 54.555215439s ago: executing program 4 (id=380): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000039081000", 0xfe60) 54.510731031s ago: executing program 3 (id=381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xf1}, 0x18) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000700)={@empty, @local, 0x18, 0xd}}) (async) syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf4, 0x78, 0x68, 0x8, 0xab4, 0x14, 0xc418, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2d, 0x8a, 0x54}}]}}]}}, 0x0) 53.934821629s ago: executing program 4 (id=382): unshare(0x2040600) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000005000000000000fe8000000000000000000000000000aa87"], 0x0) 53.50447803s ago: executing program 4 (id=383): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0xffffab56, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 53.249836168s ago: executing program 4 (id=384): unlinkat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0xffffffffffffffff, 0x0, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003540), 0x0, 0x40020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x8000) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffd, 0x81, 0xfffffffb}) r7 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 52.613381746s ago: executing program 3 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c40000001b0001000000000000000000fc0100000000000000000000000000010000000000000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b66b6e0000008000000000000c0015000000000000000000"], 0xc4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x2, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r2, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x4, 0x40100008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, 0x0, 0x20000004) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000180)}, 0x8090) 52.163173834s ago: executing program 1 (id=386): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) unshare(0x24060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x64, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 52.122956617s ago: executing program 4 (id=387): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@local}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8800, &(0x7f0000000200)={0x88, 0x0, 0x100000}, 0x20) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xdffffffc, 0x0, 0x4) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000240)='./binderfs2/binder-control\x00', 0x800, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r9}, &(0x7f0000000300), &(0x7f0000000800)=r10}, 0x1c) r11 = openat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) poll(&(0x7f0000000180)=[{r5, 0x90}, {r1, 0x10}, {r1, 0x1040}, {r0, 0x402}, {r0, 0x30}, {r3, 0x100}, {r9, 0x300}, {r11, 0x2042}, {r1, 0x6}], 0x9, 0xfffffff8) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 52.049135143s ago: executing program 1 (id=388): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0x404c0e0) (fail_nth: 16) 51.235177539s ago: executing program 2 (id=389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x1, 0x8001, &(0x7f00000001c0)=""/71, &(0x7f0000000000)=0x47) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x424, 0x8001, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000140)=0x80000000, 0x4) 51.217677818s ago: executing program 2 (id=390): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x100010000000000, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 51.146590194s ago: executing program 1 (id=391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0xfc}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x75653100}, 0x0, {0x3}}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x3, 0x0, @loopback, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) listen(r0, 0x7) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000200)=0x7, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}, {0x0}], 0x2) r3 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r3, 0x0, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000f59a55200d0522015e9a0000000109021200010000000009041b00001c45350069629d5dca1c4c407d92513c2bfa07f42d06a97f41148c6d23a1d03a14715858fb3cb23d85bacb0df141b1e6a2977232cc0dcea46bf15ed1f6a6d0e487754cda69000f2fe6a46eb8796dbd0093acd67c5db582204bf4917ec2f45e86cde4291a846f19116d62b994137fb45fdbeef62e"], 0x0) shutdown(r3, 0x1) 50.322983111s ago: executing program 0 (id=392): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x109c00, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000ac0)={0xf}) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc0a}}, 0x11c) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x2f, 0x0, 0x0, "bb780bd3a19e6059fd50bbfa4989ee7571fd3872abdce5c08f6636848abf9ebc1e4b4a946d83ce6048cc6291"}, @md5sig={0x13, 0x12, "a4ddbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000380), 0x2, 0x1) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) 50.026340903s ago: executing program 2 (id=393): openat$zero(0xffffff9c, 0x0, 0x200000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000010000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005"], 0xf0}}, 0x0) 0s ago: executing program 32 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c40000001b0001000000000000000000fc0100000000000000000000000000010000000000000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b66b6e0000008000000000000c0015000000000000000000"], 0xc4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x2, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r2, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x4, 0x40100008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, 0x0, 0x20000004) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000180)}, 0x8090) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 74.842871][ T5815] cgroup: Unknown subsys name 'net' [ 74.959987][ T5815] cgroup: Unknown subsys name 'cpuset' [ 74.968652][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.457693][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.296232][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.304671][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.304778][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.319863][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.326840][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.329449][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.334790][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.341857][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.356027][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.356962][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.363751][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.370538][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.378032][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.384524][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.392223][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.405033][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.405256][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.420129][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.425353][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.435805][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.446762][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.454127][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.467613][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.475691][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.484904][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.028135][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 81.216906][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 81.311508][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 81.388905][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.398173][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.408428][ T5844] bridge_slave_0: entered allmulticast mode [ 81.417230][ T5844] bridge_slave_0: entered promiscuous mode [ 81.426318][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.433430][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.441063][ T5844] bridge_slave_1: entered allmulticast mode [ 81.448361][ T5844] bridge_slave_1: entered promiscuous mode [ 81.479818][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 81.602466][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 81.700835][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.714222][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.803786][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.811400][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.819500][ T5842] bridge_slave_0: entered allmulticast mode [ 81.827376][ T5842] bridge_slave_0: entered promiscuous mode [ 81.848388][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.855467][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.862869][ T5843] bridge_slave_0: entered allmulticast mode [ 81.870564][ T5843] bridge_slave_0: entered promiscuous mode [ 81.921445][ T5844] team0: Port device team_slave_0 added [ 81.928175][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.935693][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.943577][ T5842] bridge_slave_1: entered allmulticast mode [ 81.950946][ T5842] bridge_slave_1: entered promiscuous mode [ 81.973667][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.980962][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.991050][ T5843] bridge_slave_1: entered allmulticast mode [ 81.998522][ T5843] bridge_slave_1: entered promiscuous mode [ 82.025609][ T5844] team0: Port device team_slave_1 added [ 82.092701][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.099914][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.107708][ T5845] bridge_slave_0: entered allmulticast mode [ 82.114804][ T5845] bridge_slave_0: entered promiscuous mode [ 82.137354][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.175677][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.183345][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.191104][ T5845] bridge_slave_1: entered allmulticast mode [ 82.201985][ T5845] bridge_slave_1: entered promiscuous mode [ 82.211619][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.219478][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.245584][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.259285][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.271450][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.305851][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.313204][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.339330][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.359831][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.410998][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.437061][ T5837] Bluetooth: hci1: command tx timeout [ 82.442826][ T5837] Bluetooth: hci0: command tx timeout [ 82.450837][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.459200][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.466414][ T5846] bridge_slave_0: entered allmulticast mode [ 82.473502][ T5846] bridge_slave_0: entered promiscuous mode [ 82.482086][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.489594][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.499309][ T5846] bridge_slave_1: entered allmulticast mode [ 82.506691][ T5846] bridge_slave_1: entered promiscuous mode [ 82.515649][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.516207][ T5837] Bluetooth: hci2: command tx timeout [ 82.530354][ T5835] Bluetooth: hci3: command tx timeout [ 82.536003][ T5835] Bluetooth: hci4: command tx timeout [ 82.559375][ T5842] team0: Port device team_slave_0 added [ 82.569992][ T5843] team0: Port device team_slave_0 added [ 82.578215][ T5843] team0: Port device team_slave_1 added [ 82.637251][ T5842] team0: Port device team_slave_1 added [ 82.685296][ T5845] team0: Port device team_slave_0 added [ 82.707321][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.714283][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.740621][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.753771][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.760990][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.798219][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.817107][ T5844] hsr_slave_0: entered promiscuous mode [ 82.824242][ T5844] hsr_slave_1: entered promiscuous mode [ 82.834138][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.848824][ T5845] team0: Port device team_slave_1 added [ 82.868598][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.875585][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.902094][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.923374][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.977333][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.984287][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.010242][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.038163][ T5846] team0: Port device team_slave_0 added [ 83.044708][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.054534][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.081044][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.127866][ T5846] team0: Port device team_slave_1 added [ 83.147179][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.154134][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.180402][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.270349][ T5845] hsr_slave_0: entered promiscuous mode [ 83.277164][ T5845] hsr_slave_1: entered promiscuous mode [ 83.283320][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.291167][ T5845] Cannot create hsr debugfs directory [ 83.314370][ T5843] hsr_slave_0: entered promiscuous mode [ 83.321839][ T5843] hsr_slave_1: entered promiscuous mode [ 83.328430][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.336085][ T5843] Cannot create hsr debugfs directory [ 83.382570][ T5842] hsr_slave_0: entered promiscuous mode [ 83.388997][ T5842] hsr_slave_1: entered promiscuous mode [ 83.396758][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.404345][ T5842] Cannot create hsr debugfs directory [ 83.433633][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.441018][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.466995][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.525281][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.532498][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.558892][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.824604][ T5846] hsr_slave_0: entered promiscuous mode [ 83.831592][ T5846] hsr_slave_1: entered promiscuous mode [ 83.838173][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.845743][ T5846] Cannot create hsr debugfs directory [ 84.069417][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.095401][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.124839][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.161296][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.245786][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.256509][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.281963][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.310479][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.382798][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.394230][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.405846][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.415810][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.503495][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.516527][ T5829] Bluetooth: hci1: command tx timeout [ 84.521963][ T5837] Bluetooth: hci0: command tx timeout [ 84.557573][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.573433][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.585257][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.596764][ T5837] Bluetooth: hci2: command tx timeout [ 84.597395][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.602166][ T5837] Bluetooth: hci4: command tx timeout [ 84.614739][ T5829] Bluetooth: hci3: command tx timeout [ 84.625197][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.671188][ T3121] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.678466][ T3121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.713997][ T3121] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.721136][ T3121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.778870][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.803437][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.814632][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.824892][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.848771][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.951977][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.975269][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.024079][ T3121] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.031234][ T3121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.065775][ T3121] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.072889][ T3121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.084872][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.112132][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.135963][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.143165][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.192864][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.199995][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.270955][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.308679][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.333146][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.361572][ T5844] veth0_vlan: entered promiscuous mode [ 85.373427][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.380587][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.418043][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.425129][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.442432][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.460451][ T5844] veth1_vlan: entered promiscuous mode [ 85.480039][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.487139][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.521399][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.543181][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.550352][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.591026][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.645868][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.685506][ T5844] veth0_macvtap: entered promiscuous mode [ 85.697937][ T5844] veth1_macvtap: entered promiscuous mode [ 85.735170][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.771862][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.821613][ T5842] veth0_vlan: entered promiscuous mode [ 85.830855][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.843315][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.852173][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.861281][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.874820][ T5843] veth0_vlan: entered promiscuous mode [ 85.881741][ T5845] veth0_vlan: entered promiscuous mode [ 85.919902][ T5845] veth1_vlan: entered promiscuous mode [ 85.927516][ T5842] veth1_vlan: entered promiscuous mode [ 85.934304][ T5843] veth1_vlan: entered promiscuous mode [ 85.960569][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.040741][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.051604][ T5845] veth0_macvtap: entered promiscuous mode [ 86.062633][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.100519][ T5845] veth1_macvtap: entered promiscuous mode [ 86.147351][ T5842] veth0_macvtap: entered promiscuous mode [ 86.157795][ T5843] veth0_macvtap: entered promiscuous mode [ 86.159274][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.173311][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.185177][ T5846] veth0_vlan: entered promiscuous mode [ 86.193371][ T5842] veth1_macvtap: entered promiscuous mode [ 86.213966][ T5843] veth1_macvtap: entered promiscuous mode [ 86.237584][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.248988][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.260625][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.285023][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.302998][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.318603][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.332007][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.341578][ T5846] veth1_vlan: entered promiscuous mode [ 86.354883][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.370491][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.379473][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.388696][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.415896][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.427601][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.439913][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.450617][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.463463][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.506243][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.519689][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.529806][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.540516][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.550642][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.561585][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.573962][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.581599][ T5885] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 86.588915][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.597330][ T5829] Bluetooth: hci0: command tx timeout [ 86.606080][ T5837] Bluetooth: hci1: command tx timeout [ 86.614713][ T3072] cfg80211: failed to load regulatory.db [ 86.625504][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.625629][ T5885] mmap: syz.3.4 (5885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.635463][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.657956][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.669304][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.680209][ T5837] Bluetooth: hci3: command tx timeout [ 86.680255][ T5829] Bluetooth: hci4: command tx timeout [ 86.685612][ T5837] Bluetooth: hci2: command tx timeout [ 86.720436][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.731873][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.743398][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.754062][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.764829][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.775561][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.788795][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.799723][ T5886] tipc: Started in network mode [ 86.804673][ T5886] tipc: Node identity ac14140f, cluster identity 4711 [ 86.814189][ T5886] tipc: New replicast peer: 255.255.255.255 [ 86.823996][ T5886] tipc: Enabled bearer , priority 10 [ 86.887394][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.897719][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.906864][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.915573][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.941767][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.955856][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.970697][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.979461][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.039194][ T5846] veth0_macvtap: entered promiscuous mode [ 87.050208][ T5846] veth1_macvtap: entered promiscuous mode [ 87.093304][ T4507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.103977][ T4507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.244737][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.283689][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.301364][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.319656][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.339895][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.356047][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.373054][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.403265][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.424567][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.450658][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.452054][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.482382][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.492331][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.510312][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.521791][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.534298][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.547785][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.573413][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.590527][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.632020][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.641636][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.652256][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.661653][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.680849][ T3121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.691078][ T24] usb 4-1: config 0 has no interfaces? [ 87.706613][ T3121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.733698][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.746865][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.760724][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 87.778275][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.786812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.837369][ T24] usb 4-1: Product: syz [ 87.844452][ T24] usb 4-1: Manufacturer: syz [ 87.859554][ T24] usb 4-1: SerialNumber: syz [ 87.892964][ T24] usb 4-1: config 0 descriptor?? [ 87.918880][ T4507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.936601][ T10] tipc: Node number set to 2886997007 [ 87.976892][ T4507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.116813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.221416][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.253839][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.262834][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.268433][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.303599][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.580609][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.656815][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.676430][ T5837] Bluetooth: hci0: command tx timeout [ 88.688133][ T5837] Bluetooth: hci1: command tx timeout [ 88.756668][ T5837] Bluetooth: hci4: command tx timeout [ 88.762525][ T5837] Bluetooth: hci3: command tx timeout [ 88.768950][ T5835] Bluetooth: hci2: command tx timeout [ 88.956375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.964707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.017696][ T5898] Zero length message leads to an empty skb [ 89.074533][ T5903] netdevsim netdevsim1 nEtdevsim0: renamed from netdevsim0 (while UP) [ 89.086063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.127355][ T5903] netdevsim netdevsim1 nEtdevsim0: entered promiscuous mode [ 89.134875][ T5903] netdevsim netdevsim1 nEtdevsim0: entered allmulticast mode [ 89.143303][ T5903] A link change request failed with some changes committed already. Interface nEtdevsim0 may have been left with an inconsistent configuration, please check. [ 89.231963][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.247495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.291309][ T5910] raw_sendmsg: syz.1.7 forgot to set AF_INET. Fix it! [ 89.291956][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.302904][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.314809][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.456335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.556533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.686502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.790090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.799536][ T5917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9'. [ 89.982557][ T36] bond0: (slave bond_slave_0): interface is now down [ 90.012906][ T36] bond0: (slave bond_slave_1): interface is now down [ 90.051643][ T36] bond0: (slave bond_slave_0): interface is now down [ 90.064659][ T5920] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 90.074569][ T36] bond0: (slave bond_slave_1): interface is now down [ 90.123866][ T36] bond0: now running without any active interface! [ 90.243578][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.276783][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.292147][ T5920] team0: Port device bond0 added [ 90.297504][ T30] audit: type=1326 audit(1746403023.962:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 90.349746][ T30] audit: type=1326 audit(1746403023.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 90.385866][ T5882] usb 4-1: USB disconnect, device number 2 [ 91.198796][ T5880] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.428857][ T5867] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.490165][ T5880] usb 4-1: config 0 has no interfaces? [ 91.526786][ T5880] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 91.540386][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 91.557564][ T5880] usb 4-1: Product: syz [ 91.573681][ T5880] usb 4-1: Manufacturer: syz [ 91.609110][ T5880] usb 4-1: SerialNumber: syz [ 91.771661][ T5880] usb 4-1: config 0 descriptor?? [ 91.776255][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.870705][ T5867] usb 5-1: config 0 has no interfaces? [ 91.896071][ T5867] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 91.896106][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.984624][ T5867] usb 5-1: Product: syz [ 92.022469][ T5867] usb 5-1: Manufacturer: syz [ 92.055356][ T5867] usb 5-1: SerialNumber: syz [ 92.386198][ T5867] usb 5-1: config 0 descriptor?? [ 92.407454][ T9] usb 3-1: config 0 has no interfaces? [ 92.432347][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 92.488115][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.517891][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.542009][ T9] usb 3-1: Product: syz [ 92.559325][ T9] usb 3-1: Manufacturer: syz [ 92.563946][ T9] usb 3-1: SerialNumber: syz [ 92.578622][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 92.706395][ T9] usb 3-1: config 0 descriptor?? [ 92.902471][ T5954] loop2: detected capacity change from 0 to 7 [ 93.479367][ T5947] veth1_to_team: entered promiscuous mode [ 93.539890][ T5954] Dev loop2: unable to read RDB block 7 [ 93.641545][ T5954] loop2: unable to read partition table [ 93.649402][ T5954] loop2: partition table beyond EOD, truncated [ 93.666805][ T5954] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.900039][ T5947] team0: Port device team_slave_1 removed [ 93.976921][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 94.094199][ T5963] hsr0: entered promiscuous mode [ 94.292330][ T5964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 94.426108][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.495232][ T54] usb 4-1: USB disconnect, device number 3 [ 94.576422][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 94.583289][ T9] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 94.591801][ T9] usb 1-1: config 0 has no interface number 0 [ 94.603198][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.621979][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 94.635038][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 120, changing to 10 [ 94.647920][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8437, setting to 1024 [ 94.659817][ T9] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.699712][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 94.713423][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.723258][ T9] usb 1-1: Product: syz [ 94.730977][ T9] usb 1-1: Manufacturer: syz [ 94.738971][ T9] usb 1-1: SerialNumber: syz [ 94.793242][ T9] usb 1-1: config 0 descriptor?? [ 94.895366][ T54] usb 5-1: USB disconnect, device number 2 [ 95.086929][ T9] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 95.374118][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.448192][ T5972] netlink: 48 bytes leftover after parsing attributes in process `syz.4.24'. [ 95.651141][ T5880] usb 1-1: USB disconnect, device number 2 [ 95.769216][ T30] audit: type=1326 audit(1746403029.432:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.4.26" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x0 [ 96.079035][ T9] usb 3-1: USB disconnect, device number 2 [ 96.226288][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 96.249329][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 96.879740][ T6005] netlink: 48 bytes leftover after parsing attributes in process `syz.1.37'. [ 96.962519][ T6010] xt_NFQUEUE: number of total queues is 0 [ 97.026102][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.106166][ T5831] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.252234][ T9] usb 1-1: config 0 has no interfaces? [ 97.274471][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 97.316160][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 97.316768][ T5831] usb 3-1: config 0 has no interfaces? [ 97.326770][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.349494][ T9] usb 1-1: Product: syz [ 97.353746][ T9] usb 1-1: Manufacturer: syz [ 97.358731][ T5831] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.366969][ T9] usb 1-1: SerialNumber: syz [ 97.374940][ T9] usb 1-1: config 0 descriptor?? [ 97.464017][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.564310][ T5831] usb 3-1: config 0 descriptor?? [ 97.631391][ T6023] syz.4.44 uses obsolete (PF_INET,SOCK_PACKET) [ 98.348636][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.436438][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.446111][ T5880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.466119][ T54] usb 3-1: USB disconnect, device number 3 [ 98.596204][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 98.604278][ T5880] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 98.614209][ T5880] usb 4-1: config 0 has no interface number 0 [ 98.620397][ T5880] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.631960][ T5880] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 98.643715][ T5880] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 120, changing to 10 [ 98.655215][ T5880] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8437, setting to 1024 [ 98.666454][ T5880] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.681721][ T5880] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 98.691028][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.711888][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.720098][ T5880] usb 4-1: Product: syz [ 98.724280][ T5880] usb 4-1: Manufacturer: syz [ 98.728932][ T5880] usb 4-1: SerialNumber: syz [ 98.736748][ T5880] usb 4-1: config 0 descriptor?? [ 98.876113][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 98.882717][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.893944][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.909375][ T47] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.920112][ T47] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 98.932667][ T47] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 98.947474][ T47] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 98.956570][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.964568][ T47] usb 2-1: SerialNumber: syz [ 98.969342][ T5831] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.983717][ T6027] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 98.995731][ T47] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 99.019167][ T47] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 99.063456][ T5880] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 99.136744][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 99.148111][ T5831] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 99.161663][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.173875][ T5831] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 99.185180][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.203064][ T5831] usb 3-1: Product: syz [ 99.213750][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.224023][ T5831] usb 3-1: Manufacturer: syz [ 99.234065][ T5831] usb 3-1: SerialNumber: syz [ 99.240764][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.275449][ T5880] usb 2-1: USB disconnect, device number 2 [ 99.446798][ T54] usb 4-1: USB disconnect, device number 4 [ 99.684283][ T54] usb 1-1: USB disconnect, device number 3 [ 99.689753][ T5831] usb 3-1: 0:2 : does not exist [ 99.787576][ T30] audit: type=1326 audit(1746403033.452:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.47" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x0 [ 100.009897][ T5831] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 100.092185][ T6040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.49'. [ 100.109277][ T5831] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 100.134276][ T5831] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 100.179787][ T5831] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 100.195021][ T5831] usb 3-1: USB disconnect, device number 4 [ 100.295680][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 100.306315][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.318451][ T6043] netlink: 'syz.3.50': attribute type 7 has an invalid length. [ 100.330865][ T6043] netlink: 'syz.3.50': attribute type 8 has an invalid length. [ 100.340802][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 100.358770][ T6043] ip6gretap0: entered promiscuous mode [ 100.378927][ T6043] syz_tun: entered promiscuous mode [ 100.390721][ T6043] gretap0: entered promiscuous mode [ 100.685789][ T6049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.51'. [ 100.871349][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54'. [ 100.882550][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'. [ 101.125716][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 101.139235][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 101.652752][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.59'. [ 102.372183][ T6084] FAULT_INJECTION: forcing a failure. [ 102.372183][ T6084] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.426087][ T5926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.656296][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.4.64 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 102.656320][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 102.656334][ T6084] Call Trace: [ 102.656344][ T6084] [ 102.656351][ T6084] dump_stack_lvl+0x189/0x250 [ 102.656378][ T6084] ? __lock_acquire+0xaac/0xd20 [ 102.656421][ T6084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.656445][ T6084] ? __pfx__printk+0x10/0x10 [ 102.656463][ T6084] ? __might_fault+0xb0/0x130 [ 102.656495][ T6084] should_fail_ex+0x414/0x560 [ 102.656529][ T6084] _copy_from_iter+0x1db/0x15a0 [ 102.656556][ T6084] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 102.656576][ T6084] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 102.656599][ T6084] ? __pfx__copy_from_iter+0x10/0x10 [ 102.656621][ T6084] ? __build_skb_around+0x257/0x3e0 [ 102.656645][ T6084] ? netlink_sendmsg+0x642/0xb30 [ 102.656663][ T6084] ? skb_put+0x11b/0x210 [ 102.656688][ T6084] netlink_sendmsg+0x6b2/0xb30 [ 102.656716][ T6084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.656738][ T6084] ? __import_iovec+0x5d4/0x7f0 [ 102.656759][ T6084] ? aa_sock_msg_perm+0x94/0x160 [ 102.656779][ T6084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.656798][ T6084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.656818][ T6084] __sock_sendmsg+0x219/0x270 [ 102.656849][ T6084] ____sys_sendmsg+0x505/0x830 [ 102.656878][ T6084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.656928][ T6084] ___sys_sendmsg+0x21f/0x2a0 [ 102.656980][ T6084] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.657042][ T6084] ? __fget_files+0x2a/0x420 [ 102.657066][ T6084] ? __fget_files+0x3a0/0x420 [ 102.657103][ T6084] __sys_sendmsg+0x164/0x220 [ 102.657130][ T6084] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.657170][ T6084] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 102.657196][ T6084] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.657221][ T6084] __do_fast_syscall_32+0xb4/0x110 [ 102.657246][ T6084] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.657272][ T6084] do_fast_syscall_32+0x34/0x80 [ 102.657296][ T6084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.657320][ T6084] RIP: 0023:0xf7f18539 [ 102.657345][ T6084] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.657361][ T6084] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 102.657382][ T6084] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000080000540 [ 102.657395][ T6084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.657406][ T6084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.657417][ T6084] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.657428][ T6084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.657455][ T6084] [ 103.069464][ T5926] usb 4-1: config 0 has no interfaces? [ 103.087427][ T5926] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 103.096579][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.105550][ T5926] usb 4-1: Product: syz [ 103.109843][ T5926] usb 4-1: Manufacturer: syz [ 103.114448][ T5926] usb 4-1: SerialNumber: syz [ 103.123655][ T5926] usb 4-1: config 0 descriptor?? [ 103.334888][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 103.358786][ T5880] usb 4-1: USB disconnect, device number 5 [ 103.414217][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 103.456056][ T30] audit: type=1326 audit(1746403037.112:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.485710][ T6095] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 103.500708][ T30] audit: type=1326 audit(1746403037.112:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.532550][ T30] audit: type=1326 audit(1746403037.112:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.567164][ T30] audit: type=1326 audit(1746403037.112:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.593354][ T30] audit: type=1326 audit(1746403037.112:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.648669][ T30] audit: type=1326 audit(1746403037.112:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.674873][ T30] audit: type=1326 audit(1746403037.112:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.711943][ T30] audit: type=1326 audit(1746403037.112:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.737491][ T30] audit: type=1326 audit(1746403037.112:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 103.845484][ T30] audit: type=1326 audit(1746403037.112:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 104.218114][ T6111] netlink: 'syz.3.73': attribute type 2 has an invalid length. [ 104.225919][ T6111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.73'. [ 104.270036][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880266e8800: rx timeout, send abort [ 104.285999][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880266e8800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.501475][ T6117] netlink: 'syz.4.77': attribute type 8 has an invalid length. [ 104.705579][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 104.914929][ T6127] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 105.387770][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.488534][ T6130] tipc: Started in network mode [ 105.494290][ T6130] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.534691][ T6130] tipc: Enabled bearer , priority 10 [ 105.567418][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 105.577883][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.598468][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.612739][ T5880] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.669703][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.705134][ T5880] usb 5-1: config 0 descriptor?? [ 105.735266][ T5880] hub 5-1:0.0: USB hub found [ 105.744804][ T6136] process 'syz.1.83' launched '/dev/fd/3' with NULL argv: empty string added [ 105.755323][ T6136] FAULT_INJECTION: forcing a failure. [ 105.755323][ T6136] name failslab, interval 1, probability 0, space 0, times 1 [ 105.791129][ T6136] CPU: 1 UID: 0 PID: 6136 Comm: syz.1.83 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 105.791146][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 105.791154][ T6136] Call Trace: [ 105.791160][ T6136] [ 105.791166][ T6136] dump_stack_lvl+0x189/0x250 [ 105.791193][ T6136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.791212][ T6136] ? __pfx__printk+0x10/0x10 [ 105.791228][ T6136] ? __pfx___might_resched+0x10/0x10 [ 105.791240][ T6136] ? fs_reclaim_acquire+0x7d/0x100 [ 105.791262][ T6136] should_fail_ex+0x414/0x560 [ 105.791286][ T6136] should_failslab+0xa8/0x100 [ 105.791304][ T6136] __kmalloc_noprof+0xcb/0x4f0 [ 105.791319][ T6136] ? load_elf_binary+0x589/0x2df0 [ 105.791338][ T6136] load_elf_binary+0x589/0x2df0 [ 105.791370][ T6136] ? __lock_acquire+0xaac/0xd20 [ 105.791392][ T6136] ? __pfx_load_elf_binary+0x10/0x10 [ 105.791419][ T6136] bprm_execve+0x999/0x1440 [ 105.791443][ T6136] ? __pfx_bprm_execve+0x10/0x10 [ 105.791455][ T6136] ? put_arg_page+0x11e/0x250 [ 105.791472][ T6136] do_execveat_common+0x510/0x6a0 [ 105.791493][ T6136] __ia32_compat_sys_execveat+0xca/0xe0 [ 105.791511][ T6136] __do_fast_syscall_32+0xb4/0x110 [ 105.791527][ T6136] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.791544][ T6136] do_fast_syscall_32+0x34/0x80 [ 105.791560][ T6136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.791575][ T6136] RIP: 0023:0xf712e539 [ 105.791586][ T6136] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 105.791597][ T6136] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 105.791616][ T6136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 105.791628][ T6136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 105.791637][ T6136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.791647][ T6136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.791657][ T6136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.791683][ T6136] [ 106.003853][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.033065][ T5880] hub 5-1:0.0: 1 port detected [ 106.095023][ T6138] netlink: 52 bytes leftover after parsing attributes in process `syz.1.84'. [ 106.358470][ T5880] hub 5-1:0.0: activate --> -90 [ 106.572044][ T5926] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.573517][ T5880] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 106.588084][ T3072] usb 5-1: USB disconnect, device number 3 [ 106.646641][ T54] tipc: Node number set to 2886997162 [ 106.746001][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 106.753309][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.765172][ T5926] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 106.776101][ T5926] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 106.789572][ T5926] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.803821][ T5926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.813036][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 106.821174][ T5926] usb 2-1: SerialNumber: syz [ 106.830143][ T6142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.848822][ T6142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.859013][ T5926] hub 2-1:1.0: bad descriptor, ignoring hub [ 106.864937][ T5926] hub 2-1:1.0: probe with driver hub failed with error -5 [ 107.065745][ T6142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.074240][ T6142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.244552][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 107.525226][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 107.554572][ T5926] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 107.915573][ T5831] usb 2-1: USB disconnect, device number 3 [ 107.979313][ T5831] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 108.556360][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 108.601164][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 108.619847][ T6190] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.116336][ T6203] xt_CT: No such helper "snmp" [ 109.466012][ T5926] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.684976][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.704633][ T5926] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 109.714274][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.746668][ T5926] usb 1-1: Product: syz [ 109.766031][ T5926] usb 1-1: Manufacturer: syz [ 109.772267][ T5926] usb 1-1: SerialNumber: syz [ 109.797379][ T5926] usb 1-1: config 0 descriptor?? [ 109.820090][ T5926] usb 1-1: ucan: probing device on interface #0 [ 109.848854][ T5926] usb 1-1: ucan: invalid EP count (0) [ 109.854278][ T5926] usb 1-1: ucan: probe failed; try to update the device firmware [ 109.946278][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 109.955101][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 110.042079][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 110.174987][ T54] usb 1-1: USB disconnect, device number 4 [ 110.328228][ T6253] netlink: 'syz.1.119': attribute type 8 has an invalid length. [ 110.589046][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 111.036716][ T6270] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 111.047076][ T6270] bridge1: entered promiscuous mode [ 111.298418][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 112.067680][ T3072] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.253461][ T3072] usb 3-1: Using ep0 maxpacket: 16 [ 112.284158][ T3072] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 112.312893][ T3072] usb 3-1: config 0 has no interface number 0 [ 112.342990][ T3072] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.384388][ T3072] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.419819][ T3072] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 112.432099][ T6299] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 112.450140][ T3072] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 112.482103][ T3072] usb 3-1: Product: syz [ 112.489926][ T3072] usb 3-1: SerialNumber: syz [ 112.515728][ T3072] usb 3-1: config 0 descriptor?? [ 112.524703][ T6303] netlink: 'syz.3.137': attribute type 6 has an invalid length. [ 112.546564][ T3072] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 112.572866][ T3072] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 112.758020][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 112.906341][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'. [ 112.915860][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 112.925477][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.925502][ T6317] netlink: 'syz.3.141': attribute type 7 has an invalid length. [ 112.940037][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 112.966375][ T6317] netlink: 'syz.3.141': attribute type 8 has an invalid length. [ 112.981191][ T6319] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 112.995555][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 112.999376][ T6279] netlink: 76 bytes leftover after parsing attributes in process `syz.2.129'. [ 113.021313][ T6319] dummy0: entered promiscuous mode [ 113.030707][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.035017][ T9] usb 3-1: USB disconnect, device number 5 [ 113.037656][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 113.047122][ T6319] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 113.064910][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 113.082385][ T6319] Cannot create hsr debugfs directory [ 113.116090][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 113.125878][ T5926] usb 1-1: too many configurations: 253, using maximum allowed: 8 [ 113.147468][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 113.157594][ T5926] usb 1-1: can't read configurations, error -61 [ 113.296228][ T5926] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.445442][ T6331] netdevsim netdevsim3 nEtdevsim0: renamed from netdevsim0 (while UP) [ 113.460024][ T6331] netdevsim netdevsim3 nEtdevsim0: entered promiscuous mode [ 113.467875][ T6331] netdevsim netdevsim3 nEtdevsim0: entered allmulticast mode [ 113.475729][ T6331] A link change request failed with some changes committed already. Interface nEtdevsim0 may have been left with an inconsistent configuration, please check. [ 113.496986][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 113.513803][ T5926] usb 1-1: too many configurations: 253, using maximum allowed: 8 [ 113.538947][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 113.567304][ T5926] usb 1-1: can't read configurations, error -61 [ 113.607775][ T5926] usb usb1-port1: attempt power cycle [ 113.710377][ T6340] netlink: 48 bytes leftover after parsing attributes in process `syz.3.147'. [ 113.967698][ T5926] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.028654][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 114.034985][ T5926] usb 1-1: too many configurations: 253, using maximum allowed: 8 [ 114.054355][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.066983][ T5926] usb 1-1: can't read configurations, error -61 [ 114.144439][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 114.216458][ T5926] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.236839][ T6352] IPv6: syztnl0: Disabled Multicast RS [ 114.247065][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 114.257409][ T5926] usb 1-1: too many configurations: 253, using maximum allowed: 8 [ 114.279844][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.299027][ T5926] usb 1-1: can't read configurations, error -61 [ 114.316959][ T5926] usb usb1-port1: unable to enumerate USB device [ 114.333583][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 114.456129][ T5831] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.616207][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 114.616234][ T6365] bond_slave_0: entered promiscuous mode [ 114.627209][ T6365] bond_slave_1: entered promiscuous mode [ 114.630990][ T5831] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 114.633137][ T6365] macvlan2: entered allmulticast mode [ 114.642885][ T5831] usb 4-1: config 0 has no interface number 0 [ 114.647498][ T6365] bond0: entered allmulticast mode [ 114.658146][ T6365] bond_slave_0: entered allmulticast mode [ 114.659875][ T5831] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.663932][ T6365] bond_slave_1: entered allmulticast mode [ 114.683439][ T6365] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.684203][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.692711][ T6365] bond0: left allmulticast mode [ 114.701999][ T5831] usb 4-1: Product: syz [ 114.703739][ T6365] bond_slave_0: left allmulticast mode [ 114.709665][ T5831] usb 4-1: Manufacturer: syz [ 114.713342][ T6365] bond_slave_1: left allmulticast mode [ 114.721512][ T5831] usb 4-1: SerialNumber: syz [ 114.723706][ T6365] bond_slave_0: left promiscuous mode [ 114.733273][ T6365] bond_slave_1: left promiscuous mode [ 114.737509][ T5831] usb 4-1: config 0 descriptor?? [ 114.747664][ T5831] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 114.855176][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 114.966056][ T5831] usb 4-1: qt2_attach - failed to power on unit: -71 [ 114.972930][ T5831] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 115.009942][ T5831] usb 4-1: USB disconnect, device number 6 [ 115.106475][ T6374] loop6: detected capacity change from 0 to 7 [ 115.130788][ T6374] Dev loop6: unable to read RDB block 7 [ 115.142242][ T6374] loop6: unable to read partition table [ 115.151762][ T6374] loop6: partition table beyond EOD, truncated [ 115.189937][ T6374] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.381678][ T6383] loop6: detected capacity change from 0 to 7 [ 115.398892][ T5940] Dev loop6: unable to read RDB block 7 [ 115.407394][ T5940] loop6: AHDI p3 p4 [ 115.411902][ T5940] loop6: partition table partially beyond EOD, truncated [ 115.426638][ T5940] loop6: p3 start 1886353253 is beyond EOD, truncated [ 115.437903][ T6383] Dev loop6: unable to read RDB block 7 [ 115.446744][ T6383] loop6: AHDI p3 p4 [ 115.450729][ T6383] loop6: partition table partially beyond EOD, truncated [ 115.625452][ T5831] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.645573][ T6383] loop6: p3 start 1886353253 is beyond EOD, truncated [ 115.893337][ T5831] usb 3-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.905436][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.930173][ T6388] Dead loop on virtual device ip6_vti0, fix it urgently! [ 115.970752][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.041750][ T5831] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 116.129642][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.170307][ T5880] usb 5-1: config 0 has no interfaces? [ 116.188614][ T5831] usb 3-1: config 0 descriptor?? [ 116.286254][ T5880] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 116.329705][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.336163][ T5926] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.362962][ T5880] usb 5-1: Product: syz [ 116.377849][ T5880] usb 5-1: Manufacturer: syz [ 116.382506][ T5880] usb 5-1: SerialNumber: syz [ 116.423853][ T5880] usb 5-1: config 0 descriptor?? [ 116.467944][ T6398] netlink: 'syz.0.170': attribute type 23 has an invalid length. [ 116.526046][ T5926] usb 4-1: device descriptor read/64, error -71 [ 116.795998][ T5926] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.877426][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.911375][ T5831] usbhid 3-1:0.0: can't add hid device: -71 [ 116.935251][ T5831] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 116.945828][ T5926] usb 4-1: device descriptor read/64, error -71 [ 116.973658][ T5831] usb 3-1: USB disconnect, device number 6 [ 116.980776][ T47] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 117.015090][ T6406] __nla_validate_parse: 1 callbacks suppressed [ 117.015103][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 117.043215][ T5880] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 117.052382][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.056383][ T5926] usb usb4-port1: attempt power cycle [ 117.061351][ T5880] usb 2-1: Product: syz [ 117.070814][ T5880] usb 2-1: Manufacturer: syz [ 117.075535][ T5880] usb 2-1: SerialNumber: syz [ 117.086425][ T5880] usb 2-1: config 0 descriptor?? [ 117.094057][ T6406] hsr0: entered promiscuous mode [ 117.158588][ T47] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.168913][ T47] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.208724][ T47] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.227533][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.306483][ T6397] netlink: 'syz.1.171': attribute type 5 has an invalid length. [ 117.419497][ T5926] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.444869][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 117.454691][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.464718][ T47] usb 1-1: usb_control_msg returned -32 [ 117.467425][ T5926] usb 4-1: device descriptor read/8, error -71 [ 117.481221][ T47] usbtmc 1-1:16.0: can't read capabilities [ 117.565781][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.719059][ T5926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.740039][ T5880] usb 2-1: Firmware version (0.0) predates our first public release. [ 117.746648][ T5926] usb 4-1: device descriptor read/8, error -71 [ 117.764834][ T5880] usb 2-1: Please update to version 0.2 or newer [ 117.824274][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.841810][ T5880] usb 2-1: USB disconnect, device number 4 [ 117.870996][ T5926] usb usb4-port1: unable to enumerate USB device [ 117.885825][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.936181][ T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.023512][ T54] usb 1-1: USB disconnect, device number 9 [ 118.132998][ T47] usb 3-1: config 0 has no interfaces? [ 118.143928][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 118.154580][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.163910][ T47] usb 3-1: Product: syz [ 118.171555][ T47] usb 3-1: Manufacturer: syz [ 118.177056][ T47] usb 3-1: SerialNumber: syz [ 118.185106][ T47] usb 3-1: config 0 descriptor?? [ 118.409448][ T54] usb 5-1: USB disconnect, device number 4 [ 118.484639][ T6422] loop7: detected capacity change from 0 to 7 [ 118.520217][ T6422] Dev loop7: unable to read RDB block 7 [ 118.525979][ T6422] loop7: unable to read partition table [ 118.534879][ T6422] loop7: partition table beyond EOD, truncated [ 118.561691][ T6422] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.936097][ T47] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.014007][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 119.089005][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.116934][ T6437] loop6: detected capacity change from 0 to 7 [ 119.125193][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.128101][ T6437] Dev loop6: unable to read RDB block 7 [ 119.152897][ T6437] loop6: unable to read partition table [ 119.162910][ T6437] loop6: partition table beyond EOD, truncated [ 119.181553][ T47] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.200525][ T6437] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.219224][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.255189][ T47] usb 2-1: SerialNumber: syz [ 119.506638][ T47] usb 2-1: invalid UAC_HEADER (v1) [ 119.580411][ T47] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.617055][ T47] usb 2-1: USB disconnect, device number 5 [ 119.705748][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.106360][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 120.254736][ T6460] FAULT_INJECTION: forcing a failure. [ 120.254736][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 120.396036][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.0.191 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 120.396074][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 120.396097][ T6460] Call Trace: [ 120.396114][ T6460] [ 120.396125][ T6460] dump_stack_lvl+0x189/0x250 [ 120.396189][ T6460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.396227][ T6460] ? __pfx__printk+0x10/0x10 [ 120.396260][ T6460] ? ref_tracker_alloc+0x318/0x460 [ 120.396296][ T6460] should_fail_ex+0x414/0x560 [ 120.396339][ T6460] should_failslab+0xa8/0x100 [ 120.396368][ T6460] kmem_cache_alloc_noprof+0x73/0x3c0 [ 120.396397][ T6460] ? skb_clone+0x212/0x3a0 [ 120.396439][ T6460] skb_clone+0x212/0x3a0 [ 120.396478][ T6460] __netlink_deliver_tap+0x404/0x850 [ 120.396529][ T6460] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.396559][ T6460] netlink_deliver_tap+0x19c/0x1b0 [ 120.396590][ T6460] netlink_unicast+0x72f/0x8d0 [ 120.396652][ T6460] netlink_sendmsg+0x805/0xb30 [ 120.396712][ T6460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.396740][ T6460] ? __import_iovec+0x5d4/0x7f0 [ 120.396768][ T6460] ? aa_sock_msg_perm+0x94/0x160 [ 120.396795][ T6460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.396824][ T6460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.396851][ T6460] __sock_sendmsg+0x219/0x270 [ 120.396890][ T6460] ____sys_sendmsg+0x505/0x830 [ 120.396924][ T6460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.396972][ T6460] ___sys_sendmsg+0x21f/0x2a0 [ 120.397005][ T6460] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.397071][ T6460] ? __fget_files+0x2a/0x420 [ 120.397105][ T6460] ? __fget_files+0x3a0/0x420 [ 120.397143][ T6460] __sys_sendmsg+0x164/0x220 [ 120.397175][ T6460] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.397223][ T6460] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 120.397251][ T6460] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.397279][ T6460] __do_fast_syscall_32+0xb4/0x110 [ 120.397308][ T6460] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.397337][ T6460] do_fast_syscall_32+0x34/0x80 [ 120.397369][ T6460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.397397][ T6460] RIP: 0023:0xf708e539 [ 120.397423][ T6460] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 120.397437][ T6460] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 120.397455][ T6460] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000080000540 [ 120.397467][ T6460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.397477][ T6460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.397486][ T6460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.397501][ T6460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.397531][ T6460] [ 121.097589][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 121.160820][ T6476] netlink: 'syz.1.195': attribute type 7 has an invalid length. [ 121.173319][ T9] usb 3-1: USB disconnect, device number 7 [ 121.224000][ T6476] netlink: 'syz.1.195': attribute type 8 has an invalid length. [ 121.271044][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 121.271673][ T6483] netlink: 'syz.2.200': attribute type 8 has an invalid length. [ 121.324493][ T6476] ip6gretap0: entered promiscuous mode [ 121.332832][ T6476] syz_tun: entered promiscuous mode [ 121.341286][ T6476] gretap0: entered promiscuous mode [ 121.342464][ T6487] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 121.348119][ T6476] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 121.355714][ T6486] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 121.365867][ T6476] Cannot create hsr debugfs directory [ 121.370821][ T6486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.375412][ T6487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.520239][ T6489] Cannot find set identified by id 0 to match [ 121.526848][ T5926] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 121.691043][ T6494] FAULT_INJECTION: forcing a failure. [ 121.691043][ T6494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.691101][ T6494] CPU: 1 UID: 0 PID: 6494 Comm: syz.4.204 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 121.691122][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 121.691132][ T6494] Call Trace: [ 121.691139][ T6494] [ 121.691147][ T6494] dump_stack_lvl+0x189/0x250 [ 121.691175][ T6494] ? __lock_acquire+0xaac/0xd20 [ 121.691202][ T6494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.691227][ T6494] ? __pfx__printk+0x10/0x10 [ 121.691245][ T6494] ? __might_fault+0xb0/0x130 [ 121.691278][ T6494] should_fail_ex+0x414/0x560 [ 121.691311][ T6494] _copy_from_user+0x2d/0xb0 [ 121.691337][ T6494] kstrtouint_from_user+0xc4/0x170 [ 121.691359][ T6494] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 121.691394][ T6494] proc_fail_nth_write+0x88/0x240 [ 121.691419][ T6494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.691450][ T6494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.691477][ T6494] vfs_write+0x27b/0xa90 [ 121.691504][ T6494] ? __pfx_vfs_write+0x10/0x10 [ 121.691526][ T6494] ? __fget_files+0x2a/0x420 [ 121.691554][ T6494] ? __fget_files+0x3a0/0x420 [ 121.691574][ T6494] ? __fget_files+0x2a/0x420 [ 121.691606][ T6494] ksys_write+0x145/0x250 [ 121.691637][ T6494] ? rcu_is_watching+0x15/0xb0 [ 121.691683][ T6494] ? __pfx_ksys_write+0x10/0x10 [ 121.691706][ T6494] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 121.691730][ T6494] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.691753][ T6494] __do_fast_syscall_32+0xb4/0x110 [ 121.691778][ T6494] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.691803][ T6494] do_fast_syscall_32+0x34/0x80 [ 121.691827][ T6494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.691850][ T6494] RIP: 0023:0xf7f18539 [ 121.691866][ T6494] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 121.691893][ T6494] RSP: 002b:00000000f5036590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 121.691912][ T6494] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5036620 [ 121.691924][ T6494] RDX: 0000000000000001 RSI: 00000000f73a2ff4 RDI: 0000000000000000 [ 121.691934][ T6494] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 121.691943][ T6494] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 121.691953][ T6494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.691979][ T6494] [ 121.713487][ T5926] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 121.713513][ T5926] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 121.713547][ T5926] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 121.713588][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.791981][ T6499] netlink: 52 bytes leftover after parsing attributes in process `syz.2.207'. [ 121.792017][ T6499] netdevsim netdevsim2 nE: renamed from netdevsim0 (while UP) [ 121.823731][ T6499] netdevsim netdevsim2 nE: entered promiscuous mode [ 122.066276][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.069980][ T6499] netdevsim netdevsim2 nE: entered allmulticast mode [ 122.329493][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.339805][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 122.362117][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.386034][ T9] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 122.445973][ T9] usb 5-1: config 0 interface 0 has no altsetting 1 [ 122.452648][ T9] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 122.518141][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.559886][ T9] usb 5-1: config 0 descriptor?? [ 122.662303][ T6518] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 123.075029][ T6528] FAULT_INJECTION: forcing a failure. [ 123.075029][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.104054][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.1.216 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 123.104079][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 123.104090][ T6528] Call Trace: [ 123.104097][ T6528] [ 123.104104][ T6528] dump_stack_lvl+0x189/0x250 [ 123.104125][ T6528] ? __lock_acquire+0xaac/0xd20 [ 123.104144][ T6528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.104162][ T6528] ? __pfx__printk+0x10/0x10 [ 123.104175][ T6528] ? __might_fault+0xb0/0x130 [ 123.104198][ T6528] should_fail_ex+0x414/0x560 [ 123.104222][ T6528] _copy_from_user+0x2d/0xb0 [ 123.104239][ T6528] __sys_sendto+0x25c/0x520 [ 123.104256][ T6528] ? __pfx___sys_sendto+0x10/0x10 [ 123.104269][ T6528] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 123.104292][ T6528] ? __fget_files+0x3a0/0x420 [ 123.104315][ T6528] ? ksys_write+0x1f0/0x250 [ 123.104335][ T6528] __ia32_sys_sendto+0xdd/0x100 [ 123.104354][ T6528] __do_fast_syscall_32+0xb4/0x110 [ 123.104370][ T6528] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.104387][ T6528] do_fast_syscall_32+0x34/0x80 [ 123.104403][ T6528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.104418][ T6528] RIP: 0023:0xf712e539 [ 123.104428][ T6528] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 123.104438][ T6528] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 123.104451][ T6528] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 123.104460][ T6528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000400 [ 123.104467][ T6528] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 123.104474][ T6528] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 123.104481][ T6528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.104498][ T6528] [ 123.596222][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 123.650192][ T6538] netlink: 'syz.1.219': attribute type 28 has an invalid length. [ 123.702705][ T9] usb 5-1: USB disconnect, device number 5 [ 123.966017][ T5831] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 124.206636][ T5880] usb 1-1: USB disconnect, device number 10 [ 124.246045][ T5831] usb 2-1: device descriptor read/64, error -71 [ 124.496140][ T5831] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 124.696116][ T5831] usb 2-1: device descriptor read/64, error -71 [ 124.717049][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 124.847423][ T5831] usb usb2-port1: attempt power cycle [ 124.907294][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 125.144427][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.233'. [ 125.196495][ T5831] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 125.237200][ T5831] usb 2-1: device descriptor read/8, error -71 [ 125.526259][ T5831] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 125.556731][ T5831] usb 2-1: device descriptor read/8, error -71 [ 125.846342][ T5831] usb usb2-port1: unable to enumerate USB device [ 126.136088][ T5831] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 126.318047][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.326322][ T5831] usb 1-1: config 0 has no interface number 0 [ 126.332408][ T5831] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 126.362798][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.381817][ T5831] usb 1-1: config 0 descriptor?? [ 126.390412][ T5831] usb 1-1: selecting invalid altsetting 1 [ 126.403649][ T5831] dvb_ttusb_budget: ttusb_init_controller: error [ 126.410505][ T5831] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 126.483653][ T5831] DVB: Unable to find symbol cx22700_attach() [ 126.602063][ T5831] DVB: Unable to find symbol tda10046_attach() [ 126.637756][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 126.642580][ T5831] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 126.666013][ T5926] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.677911][ T6584] netlink: 36 bytes leftover after parsing attributes in process `syz.0.236'. [ 126.711731][ T6597] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 126.716168][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 126.716183][ T30] audit: type=1326 audit(1746403060.362:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.1.242" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x0 [ 126.781939][ T5880] usb 1-1: USB disconnect, device number 11 [ 126.795169][ T6597] bridge1: entered promiscuous mode [ 126.838908][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 126.875519][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.886156][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 126.895224][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.935124][ T5926] usb 5-1: config 0 descriptor?? [ 127.043902][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 127.059038][ T6607] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 127.092251][ T6607] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.143922][ T5926] cdc_subset 5-1:0.0: probe with driver cdc_subset failed with error -71 [ 127.180484][ T5926] usb 5-1: USB disconnect, device number 6 [ 127.456235][ T54] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.630243][ T54] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 127.646462][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.679285][ T54] usb 3-1: config 0 descriptor?? [ 127.739055][ T5926] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 127.807248][ T6635] netdevsim netdevsim4 nEtdevsim0: renamed from netdevsim0 (while UP) [ 127.831220][ T6635] netdevsim netdevsim4 nEtdevsim0: entered allmulticast mode [ 127.896007][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 127.916971][ T6635] A link change request failed with some changes committed already. Interface nEtdevsim0 may have been left with an inconsistent configuration, please check. [ 127.920770][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.985117][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.015728][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.022781][ T5926] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 128.040547][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.104368][ T5926] usb 4-1: config 0 descriptor?? [ 128.152519][ T54] ath6kl: Failed to submit usb control message: -71 [ 128.163058][ T54] ath6kl: unable to send the bmi data to the device: -71 [ 128.171336][ T54] ath6kl: Unable to send get target info: -71 [ 128.187023][ T54] ath6kl: Failed to init ath6kl core: -71 [ 128.219649][ T54] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 128.289188][ T54] usb 3-1: USB disconnect, device number 8 [ 128.305643][ T6644] netlink: 48 bytes leftover after parsing attributes in process `syz.4.257'. [ 128.328979][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.346718][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.620699][ T5926] hid (null): unknown global tag 0xd [ 128.631001][ T5926] hid (null): unknown global tag 0xc [ 128.637481][ T5926] hid (null): global environment stack overflow [ 128.644010][ T5926] hid (null): global environment stack overflow [ 128.664922][ T5926] hid (null): unknown global tag 0xc [ 128.684558][ T5926] hid (null): invalid report_size -1755079905 [ 128.719540][ T5926] hid (null): report_id 499631086 is invalid [ 128.721260][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 128.736875][ T5926] hid (null): global environment stack overflow [ 128.745216][ T5926] hid (null): unknown global tag 0xe [ 128.775550][ T5926] hid (null): global environment stack overflow [ 128.866417][ T5926] usb 4-1: USB disconnect, device number 11 [ 129.345661][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 129.571511][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 129.639721][ T6679] loop6: detected capacity change from 0 to 7 [ 129.670982][ T6679] Dev loop6: unable to read RDB block 7 [ 129.679357][ T6679] loop6: unable to read partition table [ 129.689359][ T6679] loop6: partition table beyond EOD, truncated [ 129.704872][ T6679] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 129.787022][ T6682] loop6: detected capacity change from 0 to 7 [ 129.796487][ T5926] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 129.828063][ T6682] Dev loop6: unable to read RDB block 7 [ 129.834964][ T6682] loop6: AHDI p3 p4 [ 129.841400][ T6682] loop6: partition table partially beyond EOD, truncated [ 129.865867][ T6682] loop6: p3 start 1697644645 is beyond EOD, truncated [ 129.873812][ T6684] netlink: 180 bytes leftover after parsing attributes in process `syz.0.272'. [ 129.983964][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.995308][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.071296][ T5926] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 130.096750][ T5926] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 130.101238][ T6692] loop6: detected capacity change from 0 to 7 [ 130.128376][ T5926] usb 4-1: Manufacturer: syz [ 130.129884][ T6689] netlink: 48 bytes leftover after parsing attributes in process `syz.2.274'. [ 130.144599][ T5926] usb 4-1: config 0 descriptor?? [ 130.176795][ T6692] Dev loop6: unable to read RDB block 7 [ 130.181466][ T5926] hub 4-1:0.0: USB hub found [ 130.192663][ T6692] loop6: AHDI p3 p4 [ 130.199994][ T6692] loop6: partition table partially beyond EOD, truncated [ 130.210375][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 130.223305][ T6696] netlink: 68 bytes leftover after parsing attributes in process `syz.0.275'. [ 130.231354][ T6695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.277'. [ 130.232635][ T6692] loop6: p3 start 1886353253 is beyond EOD, truncated [ 130.377872][ T5926] hub 4-1:0.0: 1 port detected [ 130.609393][ T6706] x_tables: ip_tables: ah match: only valid for protocol 51 [ 130.784022][ T6718] netlink: 144 bytes leftover after parsing attributes in process `syz.4.282'. [ 130.989462][ T5926] hub 4-1:0.0: activate --> -90 [ 131.014972][ T6730] netlink: 'syz.0.288': attribute type 20 has an invalid length. [ 131.097540][ T5880] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.156563][ T3072] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 131.165223][ T5831] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 131.253123][ T6736] netlink: 'syz.0.291': attribute type 16 has an invalid length. [ 131.262346][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 131.263278][ T6736] netlink: 'syz.0.291': attribute type 17 has an invalid length. [ 131.278627][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 131.295145][ T5880] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 131.304552][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.314981][ T6736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.333045][ T5831] usb 3-1: device descriptor read/64, error -71 [ 131.344914][ T5880] usb 5-1: config 0 descriptor?? [ 131.355560][ T3072] usb 2-1: config 9 has an invalid interface number: 109 but max is 0 [ 131.371221][ T3072] usb 2-1: config 9 has no interface number 0 [ 131.380593][ T3072] usb 2-1: config 9 interface 109 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 131.400912][ T3072] usb 2-1: config 9 interface 109 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 131.430853][ T3072] usb 2-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=b5.f2 [ 131.442122][ T3072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.454161][ T3072] usb 2-1: Product: syz [ 131.463072][ T3072] usb 2-1: Manufacturer: syz [ 131.473298][ T3072] usb 2-1: SerialNumber: syz [ 131.485290][ T6726] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 131.586124][ T5831] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 131.621084][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.293'. [ 131.635500][ T6743] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 131.756156][ T5831] usb 3-1: device descriptor read/64, error -71 [ 131.866506][ T5831] usb usb3-port1: attempt power cycle [ 131.890303][ T5926] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 131.897982][ T5926] usb 4-1-port1: connect-debounce failed [ 131.915124][ T5926] usb 4-1-port1: cannot disable (err = -71) [ 131.939865][ T5926] usb 4-1: Failed to suspend device, error -71 [ 131.982218][ T9] usb 4-1: USB disconnect, device number 12 [ 131.990519][ T6711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.000974][ T6711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.014651][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 132.023772][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.026126][ T54] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 132.053011][ T5880] usb 5-1: USB disconnect, device number 7 [ 132.199721][ T54] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 132.208032][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.218623][ T54] usb 1-1: config 0 has no interface number 0 [ 132.225982][ T54] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 132.235559][ T5831] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 132.237183][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.255306][ T54] usb 1-1: config 0 descriptor?? [ 132.264898][ T54] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 132.274762][ T54] usb 1-1: bad CDC descriptors [ 132.280158][ T5831] usb 3-1: device descriptor read/8, error -71 [ 132.287737][ T54] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 132.504971][ T6748] xt_NFQUEUE: number of total queues is 0 [ 132.547459][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.555860][ T5831] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 132.569855][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.610259][ T5831] usb 3-1: device descriptor read/8, error -71 [ 132.680600][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.688532][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.747027][ T5831] usb usb3-port1: unable to enumerate USB device [ 133.862764][ T3072] hdpvr 2-1:9.109: Could not find bulk-in endpoint [ 133.900680][ T3072] hdpvr 2-1:9.109: probe with driver hdpvr failed with error -12 [ 133.936419][ T3072] usb 2-1: USB disconnect, device number 10 [ 134.033915][ T6771] __nla_validate_parse: 3 callbacks suppressed [ 134.033934][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 134.052546][ T5880] usb 1-1: USB disconnect, device number 12 [ 134.066538][ T6764] binder: 6763:6764 ioctl c0306201 80000540 returned -14 [ 134.080835][ T6771] netlink: 'syz.2.302': attribute type 7 has an invalid length. [ 134.106038][ T6771] netlink: 'syz.2.302': attribute type 8 has an invalid length. [ 134.124209][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 134.162021][ T6771] ip6gretap0: entered promiscuous mode [ 134.169924][ T6771] syz_tun: entered promiscuous mode [ 134.178018][ T6771] gretap0: entered promiscuous mode [ 134.184655][ T6771] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 134.223474][ T6771] Cannot create hsr debugfs directory [ 134.244199][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 134.256861][ T6776] loop2: detected capacity change from 0 to 7 [ 134.266817][ T5940] Dev loop2: unable to read RDB block 7 [ 134.272827][ T5940] loop2: unable to read partition table [ 134.283677][ T5940] loop2: partition table beyond EOD, truncated [ 134.291067][ T6776] Dev loop2: unable to read RDB block 7 [ 134.300676][ T6776] loop2: unable to read partition table [ 134.307074][ T6776] loop2: partition table beyond EOD, truncated [ 134.313372][ T6776] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.406130][ T3072] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 134.599624][ T3072] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.626529][ T6781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.647030][ T3072] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.680000][ T3072] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.686998][ T3072] usb 2-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 134.733249][ T3072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.779299][ T3072] usb 2-1: config 0 descriptor?? [ 135.242974][ T6796] netlink: 'syz.0.313': attribute type 8 has an invalid length. [ 135.251190][ T9] psmouse serio2: Failed to reset mouse on : -5 [ 135.292867][ T5867] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 135.541961][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.572494][ T6801] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 135.583434][ T5867] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.732718][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.742126][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.756169][ T5867] usb 5-1: Product: syz [ 135.760469][ T5867] usb 5-1: Manufacturer: syz [ 135.766405][ T5867] usb 5-1: SerialNumber: syz [ 135.805780][ T6803] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.195961][ T5880] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 136.640528][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 136.661512][ T5880] usb 3-1: device descriptor read/64, error -71 [ 137.175956][ T5880] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 137.287847][ T5867] cdc_ncm 5-1:1.0: bind() failure [ 137.316246][ T5867] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 137.316846][ T5880] usb 3-1: device descriptor read/64, error -71 [ 137.333410][ T5867] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 137.350057][ T5867] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 137.400875][ T5867] usb 5-1: USB disconnect, device number 8 [ 137.507261][ T5880] usb usb3-port1: attempt power cycle [ 137.756280][ T6812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.317'. [ 137.766332][ T6812] netdevsim netdevsim0 nE: renamed from netdevsim0 (while UP) [ 137.781558][ T6812] netdevsim netdevsim0 nE: entered promiscuous mode [ 137.788914][ T6812] netdevsim netdevsim0 nE: entered allmulticast mode [ 137.896851][ T5880] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 137.927323][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 137.937114][ T5880] usb 3-1: device descriptor read/8, error -71 [ 137.943533][ T6814] netlink: 'syz.4.318': attribute type 9 has an invalid length. [ 137.961636][ T6814] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 137.970067][ T6814] macvlan2: entered allmulticast mode [ 137.975552][ T6814] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 138.190450][ T5880] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 138.216751][ T5880] usb 3-1: device descriptor read/8, error -71 [ 138.254372][ T3072] usbhid 2-1:0.0: can't add hid device: -71 [ 138.265403][ T6824] tipc: Started in network mode [ 138.271821][ T3072] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 138.280967][ T6824] tipc: Node identity ac1414aa, cluster identity 4711 [ 138.298702][ T6824] tipc: Enabled bearer , priority 10 [ 138.306529][ T3072] usb 2-1: USB disconnect, device number 11 [ 138.347059][ T5880] usb usb3-port1: unable to enumerate USB device [ 138.679973][ T6837] tipc: Can't bind to reserved service type 0 [ 138.846128][ T3072] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 138.887792][ T9] misc userio: Buffer overflowed, userio client isn't keeping up [ 138.956251][ T6845] loop2: detected capacity change from 0 to 7 [ 139.018398][ T5940] Dev loop2: unable to read RDB block 7 [ 139.024170][ T5940] loop2: unable to read partition table [ 139.031610][ T5940] loop2: partition table beyond EOD, truncated [ 139.038230][ T3072] usb 5-1: config 0 has an invalid interface number: 138 but max is 0 [ 139.038256][ T3072] usb 5-1: config 0 has no interface number 0 [ 139.038297][ T3072] usb 5-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 139.067304][ T6845] Dev loop2: unable to read RDB block 7 [ 139.078394][ T6845] loop2: unable to read partition table [ 139.084435][ T6845] loop2: partition table beyond EOD, truncated [ 139.091133][ T6845] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.108005][ T3072] usb 5-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 139.151764][ T3072] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 139.179902][ T3072] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 139.190034][ T3072] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 139.196200][ T5926] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.199187][ T3072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.219304][ T3072] usb 5-1: config 0 descriptor?? [ 139.291308][ T5200] Dev loop2: unable to read RDB block 7 [ 139.297120][ T5200] loop2: unable to read partition table [ 139.304475][ T5200] loop2: partition table beyond EOD, truncated [ 139.835984][ T5926] usb 2-1: device descriptor read/64, error -71 [ 139.849190][ T3072] usb 5-1: string descriptor 0 read error: -71 [ 139.872869][ T3072] usbtest 5-1:0.138: Linux gadget zero [ 139.884731][ T5880] tipc: Node number set to 2886997162 [ 139.892811][ T3072] usbtest 5-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 139.959585][ T3072] usb 5-1: USB disconnect, device number 9 [ 140.078407][ T5926] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.095490][ T30] audit: type=1804 audit(1746403073.752:36): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.333" name="/newroot/55/file1" dev="fuse" ino=1 res=1 errno=0 [ 140.159457][ T9] input: PS/2 Generic Mouse as /devices/serio2/input/input8 [ 140.226104][ T5926] usb 2-1: device descriptor read/64, error -71 [ 140.336456][ T5926] usb usb2-port1: attempt power cycle [ 140.416099][ T9] psmouse serio2: Failed to enable mouse on [ 140.746119][ T5926] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 140.786203][ T5926] usb 2-1: device descriptor read/8, error -71 [ 140.889926][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 140.932378][ T5200] Dev loop2: unable to read RDB block 7 [ 140.952557][ T5200] loop2: unable to read partition table [ 140.959922][ T5200] loop2: partition table beyond EOD, truncated [ 141.030488][ T5926] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 141.129193][ T5926] usb 2-1: device descriptor read/8, error -71 [ 141.145628][ T5200] Dev loop2: unable to read RDB block 7 [ 141.175255][ T5200] loop2: unable to read partition table [ 141.190345][ T5200] loop2: partition table beyond EOD, truncated [ 141.253081][ T5926] usb usb2-port1: unable to enumerate USB device [ 142.022175][ T6886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.345'. [ 142.265113][ T5200] Dev loop2: unable to read RDB block 7 [ 142.284842][ T5200] loop2: unable to read partition table [ 142.292497][ T5200] loop2: partition table beyond EOD, truncated [ 142.414310][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 142.976946][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 143.535085][ T6921] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 143.566036][ T6921] bridge2: entered promiscuous mode [ 143.878861][ T6929] capability: warning: `syz.2.363' uses 32-bit capabilities (legacy support in use) [ 144.283617][ T6943] netlink: 44 bytes leftover after parsing attributes in process `syz.2.368'. [ 144.339903][ T6947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.370'. [ 144.849395][ T6970] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 145.002230][ T5926] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 145.578804][ T5926] usb 3-1: config 0 has no interfaces? [ 145.695370][ T5926] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.710893][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.719604][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.732203][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.740419][ T5926] usb 3-1: Product: syz [ 145.753901][ T5926] usb 3-1: Manufacturer: syz [ 145.771592][ T5926] usb 3-1: SerialNumber: syz [ 145.804289][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 145.813242][ T5831] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 145.822187][ T5926] usb 3-1: config 0 descriptor?? [ 145.900087][ T6983] dummy0 (unregistering): left promiscuous mode [ 145.926144][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 145.990016][ T5831] usb 1-1: config 0 has no interfaces? [ 146.018420][ T5831] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 146.030704][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.039637][ T5831] usb 1-1: Product: syz [ 146.043887][ T5831] usb 1-1: Manufacturer: syz [ 146.051072][ T5831] usb 1-1: SerialNumber: syz [ 146.059452][ T5831] usb 1-1: config 0 descriptor?? [ 146.091213][ T9] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 146.101195][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.131923][ T9] usb 4-1: Product: syz [ 146.151563][ T9] usb 4-1: Manufacturer: syz [ 146.165039][ T6986] loop6: detected capacity change from 0 to 7 [ 146.172016][ T9] usb 4-1: SerialNumber: syz [ 146.176992][ T5940] Dev loop6: unable to read RDB block 7 [ 146.182885][ T5940] loop6: unable to read partition table [ 146.183809][ T9] usb 4-1: config 0 descriptor?? [ 146.196560][ T5940] loop6: partition table beyond EOD, truncated [ 146.205021][ T6986] Dev loop6: unable to read RDB block 7 [ 146.214242][ T6986] loop6: unable to read partition table [ 146.223030][ T9] esd_usb 4-1:0.0: sending version message failed [ 146.229888][ T6986] loop6: partition table beyond EOD, truncated [ 146.236599][ T9] esd_usb 4-1:0.0: probe with driver esd_usb failed with error -22 [ 146.247793][ T6986] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.430861][ T9] usb 4-1: USB disconnect, device number 13 [ 146.540935][ T6991] ip6erspan0: entered promiscuous mode [ 147.737586][ T7006] FAULT_INJECTION: forcing a failure. [ 147.737586][ T7006] name failslab, interval 1, probability 0, space 0, times 0 [ 147.845366][ T7007] cgroup: fork rejected by pids controller in /syz4 [ 147.971593][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.1.388 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 147.971620][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 147.971631][ T7006] Call Trace: [ 147.971636][ T7006] [ 147.971642][ T7006] dump_stack_lvl+0x189/0x250 [ 147.971665][ T7006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.971683][ T7006] ? __pfx__printk+0x10/0x10 [ 147.971722][ T7006] should_fail_ex+0x414/0x560 [ 147.971746][ T7006] should_failslab+0xa8/0x100 [ 147.971764][ T7006] __kmalloc_cache_noprof+0x70/0x3d0 [ 147.971781][ T7006] ? sctp_add_bind_addr+0x8c/0x370 [ 147.971800][ T7006] sctp_add_bind_addr+0x8c/0x370 [ 147.971819][ T7006] sctp_copy_local_addr_list+0x30b/0x4e0 [ 147.971838][ T7006] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 147.971853][ T7006] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 147.971884][ T7006] ? sctp_v4_is_any+0x35/0x60 [ 147.971899][ T7006] ? sctp_copy_one_addr+0x93/0x360 [ 147.971916][ T7006] sctp_bind_addr_copy+0xb3/0x3c0 [ 147.971932][ T7006] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 147.971947][ T7006] sctp_connect_new_asoc+0x2e0/0x690 [ 147.971968][ T7006] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 147.971986][ T7006] ? __local_bh_enable_ip+0x12d/0x1c0 [ 147.972029][ T7006] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 147.972045][ T7006] ? security_sctp_bind_connect+0x7e/0x2e0 [ 147.972079][ T7006] sctp_sendmsg+0x155c/0x2810 [ 147.972105][ T7006] ? __pfx_sctp_sendmsg+0x10/0x10 [ 147.972125][ T7006] ? aa_sk_perm+0x81e/0x950 [ 147.972140][ T7006] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.972161][ T7006] ? sock_rps_record_flow+0x19/0x400 [ 147.972180][ T7006] ? inet_sendmsg+0x2f4/0x370 [ 147.972198][ T7006] __sock_sendmsg+0x19c/0x270 [ 147.972225][ T7006] ____sys_sendmsg+0x505/0x830 [ 147.972245][ T7006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.972270][ T7006] ___sys_sendmsg+0x21f/0x2a0 [ 147.972305][ T7006] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.972346][ T7006] ? __fget_files+0x2a/0x420 [ 147.972362][ T7006] ? __fget_files+0x3a0/0x420 [ 147.972385][ T7006] __sys_sendmsg+0x164/0x220 [ 147.972402][ T7006] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.972429][ T7006] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 147.972445][ T7006] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.972461][ T7006] __do_fast_syscall_32+0xb4/0x110 [ 147.972478][ T7006] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.972495][ T7006] do_fast_syscall_32+0x34/0x80 [ 147.972511][ T7006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.972526][ T7006] RIP: 0023:0xf712e539 [ 147.972537][ T7006] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 147.972547][ T7006] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 147.972561][ T7006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 147.972570][ T7006] RDX: 000000000404c0e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.972577][ T7006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.972584][ T7006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.972591][ T7006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.972609][ T7006] [ 148.362460][ T7213] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 148.439776][ T5831] usb 3-1: USB disconnect, device number 17 [ 148.512313][ T7215] loop6: detected capacity change from 0 to 7 [ 148.547777][ T7215] Dev loop6: unable to read RDB block 7 [ 148.553389][ T7215] loop6: AHDI p3 p4 [ 148.656091][ T7215] loop6: partition table partially beyond EOD, truncated [ 148.663300][ T7215] loop6: p3 start 1886353253 is beyond EOD, truncated [ 148.695668][ T5883] usb 1-1: USB disconnect, device number 13 [ 149.161051][ T5831] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 152.815489][ C0] sched: DL replenish lagged too much [ 152.821458][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 158.245532][ T5831] usb 2-1: device descriptor read/all, error -110 [ 197.077787][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.091166][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.607153][ T5140] Bluetooth: hci0: command 0x0406 tx timeout [ 207.613286][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 207.682514][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 207.732813][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 208.545237][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 257.271900][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.285957][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.515843][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 328.522915][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5881/1:b..l [ 328.531322][ C0] rcu: (detected by 0, t=10502 jiffies, g=18505, q=693 ncpus=2) [ 328.539056][ C0] task:kworker/1:5 state:R running task stack:22952 pid:5881 tgid:5881 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 328.553311][ C0] Workqueue: events key_garbage_collector [ 328.559079][ C0] Call Trace: [ 328.562379][ C0] [ 328.565322][ C0] __schedule+0x16e2/0x4cd0 [ 328.569861][ C0] ? preempt_schedule_notrace+0xd1/0x110 [ 328.575516][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 328.580481][ C0] ? __pfx___schedule+0x10/0x10 [ 328.585356][ C0] ? arch_stack_walk+0x10d/0x150 [ 328.590328][ C0] ? stack_trace_save+0x9c/0xe0 [ 328.595208][ C0] preempt_schedule_notrace+0xd1/0x110 [ 328.600689][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 328.606786][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 328.612701][ C0] rcu_is_watching+0x7f/0xb0 [ 328.617319][ C0] ? __update_page_owner_free_handle+0x2e/0x450 [ 328.623584][ C0] __update_page_owner_free_handle+0x3cb/0x450 [ 328.629781][ C0] ? __update_page_owner_free_handle+0x2e/0x450 [ 328.636050][ C0] __reset_page_owner+0x85/0x1f0 [ 328.641010][ C0] __free_frozen_pages+0xb0e/0xcd0 [ 328.646159][ C0] __put_partials+0x161/0x1c0 [ 328.650872][ C0] put_cpu_partial+0x17c/0x250 [ 328.655688][ C0] ? put_cpu_partial+0x6d/0x250 [ 328.660581][ C0] __slab_free+0x2f7/0x400 [ 328.665021][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 328.670931][ C0] ? __phys_addr+0xba/0x170 [ 328.675458][ C0] qlist_free_all+0x9a/0x140 [ 328.680061][ C0] kasan_quarantine_reduce+0x148/0x160 [ 328.685536][ C0] __kasan_slab_alloc+0x22/0x80 [ 328.690411][ C0] __kmalloc_cache_noprof+0x1be/0x3d0 [ 328.695827][ C0] ? assoc_array_gc+0x39b/0x16a0 [ 328.700801][ C0] assoc_array_gc+0x39b/0x16a0 [ 328.705601][ C0] ? keyring_gc+0x23b/0x2b0 [ 328.710150][ C0] ? __pfx_keyring_gc_select_iterator+0x10/0x10 [ 328.716415][ C0] ? down_write+0x162/0x1f0 [ 328.720943][ C0] ? __pfx_assoc_array_gc+0x10/0x10 [ 328.726172][ C0] ? keyring_gc+0xc4/0x2b0 [ 328.730619][ C0] keyring_gc+0x256/0x2b0 [ 328.734970][ C0] ? keyring_gc+0xc4/0x2b0 [ 328.739414][ C0] ? __pfx_keyring_gc+0x10/0x10 [ 328.744309][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 328.749540][ C0] key_garbage_collector+0x4c1/0xa20 [ 328.754859][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 328.760618][ C0] process_scheduled_works+0xadb/0x17a0 [ 328.766220][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.772270][ C0] worker_thread+0x8a0/0xda0 [ 328.776915][ C0] kthread+0x70e/0x8a0 [ 328.781011][ C0] ? __pfx_worker_thread+0x10/0x10 [ 328.786133][ C0] ? __pfx_kthread+0x10/0x10 [ 328.790737][ C0] ? __pfx_kthread+0x10/0x10 [ 328.795342][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.800553][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.805776][ C0] ? __pfx_kthread+0x10/0x10 [ 328.810381][ C0] ret_from_fork+0x4b/0x80 [ 328.814818][ C0] ? __pfx_kthread+0x10/0x10 [ 328.819436][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.824252][ C0] [ 328.827283][ C0] rcu: rcu_preempt kthread starved for 6364 jiffies! g18505 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 328.838412][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 328.848437][ C0] rcu: RCU grace-period kthread stack dump: [ 328.854369][ C0] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 328.867891][ C0] Call Trace: [ 328.871199][ C0] [ 328.874145][ C0] __schedule+0x16e2/0x4cd0 [ 328.878683][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 328.884028][ C0] ? __pfx___schedule+0x10/0x10 [ 328.888911][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 328.894216][ C0] preempt_schedule_irq+0xb5/0x150 [ 328.899343][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 328.905098][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 328.910950][ C0] irqentry_exit+0x6f/0x90 [ 328.915396][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.921396][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 328.926707][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 41 d7 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 328.946324][ C0] RSP: 0018:ffffc90000157318 EFLAGS: 00000206 [ 328.952410][ C0] RAX: c885baabfb855a00 RBX: 0000000000000000 RCX: c885baabfb855a00 [ 328.960392][ C0] RDX: 0000000000000000 RSI: ffffffff8d935a8d RDI: ffffffff8bc1d220 [ 328.968383][ C0] RBP: ffffffff817199f5 R08: 0000000000000000 R09: 0000000000000000 [ 328.976584][ C0] R10: 0000000000000000 R11: ffffffff817199f5 R12: 0000000000000002 [ 328.984587][ C0] R13: ffffffff8df3b860 R14: 0000000000000000 R15: 0000000000000246 [ 328.992589][ C0] ? unwind_next_frame+0xa5/0x2390 [ 328.997722][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.002894][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.008043][ C0] ? kasan_save_track+0x3e/0x80 [ 329.012920][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.018062][ C0] unwind_next_frame+0xc2/0x2390 [ 329.023024][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.028173][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.033311][ C0] ? stack_trace_save+0x9c/0xe0 [ 329.038190][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.044369][ C0] arch_stack_walk+0x11c/0x150 [ 329.049175][ C0] ? kasan_save_track+0x3e/0x80 [ 329.054051][ C0] stack_trace_save+0x9c/0xe0 [ 329.058748][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 329.064151][ C0] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 329.070340][ C0] kasan_save_track+0x3e/0x80 [ 329.075033][ C0] ? kasan_save_track+0x3e/0x80 [ 329.079954][ C0] __kasan_slab_alloc+0x6c/0x80 [ 329.084828][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 329.090307][ C0] ? fill_pool+0x100/0x570 [ 329.094755][ C0] fill_pool+0x100/0x570 [ 329.099026][ C0] ? __pfx_fill_pool+0x10/0x10 [ 329.103818][ C0] ? __lock_acquire+0xaac/0xd20 [ 329.108722][ C0] ? debug_object_assert_init+0x288/0x380 [ 329.114480][ C0] debug_object_assert_init+0x2b1/0x380 [ 329.120159][ C0] __try_to_del_timer_sync+0x29/0x3a0 [ 329.125557][ C0] ? __timer_delete_sync+0x133/0x2d0 [ 329.130877][ C0] __timer_delete_sync+0x1fe/0x2d0 [ 329.136018][ C0] ? __pfx___timer_delete_sync+0x10/0x10 [ 329.141676][ C0] ? schedule+0x91/0x360 [ 329.145940][ C0] ? schedule+0x16f/0x360 [ 329.150304][ C0] schedule_timeout+0x133/0x270 [ 329.155183][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 329.160573][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 329.166485][ C0] ? __pfx_process_timeout+0x10/0x10 [ 329.171795][ C0] ? prepare_to_swait_event+0x341/0x380 [ 329.177484][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 329.182357][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.187589][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 329.193770][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 329.199254][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 329.204473][ C0] ? finish_swait+0xcd/0x1f0 [ 329.209086][ C0] rcu_gp_kthread+0x99/0x390 [ 329.213713][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 329.218946][ C0] ? __kthread_parkme+0x7b/0x200 [ 329.223917][ C0] ? __kthread_parkme+0x1a1/0x200 [ 329.228971][ C0] kthread+0x70e/0x8a0 [ 329.233065][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 329.238283][ C0] ? __pfx_kthread+0x10/0x10 [ 329.242911][ C0] ? __pfx_kthread+0x10/0x10 [ 329.247527][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.252746][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.257958][ C0] ? __pfx_kthread+0x10/0x10 [ 329.262562][ C0] ret_from_fork+0x4b/0x80 [ 329.266991][ C0] ? __pfx_kthread+0x10/0x10 [ 329.271605][ C0] ret_from_fork_asm+0x1a/0x30 [ 329.276402][ C0] [ 329.279448][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 329.285803][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 329.297458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 329.307526][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 329.313260][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 fb 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 329.332883][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 329.338972][ C0] RAX: 8dae66e1b75bf700 RBX: ffffffff81973f28 RCX: 8dae66e1b75bf700 [ 329.346962][ C0] RDX: 0000000000000001 RSI: ffffffff8d74aa91 RDI: ffffffff8bc1d220 [ 329.354946][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 329.362933][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7ed970 [ 329.370919][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 329.378903][ C0] FS: 0000000000000000(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 329.387854][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.394465][ C0] CR2: 0000000080195018 CR3: 000000001bfe2000 CR4: 00000000003526f0 [ 329.402454][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 329.410440][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.418453][ C0] Call Trace: [ 329.421756][ C0] [ 329.424704][ C0] default_idle+0x13/0x20 [ 329.429060][ C0] default_idle_call+0x74/0xb0 [ 329.433861][ C0] do_idle+0x1e8/0x510 [ 329.437956][ C0] ? __pfx_do_idle+0x10/0x10 [ 329.442613][ C0] cpu_startup_entry+0x44/0x60 [ 329.447395][ C0] rest_init+0x2de/0x300 [ 329.451674][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 329.457248][ C0] start_kernel+0x470/0x4f0 [ 329.461770][ C0] x86_64_start_reservations+0x2a/0x30 [ 329.467278][ C0] x86_64_start_kernel+0x66/0x70 [ 329.472243][ C0] common_startup_64+0x13e/0x147 [ 329.477220][ C0] [ 337.657130][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.670975][ T1297] ieee802154 phy1 wpan1: encryption failed: -22