last executing test programs: 8.560497852s ago: executing program 3 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0xffef}, 0x0) 8.203587292s ago: executing program 3 (id=167): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/155, 0x9b}], 0x1, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000001200000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020000000900010073797a30000000000900020073797a300000000008000a40000000010800054000000004080003400000002060000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000034000480300001800b00010064796e7365740000200002800900010073797a300000000008000340000000"], 0x118}}, 0x0) 7.894532619s ago: executing program 3 (id=169): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24020480) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x61, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$printer(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000880)=""/164, 0xa4) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0x2002, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1f, &(0x7f0000000bc0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x401}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @alu={0x4, 0x0, 0x1, 0x1, 0xa, 0xffffffffffffffe0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35f}}], &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x8, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7a}, 0x94) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x8c0}, 0x2000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 5.009575441s ago: executing program 3 (id=185): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000001800)={{0xffffffffffffffff, 0x0, 0x220200, 0x0, 0xffffff80, 0x0, 0x0}, 0x0, 0x0}) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a", 0x12) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x801) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.759367187s ago: executing program 4 (id=187): socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100008e00000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x7, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x140}}, 0x20000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0xbfe9, 0x6, 0xffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0xfffd, 0x0, 0x0, 0x8801}, 0x0) 4.695825665s ago: executing program 4 (id=188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x4b, 0x6, 0x0, 0xb49, 0x9, 0x5, 0x6, 0x80000000}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r2 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) close(0x3) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = dup2(r3, r3) readv(r3, 0x0, 0x0) write$P9_RREADLINK(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @rand_addr=0x64010100}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x80) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'xfrm0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 2.435269699s ago: executing program 1 (id=202): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000af0000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xcd6, &(0x7f000000cf3d)=""/195}, 0x48) 2.232192937s ago: executing program 1 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x240}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x2000000) 1.975989771s ago: executing program 4 (id=204): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110228bd7000000000002b00000508000300", @ANYRES32=r2, @ANYBLOB="0a0034000101010101010000080026006c09000005002400820000"], 0x40}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 1.952952322s ago: executing program 1 (id=205): syz_emit_ethernet(0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000025000086dd60000000003c2b00fe80000000000000000000000000007f000000000000000000000000004100aa3c0000000000000033ec", @ANYBLOB], 0x0) 1.752880966s ago: executing program 1 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x38, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x500}, 0x20008844) 1.752456302s ago: executing program 3 (id=208): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) epoll_create1(0x80000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x9801) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r3, &(0x7f0000000000), 0x0) 1.630047599s ago: executing program 2 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x6, @empty}, 0x1c) recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/205, 0xcd}], 0x1}, 0x0) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000440)="68dabea2fc21313545cd2a91d8e7b075c00d9f5163c303e4a507c154b4164ffbaddb12bbfd27913d892efb6014270d58b568d1e75e572c835039f558d9f285921047b8549f308fa4e32c62ea049addeded050be556cbee0587190d756d91504c2d92bf6fb7b7214058775d1833ad9baba9dbf15e57693c828965aa6b34a9f894390a1c7574311556ebd6cd058f123b2f7760627ad1b456f9e4bbbcde7187ef6e9c6fa17f0e96e63cb082915e57a007b247060fafd0221cbe63c4159780f9f1ce915368dfb11279c2c587d297fd4137176bc66970a4efb75880e15279fd97cab457de80e398e114fc14442cca298d20e88315bf32375df853a8d8a936fd882e0e") (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfff1, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002000}, 0x4040020) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.614434043s ago: executing program 1 (id=210): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf362, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x200, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90d, 0x0, 0x1, 0x1ed, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x40250}}], 0x1, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.483483839s ago: executing program 4 (id=211): process_mrelease(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000002100000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4008080) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 1.419834583s ago: executing program 1 (id=212): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x22020400) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000002100)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, &(0x7f00000020c0)=[0x0], 0x1}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x40002, 0x1e3}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2, 0x0, r2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x2000000000000000, 0x202800) ioctl$USBDEVFS_RESET(r8, 0x5514) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',eroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(r10, 0x0, 0x0, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000db40)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0x80800000009, 0x0, 0x7, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x0, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000440)="77b209e63a28a4a217b8d5e7e89ebffe1a243da7b38d88ed703c425a3905d650357c72b69cb6b00f1c752c9d1b6a6d2842a822", 0x33, 0x3) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="2900000004000000000000140000000001000000000002000000000100000000"], 0x29) 1.325299949s ago: executing program 2 (id=213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d3, 0x33}, @in=@multicast1, {0x2000000000003, 0x40000}, {0x1d00}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0x4}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) 1.324844896s ago: executing program 3 (id=214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x4b, 0x6, 0x0, 0xb49, 0x9, 0x5, 0x6, 0x80000000}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r2 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) close(0x3) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = dup2(r3, r3) readv(r3, 0x0, 0x0) write$P9_RREADLINK(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @rand_addr=0x64010100}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x80) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'xfrm0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 1.129000192s ago: executing program 2 (id=215): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"bfa2612b67dc1aeee8ce78a06eab399e", 0x0, 0x0, {0x40, 0xfffffff8}, {0x5, 0x5}, 0x3ff, [0x200, 0x80000000, 0x7d3, 0x347c5c0000000000, 0x200, 0x8, 0x7, 0x83e, 0x8, 0x8, 0x9, 0xffffffff, 0x4, 0x8, 0x3, 0xfe5]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000900)={"fedf92b3f4ffe7a2a7707a323d2c00a9", r1, r2, {0x1, 0xd}, {0x9, 0x5}, 0x7, [0x5, 0x7, 0x0, 0x2b9c, 0x5, 0x2, 0x3, 0x696, 0xd7f, 0x5, 0x3d, 0xd, 0x7fffffff, 0x7, 0x2, 0x1]}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x3, 0x5, 0xd6}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a00)=ANY=[], 0x0) 859.741961ms ago: executing program 2 (id=216): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30"], 0x128}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0xe4, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 792.440427ms ago: executing program 4 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=ANY=[@ANYBLOB="70000000100001002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="6cf2040000c00000140003006e657464657673696d3000000000000034001680300001802c000c80140001c528000000bd0effa16b13000088a800081400010024eb0000c80200000700000088a8000008000a"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 628.366681ms ago: executing program 0 (id=219): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x22, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d96000100000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 443.822049ms ago: executing program 4 (id=220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000600)=0x14) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a80)={{r0, &(0x7f0000000640)='\\\x00', 0x40, &(0x7f0000000680)={@_ha_fsid={[0x3, 0x7]}, {0xcc, 0x9, 0x5, 0xbc}}, 0x8, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0xa}, 0x3, &(0x7f0000000a00)=[{0x1, 0x1, &(0x7f0000000740)='&\x00', &(0x7f0000000780)="709d6204b9a10db70c0820e3ab0263e651cee08a89af8ba313043641a838480c31c35efe4b224728deea890b9f9accf091b1f4ac3246b7ee4a7cecded96239f6b893f293a6d85f86023b1f8e05529b4e1870f2db0705e87ad3e7d629a4be588e9012fab9b5c906b82c11e74502a3fdd359ba8c3e9538b431f753d8edd2a6216348506a72342c57695f9a2edbe55be62e223a95cada7a6191a82cc2f226b36b10d8ec75b458ebba41f7e19f3eb92584d216a2c0e22bd8b701f006", 0xba, 0x2}, {0x2, 0xf, &(0x7f0000000840)='./binderfs/binder0\x00', &(0x7f0000000880)="c4b7e353708ebf4fbe51bed3c78234f6c83157b1f50c935ed5313121e2c99d4bbd9abcf8035876501ee0af9acbbde6a920245ef6efdcdbf52bcdfcd6c77d0fb2faeda7e13a35e489947c6132ae241f795f52814a9788c074c004c793ee41ec982b617235afa0285775cf399b214cbb1d91327a51e02ec378c95433aa18fd9b70dbed582227d3f8ba35b6e82df2be586b0ad3e4656cd9", 0x96, 0x8}, {0xa6e9320245071c42, 0xd795, &(0x7f0000000940)=')!:\\\f/K\x00', &(0x7f0000000980)="6accbb5c93aa2c3b73e5d4b75b7b2431a4ab26258e126457cc19a04c0b1775e5b9b95edb28f158e4a5c815f17ba1915c4bbd72f936d87abcf11bd2602cdef0b950696e11501eb95b638d54be26a406f8adc4bb82223f2e16d226a285ec5c6cf4a3a512d940d842265c815d1413fa6a2ee2feadceed0224", 0x77}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ec0)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r8, &(0x7f0000002fc0)=""/4063, 0xfdf) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xbc60, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x1d, 0x2a, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x664}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7ff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x1d}, @alu={0x7, 0x1, 0x5, 0xa, 0x8, 0xfffffffffffffff4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, &(0x7f0000000580), 0x41000, 0x48, '\x00', r3, 0x1b, r4, 0x8, &(0x7f0000000b00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x6, 0x3, 0x3}, 0x10, r5, 0x0, 0x3, &(0x7f0000001000)=[r6, 0x1, r7, r8, r9], &(0x7f0000001040)=[{0x5, 0x1, 0xa, 0x5}, {0x2, 0x4, 0xd, 0xa}, {0x3, 0x3, 0x4, 0xa}], 0x10, 0x2}, 0x94) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, 0x0) r11 = dup3(r10, r0, 0x0) ioctl$PIO_CMAP(r11, 0x4b71, 0x0) 441.110748ms ago: executing program 0 (id=221): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000080500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) 428.246969ms ago: executing program 2 (id=222): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf362, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x200, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90d, 0x0, 0x1, 0x1ed, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x40250}}], 0x1, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 316.507258ms ago: executing program 0 (id=223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000500000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) 186.395775ms ago: executing program 0 (id=224): socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100008e00000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x7, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x140}}, 0x20000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0xbfe9, 0x6, 0xffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0xfffe, 0x0, 0x0, 0x8801}, 0x0) 155.068098ms ago: executing program 0 (id=225): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) (async, rerun: 64) r3 = syz_open_dev$mtd(&(0x7f0000000200), 0x1, 0x80000) (rerun: 64) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000240)) (async) r4 = socket$inet6(0xa, 0x2, 0xa317a8) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@local, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', r2, 0x80, 0x700, 0x4, 0x2, {{0x7, 0x4, 0x3, 0x26, 0x1c, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty, {[@generic={0x88, 0x4, "a19f"}, @end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x158, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x4004090) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0, 0x8}}, 0x49, 0x3, 0x1, 0xdb, 0x4a, 0x40}, &(0x7f00000007c0)=0x9c) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000800)={r11, 0x5, 0x2, 0x6}, 0x10) (async) r12 = syz_open_dev$mouse(&(0x7f0000000840), 0x4, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r12, 0xc0385868, &(0x7f0000000980)={r4, &(0x7f0000000880)='syztnl0\x00', 0xa0000, &(0x7f00000008c0)={@_ha_fsid={[0x449e, 0xfffffffd]}, {0x6, 0x3af, 0xfff, 0x100}}, 0x82f, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0x2}) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f00000009c0)) r13 = socket$inet(0x2, 0x800, 0x3) getsockopt$IPT_SO_GET_ENTRIES(r13, 0x0, 0x41, &(0x7f0000000a00)={'raw\x00', 0xc9, "dbf2f5e64b92f57d2d0c2cab284de9126672eed651df5b18c36889a552dd3542bf210cdb90d73b5b9dc018d57f3619cb770f02f2fc6e9994436fbae00f08f8a2858d2db2b0de66582fd3d60eb6ac18cb63fcaaf7f566ae9334791a8245a22afd85c4f520fa146388599c5e3968751882e10e02c238bee27ce83571a99d2330c322b3ef67b5adf22640a3c5d48a694ed350f77538a5576a769283c9dfc403799227c7d0e7d7d30cc876258def56ec687b9e98f85da47837b776fdeaf0fa161c9542fef4fcb4bcb0daed"}, 0xfffffffffffffffe) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r14, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x18, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x80) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) (rerun: 64) select(0x40, &(0x7f0000000c00)={0x7, 0x8, 0x5, 0x2, 0xfffffffffffffffc, 0x8, 0x5, 0x9}, &(0x7f0000000c40)={0xb, 0xc, 0x8, 0x5, 0x4, 0xfffffffffffffffd, 0x7fffffff, 0x5}, &(0x7f0000000c80)={0x5, 0x5, 0x101, 0x6, 0x9, 0xfffffffffffffffd, 0x8, 0x1159}, &(0x7f0000000d00)={r15, r16/1000+60000}) socket$unix(0x1, 0x1, 0x0) (async) r17 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$cec(&(0x7f0000000d40), 0x0, 0x4000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000d80)) 31.777302ms ago: executing program 0 (id=226): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x4b, 0x6, 0x0, 0xb49, 0x9, 0x5, 0x6, 0x80000000}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r2 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) close(0x3) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = dup2(r3, r3) readv(r3, 0x0, 0x0) write$P9_RREADLINK(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @rand_addr=0x64010100}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x80) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'xfrm0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 0s ago: executing program 2 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') close(r2) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28048840}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 73.526171][ T5594] cgroup: Unknown subsys name 'net' [ 73.676041][ T5594] cgroup: Unknown subsys name 'cpuset' [ 73.684826][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.038690][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.746656][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.755032][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.768406][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.776133][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.784519][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.796309][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.797521][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.805129][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.812653][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.819232][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.828039][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.834378][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.843558][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.847636][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.855214][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.861424][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.867626][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.884664][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.892455][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.894036][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.900088][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.907458][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.924021][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.933803][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.950860][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.890435][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.897757][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.905070][ T5623] bridge_slave_0: entered allmulticast mode [ 79.912403][ T5623] bridge_slave_0: entered promiscuous mode [ 79.954494][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.961668][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.969004][ T5623] bridge_slave_1: entered allmulticast mode [ 79.976091][ T5623] bridge_slave_1: entered promiscuous mode [ 80.063390][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.083975][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.091180][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.098692][ T5627] bridge_slave_0: entered allmulticast mode [ 80.106481][ T5627] bridge_slave_0: entered promiscuous mode [ 80.124331][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.159191][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.166465][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.173789][ T5627] bridge_slave_1: entered allmulticast mode [ 80.180715][ T5627] bridge_slave_1: entered promiscuous mode [ 80.187670][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.195161][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.202296][ T5625] bridge_slave_0: entered allmulticast mode [ 80.209579][ T5625] bridge_slave_0: entered promiscuous mode [ 80.236651][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.243937][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.251107][ T5626] bridge_slave_0: entered allmulticast mode [ 80.258310][ T5626] bridge_slave_0: entered promiscuous mode [ 80.281111][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.288350][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.295626][ T5625] bridge_slave_1: entered allmulticast mode [ 80.302633][ T5625] bridge_slave_1: entered promiscuous mode [ 80.319241][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.326697][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.334543][ T5628] bridge_slave_0: entered allmulticast mode [ 80.343116][ T5628] bridge_slave_0: entered promiscuous mode [ 80.351109][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.358411][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.366188][ T5626] bridge_slave_1: entered allmulticast mode [ 80.373679][ T5626] bridge_slave_1: entered promiscuous mode [ 80.398875][ T5623] team0: Port device team_slave_0 added [ 80.406757][ T5623] team0: Port device team_slave_1 added [ 80.412746][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.420309][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.427784][ T5628] bridge_slave_1: entered allmulticast mode [ 80.434817][ T5628] bridge_slave_1: entered promiscuous mode [ 80.453358][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.502173][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.514643][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.547145][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.558577][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.579323][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.589574][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.596749][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.622940][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.637007][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.674804][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.681865][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.708148][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.721440][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.741695][ T5627] team0: Port device team_slave_0 added [ 80.778163][ T5626] team0: Port device team_slave_0 added [ 80.786927][ T5627] team0: Port device team_slave_1 added [ 80.812440][ T5625] team0: Port device team_slave_0 added [ 80.820017][ T5625] team0: Port device team_slave_1 added [ 80.836038][ T5626] team0: Port device team_slave_1 added [ 80.851772][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.858861][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.885567][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.907571][ T5628] team0: Port device team_slave_0 added [ 80.930644][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.937724][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.964036][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.985914][ T5628] team0: Port device team_slave_1 added [ 81.003916][ T5619] Bluetooth: hci3: command tx timeout [ 81.003921][ T5612] Bluetooth: hci4: command tx timeout [ 81.004161][ T5619] Bluetooth: hci2: command tx timeout [ 81.010239][ T5605] Bluetooth: hci0: command tx timeout [ 81.021558][ T5623] hsr_slave_0: entered promiscuous mode [ 81.027476][ T50] Bluetooth: hci1: command tx timeout [ 81.034834][ T5623] hsr_slave_1: entered promiscuous mode [ 81.051083][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.058186][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.084335][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.104099][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.111161][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.137832][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.161155][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.168509][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.195712][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.217421][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.224491][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.250608][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.285279][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.292254][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.318938][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.366813][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.374058][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.401138][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.446943][ T5627] hsr_slave_0: entered promiscuous mode [ 81.453581][ T5627] hsr_slave_1: entered promiscuous mode [ 81.459854][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 81.465755][ T5627] Cannot create hsr debugfs directory [ 81.491402][ T5626] hsr_slave_0: entered promiscuous mode [ 81.498655][ T5626] hsr_slave_1: entered promiscuous mode [ 81.505295][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 81.511058][ T5626] Cannot create hsr debugfs directory [ 81.552155][ T5625] hsr_slave_0: entered promiscuous mode [ 81.558640][ T5625] hsr_slave_1: entered promiscuous mode [ 81.565742][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 81.571487][ T5625] Cannot create hsr debugfs directory [ 81.664364][ T5628] hsr_slave_0: entered promiscuous mode [ 81.670749][ T5628] hsr_slave_1: entered promiscuous mode [ 81.677236][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 81.683142][ T5628] Cannot create hsr debugfs directory [ 82.079543][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.091996][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.100586][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.110047][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.117891][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.129127][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.148518][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.157909][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.233639][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.245974][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.270300][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.280224][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.289327][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.299482][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.323082][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.334271][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.369539][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.379679][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.394995][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.404556][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.416444][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.426914][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.451584][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.462414][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.548044][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.558179][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.567894][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.578421][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.586380][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.596840][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.615672][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.626586][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.745814][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.757632][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.766339][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.776419][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.798608][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.805760][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.817120][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.832454][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.841626][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.855187][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.930568][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.939800][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.968024][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.975701][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.987215][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.994380][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.019618][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.026801][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.061251][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.068417][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.083385][ T50] Bluetooth: hci2: command tx timeout [ 83.089741][ T5605] Bluetooth: hci1: command tx timeout [ 83.089823][ T5619] Bluetooth: hci0: command tx timeout [ 83.095536][ T5617] Bluetooth: hci4: command tx timeout [ 83.100621][ T5619] Bluetooth: hci3: command tx timeout [ 83.129500][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.189439][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.220185][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.245759][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.252990][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.290867][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.298010][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.328001][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.339370][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.366451][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.373631][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.387588][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.394754][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.432341][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.455392][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.484886][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.500792][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.508013][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.547929][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.555076][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.621997][ T5627] veth0_vlan: entered promiscuous mode [ 83.675008][ T5627] veth1_vlan: entered promiscuous mode [ 83.697451][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.720582][ T5623] veth0_vlan: entered promiscuous mode [ 83.766765][ T5623] veth1_vlan: entered promiscuous mode [ 83.786141][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.810462][ T5627] veth0_macvtap: entered promiscuous mode [ 83.835713][ T5627] veth1_macvtap: entered promiscuous mode [ 83.866226][ T5626] veth0_vlan: entered promiscuous mode [ 83.899674][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.909962][ T5626] veth1_vlan: entered promiscuous mode [ 83.919653][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.931062][ T5623] veth0_macvtap: entered promiscuous mode [ 83.950733][ T5623] veth1_macvtap: entered promiscuous mode [ 83.960569][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.986167][ T5628] veth0_vlan: entered promiscuous mode [ 84.013430][ T1157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.036976][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.075596][ T5628] veth1_vlan: entered promiscuous mode [ 84.091430][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.117104][ T5626] veth0_macvtap: entered promiscuous mode [ 84.136483][ T5626] veth1_macvtap: entered promiscuous mode [ 84.219246][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.235110][ T181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.242926][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.249705][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.258941][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.282140][ T5625] veth0_vlan: entered promiscuous mode [ 84.321533][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.339168][ T5628] veth0_macvtap: entered promiscuous mode [ 84.354642][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.363978][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.388477][ T5625] veth1_vlan: entered promiscuous mode [ 84.396041][ T5628] veth1_macvtap: entered promiscuous mode [ 84.444150][ T181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.472485][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.474677][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.482226][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.507492][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.539529][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.620765][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.679779][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.699388][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.721648][ T5625] veth0_macvtap: entered promiscuous mode [ 84.744005][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.808362][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.832738][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.862631][ T5625] veth1_macvtap: entered promiscuous mode [ 85.008865][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.032419][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.043502][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.078127][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.127603][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.154569][ T1020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.164632][ T5619] Bluetooth: hci4: command tx timeout [ 85.167022][ T5617] Bluetooth: hci1: command tx timeout [ 85.170074][ T5619] Bluetooth: hci2: command tx timeout [ 85.170095][ T5619] Bluetooth: hci0: command tx timeout [ 85.173190][ T5605] Bluetooth: hci3: command tx timeout [ 85.208676][ T534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.264804][ T534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.312923][ T1020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.452517][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.475733][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.504819][ T5719] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.603227][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.636378][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.689863][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.699124][ T1157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.718747][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.727266][ T1157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.740354][ T5719] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 85.773044][ T181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.785099][ T5722] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.875681][ T1020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.920518][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.924871][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.967567][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.976946][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.995896][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.033779][ T1020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.054478][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 86.063138][ T1020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.402149][ T5739] loop4: detected capacity change from 0 to 7 [ 86.456538][ T5739] Dev loop4: unable to read RDB block 7 [ 86.495854][ T5739] loop4: unable to read partition table [ 86.512766][ T5739] loop4: partition table beyond EOD, truncated [ 86.537404][ T5739] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 86.612021][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 86.615891][ T5744] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 86.655995][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 86.709987][ T5744] CPU: 0 UID: 0 PID: 5744 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 86.710013][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.710031][ T5744] Call Trace: [ 86.710039][ T5744] [ 86.710046][ T5744] dump_stack_lvl+0xe8/0x150 [ 86.710088][ T5744] sysfs_create_dir_ns+0x271/0x2a0 [ 86.710115][ T5744] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 86.710138][ T5744] ? do_raw_spin_unlock+0xf5/0x210 [ 86.710159][ T5744] kobject_add_internal+0x622/0xcd0 [ 86.710185][ T5744] kobject_init_and_add+0x12b/0x1a0 [ 86.710210][ T5744] ? rcu_is_watching+0x15/0xb0 [ 86.710240][ T5744] ? __pfx_kobject_init_and_add+0x10/0x10 [ 86.710280][ T5744] ? __kmalloc_cache_noprof+0x150/0x660 [ 86.710299][ T5744] ? lookup_or_create_module_kobject+0x75/0x170 [ 86.710322][ T5744] lookup_or_create_module_kobject+0xe3/0x170 [ 86.710346][ T5744] module_add_driver+0x79/0x320 [ 86.710371][ T5744] bus_add_driver+0x391/0x670 [ 86.710405][ T5744] driver_register+0x23a/0x320 [ 86.710448][ T5744] usb_gadget_register_driver_owner+0xf9/0x270 [ 86.710477][ T5744] raw_ioctl+0x1541/0x41c0 [ 86.710507][ T5744] ? tomoyo_path_number_perm+0x219/0x5f0 [ 86.710537][ T5744] ? do_vfs_ioctl+0x116f/0x1530 [ 86.710558][ T5744] ? __pfx_raw_ioctl+0x10/0x10 [ 86.710597][ T5744] ? hook_file_ioctl+0x1f0/0x5f0 [ 86.710640][ T5744] ? __fget_files+0x2a/0x420 [ 86.710666][ T5744] ? __fget_files+0x2a/0x420 [ 86.710685][ T5744] ? __fget_files+0x3a2/0x420 [ 86.710702][ T5744] ? __fget_files+0x2a/0x420 [ 86.710723][ T5744] ? bpf_lsm_file_ioctl+0x9/0x20 [ 86.710742][ T5744] ? __pfx_raw_ioctl+0x10/0x10 [ 86.710765][ T5744] __se_sys_ioctl+0xfc/0x170 [ 86.710779][ T5744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.710797][ T5744] do_syscall_64+0x174/0x580 [ 86.710818][ T5744] ? trace_irq_disable+0x3b/0x140 [ 86.710837][ T5744] ? clear_bhb_loop+0x70/0xc0 [ 86.710857][ T5744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.710876][ T5744] RIP: 0033:0x7fcf6d19dd6b [ 86.710904][ T5744] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 86.710919][ T5744] RSP: 002b:00007fcf6b3d2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.710940][ T5744] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fcf6d19dd6b [ 86.710951][ T5744] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 86.710961][ T5744] RBP: 00007fcf6b3d3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 86.710972][ T5744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.710983][ T5744] R13: 00002000000008c0 R14: 0000000000000002 R15: 0000000000000000 [ 86.711008][ T5744] [ 86.711048][ T5744] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 86.813684][ T886] cfg80211: failed to load regulatory.db [ 86.871568][ T5744] Adding module 'raw_gadget' to sysfs failed (-17), the system may be unstable. [ 86.883500][ T5706] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.898563][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 87.070381][ T5754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.109642][ T5754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.152915][ T5706] usb 3-1: device descriptor read/64, error -71 [ 87.218965][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 87.243915][ T5605] Bluetooth: hci1: command tx timeout [ 87.245253][ T5619] Bluetooth: hci3: command tx timeout [ 87.249366][ T5605] Bluetooth: hci0: command tx timeout [ 87.255805][ T5617] Bluetooth: hci2: command tx timeout [ 87.262321][ T5605] Bluetooth: hci4: command tx timeout [ 87.303306][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 87.316567][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.361297][ T9] usb 1-1: Product: syz [ 87.369927][ T9] usb 1-1: Manufacturer: syz [ 87.380831][ T9] usb 1-1: SerialNumber: syz [ 87.403236][ T5706] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.552933][ T5706] usb 3-1: device descriptor read/64, error -71 [ 87.624411][ T5763] netlink: 'syz.1.21': attribute type 7 has an invalid length. [ 87.662907][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 87.663378][ T5706] usb usb3-port1: attempt power cycle [ 87.690773][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 88.044604][ T5706] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.059953][ T5769] syzkaller0: entered promiscuous mode [ 88.086204][ T5769] syzkaller0: entered allmulticast mode [ 88.094649][ T5706] usb 3-1: device descriptor read/8, error -71 [ 88.129437][ T5772] xt_TPROXY: Can be used only with -p tcp or -p udp [ 88.162272][ T5769] tipc: Started in network mode [ 88.179305][ T5769] tipc: Node identity 26474fe1dc56, cluster identity 4711 [ 88.215893][ T5769] tipc: Enabled bearer , priority 0 [ 88.288934][ T5769] tipc: Resetting bearer [ 88.325165][ T5769] syzkaller1: entered promiscuous mode [ 88.330893][ T29] audit: type=1326 audit(1786221479.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6d19e0d9 code=0x7ffc0000 [ 88.355874][ T5769] syzkaller1: entered allmulticast mode [ 88.364415][ T5706] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.372178][ T29] audit: type=1326 audit(1786221479.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6d19e0d9 code=0x7ffc0000 [ 88.404235][ T5706] usb 3-1: device descriptor read/8, error -71 [ 88.424784][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.434995][ T29] audit: type=1326 audit(1786221479.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6d19e0d9 code=0x7ffc0000 [ 88.497714][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.506693][ T29] audit: type=1326 audit(1786221479.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6d19e0d9 code=0x7ffc0000 [ 88.535676][ T5706] usb usb3-port1: unable to enumerate USB device [ 88.572155][ T29] audit: type=1326 audit(1786221479.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcf6d19e0d9 code=0x7ffc0000 [ 88.596835][ T5768] tipc: Resetting bearer [ 88.641823][ T5768] tipc: Disabling bearer [ 88.649317][ T29] audit: type=1326 audit(1786221479.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6d19e0d9 code=0x7ffc0000 [ 88.700218][ T29] audit: type=1326 audit(1786221479.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf6d19de42 code=0x7ffc0000 [ 88.742934][ T29] audit: type=1326 audit(1786221479.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcf6d19ded7 code=0x7ffc0000 [ 88.813569][ T29] audit: type=1326 audit(1786221479.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcf6d15add1 code=0x7ffc0000 [ 88.843152][ T5706] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.880250][ T29] audit: type=1326 audit(1786221479.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.14" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcf6d19eec9 code=0x7ffc0000 [ 89.024503][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 89.050449][ T5706] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 89.060991][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.070773][ T5706] usb 2-1: Product: syz [ 89.075090][ T5706] usb 2-1: Manufacturer: syz [ 89.083217][ T5706] usb 2-1: SerialNumber: syz [ 89.107573][ T5706] usb 2-1: config 0 descriptor?? [ 89.259100][ T9] usb 1-1: USB disconnect, device number 2 [ 89.476403][ T5792] tipc: Started in network mode [ 89.493009][ T5792] tipc: Node identity e23406beba1a, cluster identity 4711 [ 89.515479][ T5792] tipc: Enabled bearer , priority 0 [ 89.586792][ T5782] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.666786][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.712589][ T5706] usb 2-1: Firmware version (0.0) predates our first public release. [ 89.734142][ T5791] tipc: Disabling bearer [ 89.748622][ T5706] usb 2-1: Please update to version 0.2 or newer [ 89.980291][ T5706] usb 2-1: USB disconnect, device number 3 [ 90.434749][ T5816] netlink: 388 bytes leftover after parsing attributes in process `syz.1.38'. [ 90.637585][ T5822] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET) [ 90.646923][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.848073][ T24] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 90.878032][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.267962][ T5615] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.290408][ T5827] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20002 [ 91.450717][ T5615] usb 3-1: Using ep0 maxpacket: 32 [ 91.493891][ T5615] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.505983][ T5615] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 91.534562][ T24] qmi_wwan 1-1:1.0: probe with driver qmi_wwan failed with error -71 [ 91.555841][ T5615] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 91.603613][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.614404][ T24] usb 1-1: USB disconnect, device number 3 [ 91.639194][ T5615] usb 3-1: Product: syz [ 91.662163][ T5615] usb 3-1: Manufacturer: syz [ 91.685097][ T5615] usb 3-1: SerialNumber: syz [ 91.988928][ T5615] usb 3-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 92.003175][ T5615] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 92.018878][ T5615] usb 3-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 92.064898][ T5615] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 92.150732][ T5615] usb 3-1: failed to enable PITCH for EP 0x1 [ 92.167520][ T5615] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 92.608810][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 92.655964][ T5705] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 92.672514][ T5615] usb 3-1: USB disconnect, device number 6 [ 92.852658][ T5705] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 92.893590][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.940700][ T5705] usb 2-1: config 0 has no interface number 0 [ 92.966036][ T5705] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 93.010999][ T5705] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 93.052132][ T5705] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.112912][ T5705] usb 2-1: config 0 interface 52 has no altsetting 0 [ 93.142599][ T5705] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 93.172170][ T5864] loop5: detected capacity change from 0 to 4095 [ 93.192922][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.203151][ T5705] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 93.224803][ T5705] usb 2-1: Manufacturer: syz [ 93.270107][ T5705] usb 2-1: config 0 descriptor?? [ 93.296475][ T5705] hub 2-1:0.52: bad descriptor, ignoring hub [ 93.328247][ T5705] hub 2-1:0.52: probe with driver hub failed with error -5 [ 93.357097][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.390860][ T24] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 93.407381][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.429514][ T24] usb 5-1: Product: syz [ 93.440933][ T24] usb 5-1: Manufacturer: syz [ 93.453207][ T24] usb 5-1: SerialNumber: syz [ 93.454893][ T5864] Buffer I/O error on dev loop5, logical block 511, async page read [ 93.467524][ T24] usb 5-1: config 0 descriptor?? [ 93.480132][ T5610] Buffer I/O error on dev loop5, logical block 511, async page read [ 93.657070][ T5850] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 94.073033][ T5877] netlink: 32 bytes leftover after parsing attributes in process `syz.3.44'. [ 94.177048][ T5854] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.265293][ T5885] Zero length message leads to an empty skb [ 94.298804][ T5705] usb 2-1: Can not set alternate setting to 1, error: -71 [ 94.311840][ T5705] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 94.326481][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.350621][ T5884] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 94.380343][ T5705] usb 2-1: USB disconnect, device number 4 [ 94.381445][ T24] usb 5-1: Firmware version (0.0) predates our first public release. [ 94.426500][ T24] usb 5-1: Please update to version 0.2 or newer [ 94.434323][ T5887] netlink: 'syz.0.54': attribute type 15 has an invalid length. [ 94.551131][ T24] usb 5-1: USB disconnect, device number 2 [ 94.651599][ T5892] gretap0: entered promiscuous mode [ 94.666169][ T5892] macsec1: entered allmulticast mode [ 94.673711][ T5892] gretap0: entered allmulticast mode [ 94.707189][ T5892] gretap0: left allmulticast mode [ 94.728080][ T5892] gretap0: left promiscuous mode [ 95.039547][ T5897] netlink: 64 bytes leftover after parsing attributes in process `syz.1.56'. [ 95.269300][ T5906] netlink: 'syz.3.59': attribute type 7 has an invalid length. [ 95.293586][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 95.320706][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 95.360136][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 95.719876][ T5920] random: crng reseeded on system resumption [ 95.732958][ T5705] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.875359][ T5928] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 95.905452][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 95.923258][ T5705] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 95.954730][ T5705] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 95.985615][ T5705] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 96.014879][ T5705] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.034240][ T5931] Cannot find add_set index 0 as target [ 96.049347][ T5705] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.075735][ T5705] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.109478][ T5705] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.170609][ T5705] usb 1-1: Product: syz [ 96.195591][ T5705] usb 1-1: Manufacturer: syz [ 96.232691][ T5705] usb 1-1: SerialNumber: syz [ 96.311371][ T5705] usb 1-1: config 0 descriptor?? [ 96.352130][ T5705] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.481985][ T5705] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 96.516611][ T5272] 8021q: adding VLAN 0 to HW filter on device dev66 [ 96.539973][ T5955] loop2: detected capacity change from 0 to 7 [ 96.562098][ T5955] loop2: [ 96.563092][ T5911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.565215][ T5955] loop2: partition table partially beyond EOD, truncated [ 96.604326][ T5911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.679438][ T187] usb 1-1: USB disconnect, device number 4 [ 96.693820][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.755637][ T187] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 96.862873][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 96.879714][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 96.899835][ T24] usb 2-1: config 0 has no interface number 0 [ 96.919049][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.921836][ T5962] random: crng reseeded on system resumption [ 96.950005][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 96.985271][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.022926][ T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.041092][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 97.072490][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.096794][ T24] usb 2-1: config 0 descriptor?? [ 97.123740][ T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 97.411596][ T5681] usb 2-1: USB disconnect, device number 5 [ 97.426659][ T5971] loop8: detected capacity change from 0 to 7 [ 97.455783][ T5971] Dev loop8: unable to read RDB block 7 [ 97.455827][ T5971] loop8: unable to read partition table [ 97.456030][ T5971] loop8: partition table beyond EOD, truncated [ 97.456049][ T5971] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 97.475843][ T5681] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 98.313560][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.473924][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 98.490409][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.509028][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.525597][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 98.536125][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.551351][ T9] usb 2-1: Product: syz [ 98.563556][ T9] usb 2-1: Manufacturer: syz [ 98.580030][ T9] usb 2-1: SerialNumber: syz [ 98.597926][ T9] usb 2-1: config 0 descriptor?? [ 98.847514][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 99.143006][ T9] rc_core: IR keymap rc-imon-pad not found [ 99.160905][ T9] Registered IR keymap rc-empty [ 99.177461][ T9] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 99.200341][ T9] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 99.246484][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 99.288872][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 99.319429][ T9] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:6> initialized [ 99.439406][ C0] imon 2-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0) [ 99.821913][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.867031][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.930129][ T5981] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 100.122245][ T5993] program syz.3.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.185489][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 100.195502][ T9] usb 2-1: USB disconnect, device number 6 [ 100.362958][ T187] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.514265][ T187] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 100.523621][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.791868][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.812463][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.871633][ T6004] loop4: detected capacity change from 0 to 7 [ 100.888785][ T6004] Dev loop4: unable to read RDB block 7 [ 100.902965][ T6004] loop4: unable to read partition table [ 100.916570][ T6004] loop4: partition table beyond EOD, truncated [ 100.923426][ T6004] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 101.075932][ T6008] gretap0: entered promiscuous mode [ 101.088945][ T6008] macsec1: entered allmulticast mode [ 101.094406][ T6008] gretap0: entered allmulticast mode [ 101.106602][ T6008] gretap0: left allmulticast mode [ 101.115109][ T6008] gretap0: left promiscuous mode [ 101.140266][ T6006] tipc: Enabled bearer , priority 0 [ 101.167575][ T6005] tipc: Disabling bearer [ 101.333172][ T187] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/input/input7 [ 101.457869][ T187] rc_core: IR keymap rc-rc6-mce not found [ 101.472409][ T187] Registered IR keymap rc-empty [ 101.533581][ T187] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/rc/rc0 [ 101.567666][ T187] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/rc/rc0/input8 [ 101.720607][ T187] hid-picolcd 0003:04D8:C002.0001: No report with id 0x94 found [ 101.786565][ T187] hid-picolcd 0003:04D8:C002.0001: failed to configure display [ 101.982615][ T5681] IPVS: starting estimator thread 0... [ 102.133545][ T6031] IPVS: using max 34 ests per chain, 81600 per kthread [ 102.210848][ T6035] random: crng reseeded on system resumption [ 102.275827][ T6035] Unrecognized hibernate image header format! [ 102.324510][ T6035] PM: hibernation: Image mismatch: architecture specific data [ 102.557177][ T187] usb 1-1: USB disconnect, device number 5 [ 104.314382][ T6027] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 104.817289][ T6056] netlink: 'syz.1.99': attribute type 4 has an invalid length. [ 104.825158][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.942009][ T6062] netlink: 'syz.1.99': attribute type 4 has an invalid length. [ 104.985314][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 105.007294][ T24] usb 1-1: no configurations [ 105.017044][ T24] usb 1-1: can't read configurations, error -22 [ 105.046439][ T6046] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.185054][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.389720][ T6046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.97'. [ 105.402198][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 105.413850][ T24] usb 1-1: no configurations [ 105.423744][ T24] usb 1-1: can't read configurations, error -22 [ 105.442275][ T24] usb usb1-port1: attempt power cycle [ 105.834011][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.873674][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 105.910742][ T24] usb 1-1: no configurations [ 105.923864][ T24] usb 1-1: can't read configurations, error -22 [ 105.957255][ T6074] loop4: detected capacity change from 0 to 7 [ 105.994463][ T6074] Dev loop4: unable to read RDB block 7 [ 106.012561][ T6074] loop4: unable to read partition table [ 106.036300][ T6074] loop4: partition table beyond EOD, truncated [ 106.066403][ T6074] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 106.090710][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.125273][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 106.138242][ T24] usb 1-1: no configurations [ 106.149394][ T24] usb 1-1: can't read configurations, error -22 [ 106.182615][ T24] usb usb1-port1: unable to enumerate USB device [ 106.302953][ T6080] ======================================================= [ 106.302953][ T6080] WARNING: The mand mount option has been deprecated and [ 106.302953][ T6080] and is ignored by this kernel. Remove the mand [ 106.302953][ T6080] option from the mount to silence this warning. [ 106.302953][ T6080] ======================================================= [ 106.560526][ T6084] netlink: 'syz.4.107': attribute type 1 has an invalid length. [ 106.650138][ T6086] syzkaller0: entered promiscuous mode [ 106.656177][ T6086] syzkaller0: entered allmulticast mode [ 106.903405][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.963009][ T6096] Cannot find add_set index 0 as target [ 107.003454][ T5681] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.102968][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 107.115178][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.138918][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.161328][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.184721][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 107.199863][ T5681] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.212905][ T24] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 107.221047][ T5681] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 107.232124][ T24] usb 2-1: Product: syz [ 107.238736][ T5681] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 107.254448][ T24] usb 2-1: config 0 descriptor?? [ 107.280180][ T5681] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 107.302439][ T5681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.516196][ T6098] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.649910][ T6091] input: syz1 as /devices/virtual/input/input9 [ 107.738426][ T24] hid-generic 0003:045E:10DA.0002: ignoring exceeding usage max [ 107.788415][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 107.835430][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 107.878452][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 107.921014][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 107.960849][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 107.998846][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 108.021542][ T6104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.031144][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 108.060287][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 108.074523][ T6091] netlink: 'syz.4.111': attribute type 4 has an invalid length. [ 108.089317][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 108.105987][ T6091] netlink: 152 bytes leftover after parsing attributes in process `syz.4.111'. [ 108.122422][ T24] hid-generic 0003:045E:10DA.0002: unknown main item tag 0x0 [ 108.147491][ T24] hid-generic 0003:045E:10DA.0002: unbalanced collection at end of report description [ 108.171475][ T6091] .`: renamed from bond0 (while UP) [ 108.181636][ T24] hid-generic 0003:045E:10DA.0002: probe with driver hid-generic failed with error -22 [ 108.232208][ T24] usb 2-1: USB disconnect, device number 7 [ 108.660121][ T6098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.114'. [ 109.086746][ T5681] cxacru_cm: 41 callbacks suppressed [ 109.086766][ T5681] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 109.118183][ T5681] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 109.132595][ T5681] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 109.215312][ T5681] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 109.267230][ T5681] usb 5-1: USB disconnect, device number 3 [ 109.471760][ T6135] fuse: Bad value for 'fd' [ 109.524400][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 109.608338][ T6140] xt_nfacct: accounting object `syz0' does not exist [ 109.865611][ T6146] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 109.906401][ T6146] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 109.953938][ T6148] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.023594][ T6149] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.091886][ T29] audit: type=1326 audit(1786221501.020:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.4.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fe26d99e0d9 code=0x0 [ 110.262927][ T5681] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 110.431693][ T5681] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 110.460478][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.474271][ T5681] usb 1-1: Product: syz [ 110.479537][ T5681] usb 1-1: Manufacturer: syz [ 110.486645][ T5681] usb 1-1: SerialNumber: syz [ 110.507394][ T5681] usb 1-1: config 0 descriptor?? [ 110.571256][ T6169] mmap: syz.1.134 (6169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.734407][ T6175] capability: warning: `syz.1.136' uses 32-bit capabilities (legacy support in use) [ 110.834654][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 110.874096][ T6180] netlink: 84 bytes leftover after parsing attributes in process `syz.1.136'. [ 110.917755][ T6182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.008450][ T6150] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.097004][ T6150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.125295][ T5681] usb 1-1: Firmware version (0.0) predates our first public release. [ 111.140397][ T5681] usb 1-1: Please update to version 0.2 or newer [ 111.214154][ T5681] usb 1-1: USB disconnect, device number 10 [ 111.366629][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 111.720040][ T6213] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 111.726789][ T6213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.782194][ T6213] vhci_hcd vhci_hcd.0: Device attached [ 111.890551][ T6223] fuse: Bad value for 'user_id' [ 111.896360][ T6223] fuse: Bad value for 'user_id' [ 112.023011][ T5706] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.033963][ T5681] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 112.144830][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 112.195768][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 112.215641][ T6214] usb 35-1: recv xbuf, 0 [ 112.231383][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.238924][ T1020] vhci_hcd vhci_hcd.1: stop threads [ 112.255582][ T1020] vhci_hcd vhci_hcd.1: release socket [ 112.256580][ T5706] usb 2-1: no configurations [ 112.267789][ T1020] vhci_hcd vhci_hcd.1: disconnect device [ 112.282293][ T5706] usb 2-1: can't read configurations, error -22 [ 112.317323][ T5681] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 112.364373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.542906][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 112.565399][ T6249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.666169][ T6253] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 112.677800][ T6253] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 112.714158][ T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.07 [ 112.724988][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.735827][ T24] usb 1-1: config 0 descriptor?? [ 113.177189][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 113.297804][ T6281] random: crng reseeded on system resumption [ 113.340966][ T5272] 8021q: adding VLAN 0 to HW filter on device dev0 [ 113.550711][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 114.183870][ T886] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.360846][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.171'. [ 114.374855][ T886] usb 4-1: Using ep0 maxpacket: 16 [ 114.418624][ T886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.439442][ T886] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 114.451872][ T6304] fuse: Bad value for 'fd' [ 114.474189][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 114.502086][ T886] usb 4-1: config 9 has no interface number 0 [ 114.529715][ T886] usb 4-1: config 9 interface 57 has no altsetting 0 [ 114.548193][ T886] usb 4-1: string descriptor 0 read error: -22 [ 114.560369][ T886] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 114.607514][ T886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.974710][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 115.408402][ T886] video4linux radio48: keene_cmd_main failed (-110) [ 115.436799][ T886] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 116.089939][ T24] usb 1-1: Cannot set autoneg [ 116.108020][ T24] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 116.175878][ T6330] CIFS: VFS: UNC: path must begin with // or \\ [ 116.176643][ T24] usb 1-1: USB disconnect, device number 11 [ 116.193980][ T6330] CIFS: VFS: Malformed UNC in devname [ 116.255822][ T6335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.280600][ T6335] fuse: Bad value for 'fd' [ 116.286644][ T6335] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20004 [ 116.340689][ T6340] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.588931][ T886] usb 4-1: USB disconnect, device number 2 [ 116.604971][ T6346] random: crng reseeded on system resumption [ 116.942883][ T5615] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.065006][ T886] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.104788][ T5615] usb 3-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 117.115364][ T5615] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.128766][ T5615] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 117.138366][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.147421][ T5615] usb 3-1: Product: syz [ 117.152110][ T5615] usb 3-1: Manufacturer: syz [ 117.167299][ T5615] usb 3-1: SerialNumber: syz [ 117.237035][ T886] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.263005][ T886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.301068][ T886] usb 4-1: config 0 descriptor?? [ 117.320797][ T886] cp210x 4-1:0.0: cp210x converter detected [ 117.385495][ T6366] netlink: 'syz.4.188': attribute type 4 has an invalid length. [ 117.419677][ T5615] usb 3-1: 0:1 : does not exist [ 117.432284][ T5615] usb 3-1: unit 4 not found! [ 117.439838][ T6368] netlink: 'syz.4.188': attribute type 4 has an invalid length. [ 117.447676][ T5615] usb 3-1: unit 51 not found! [ 117.516678][ T886] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 117.542100][ T5615] usb 3-1: USB disconnect, device number 7 [ 117.548580][ T886] cp210x 4-1:0.0: querying part number failed [ 117.606706][ T886] usb 4-1: cp210x converter now attached to ttyUSB0 [ 117.617230][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.076839][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 118.154964][ T6379] netlink: 'syz.1.192': attribute type 12 has an invalid length. [ 118.586032][ T6396] openvswitch: netlink: Key type 30 is not supported [ 118.717381][ T6396] loop5: detected capacity change from 0 to 7 [ 118.740757][ T5610] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.761532][ T6396] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.780623][ T6399] xt_nfacct: accounting object `syz0' does not exist [ 118.796097][ T5610] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.808456][ T6396] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.830388][ T6400] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.892710][ T5610] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.903170][ T5706] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 118.905856][ T5610] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.935307][ T5610] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.945179][ T6396] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.966947][ T5610] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.977836][ T6396] ldm_validate_partition_table(): Disk read failed. [ 118.994901][ T6396] Dev loop5: unable to read RDB block 0 [ 119.013017][ T6396] loop5: unable to read partition table [ 119.029159][ T6396] loop5: partition table beyond EOD, truncated [ 119.050791][ T6396] loop_reread_partitions: partition scan of loop5 (Sj̳P=?}X 5`ր5) failed (rc=-5) [ 119.108162][ T5706] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 119.136893][ T5706] usb 1-1: config 0 has no interface number 0 [ 119.155893][ T5706] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 119.178434][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.201037][ T5706] usb 1-1: Product: syz [ 119.219558][ T5706] usb 1-1: Manufacturer: syz [ 119.239084][ T5706] usb 1-1: SerialNumber: syz [ 119.264470][ T5706] usb 1-1: config 0 descriptor?? [ 119.802537][ T886] usb 4-1: USB disconnect, device number 3 [ 119.837120][ T6412] netlink: 'syz.2.206': attribute type 6 has an invalid length. [ 119.848279][ T886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.878251][ T886] cp210x 4-1:0.0: device disconnected [ 119.884263][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 119.897027][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.934103][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.962664][ T5706] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 120.005575][ T5706] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 120.030952][ T5706] asix 1-1:0.251: probe with driver asix failed with error -5 [ 120.076679][ T5706] usb 1-1: USB disconnect, device number 12 [ 120.331037][ T6428] syzkaller0: entered promiscuous mode [ 120.381626][ T6428] syzkaller0: entered allmulticast mode [ 120.401978][ T6437] tipc: Enabled bearer , priority 0 [ 120.432763][ T6427] tipc: Resetting bearer [ 120.552060][ T6427] tipc: Disabling bearer [ 120.629289][ T6445] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 120.680979][ T6439] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 120.838100][ T6448] loop4: detected capacity change from 0 to 7 [ 120.868195][ T6448] Dev loop4: unable to read RDB block 7 [ 120.902935][ T6448] loop4: AHDI p1 p2 p3 p4 [ 120.921088][ T6448] loop4: partition table partially beyond EOD, truncated [ 120.951426][ T6448] loop4: p1 start 1601398130 is beyond EOD, truncated [ 121.002191][ T6448] loop4: p2 start 1702059890 is beyond EOD, truncated [ 121.045598][ T6448] loop4: p3 size 150995200 extends beyond EOD, truncated [ 121.236476][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 121.417787][ T6430] fuse: Unknown parameter 'eroup_id' [ 121.597926][ T6471] binder: 6466:6471 ioctl 4048587b 200000000a80 returned -22 [ 121.709296][ T6477] binder: 6466:6477 ioctl c0306201 0 returned -14 [ 123.007634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 123.039857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.055254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.116583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 123.215308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 124.996504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 125.037012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 125.059484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 125.074889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 125.097772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 134.108684][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.347161][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.432821][ C0] sched: DL replenish lagged too much [ 145.644702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.409658][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.422923][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.766660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.822810][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 226.829800][ C1] rcu: (detected by 1, t=10502 jiffies, g=20965, q=2575 ncpus=2) [ 226.837603][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 6297 (4294959799-4294953502), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 226.850901][ C1] rcu: rcu_preempt kthread starved for 6298 jiffies! g20965 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 226.861999][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 226.871984][ C1] rcu: RCU grace-period kthread stack dump: [ 226.877901][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 226.891403][ C1] Call Trace: [ 226.894694][ C1] [ 226.897637][ C1] __schedule+0x17d9/0x56c0 [ 226.902611][ C1] ? __pfx___schedule+0x10/0x10 [ 226.907481][ C1] ? schedule+0x90/0x2b0 [ 226.911763][ C1] schedule+0x164/0x2b0 [ 226.915916][ C1] schedule_timeout+0x152/0x2c0 [ 226.920776][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 226.926159][ C1] ? __pfx_process_timeout+0x10/0x10 [ 226.931466][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 226.937270][ C1] ? prepare_to_swait_event+0x322/0x350 [ 226.942838][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 226.947709][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 226.953872][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 226.959166][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 226.964376][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 226.970185][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 226.974769][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 226.979980][ C1] ? __kthread_parkme+0x71/0x1f0 [ 226.984933][ C1] ? __kthread_parkme+0x196/0x1f0 [ 226.989969][ C1] kthread+0x388/0x470 [ 226.994036][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 226.999242][ C1] ? __pfx_kthread+0x10/0x10 [ 227.003848][ C1] ret_from_fork+0x514/0xb70 [ 227.008447][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 227.013553][ C1] ? __switch_to+0xc89/0x1420 [ 227.018240][ C1] ? __pfx_kthread+0x10/0x10 [ 227.022839][ C1] ret_from_fork_asm+0x1a/0x30 [ 227.027652][ C1] [ 227.030675][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 227.036987][ C1] Sending NMI from CPU 1 to CPUs 0: [ 227.042224][ C0] NMI backtrace for cpu 0 [ 227.042243][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 227.042267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.042275][ C0] RIP: 0010:unwind_get_return_address+0x4d/0x90 [ 227.042305][ C0] Code: c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 1b 1d bd 00 48 8b 3b e8 e3 e2 18 00 <85> c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 00 1d bd 00 48 8b 03 [ 227.042316][ C0] RSP: 0000:ffffc90000006e48 EFLAGS: 00000202 [ 227.042330][ C0] RAX: 0000000000000001 RBX: ffffc90000006eb0 RCX: 0000000080000100 [ 227.042340][ C0] RDX: 0000000000000001 RSI: ffffffff8e4ad94a RDI: ffffffff89987d57 [ 227.042350][ C0] RBP: ffffc90000006ef0 R08: ffffc90000007288 R09: 0000000000000000 [ 227.042360][ C0] R10: ffffc90000006eb8 R11: fffff52000000dd9 R12: ffffffff8e88ef40 [ 227.042371][ C0] R13: 00000000ffffffff R14: dffffc0000000000 R15: 1ffff92000000dd6 [ 227.042381][ C0] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 227.042393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.042403][ C0] CR2: 00007f05529fe9d0 CR3: 000000000e946000 CR4: 00000000003526f0 [ 227.042416][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 227.042425][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 227.042435][ C0] Call Trace: [ 227.042440][ C0] [ 227.042446][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 227.042465][ C0] arch_stack_walk+0xfb/0x150 [ 227.042496][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 227.042519][ C0] stack_trace_save+0xa9/0x100 [ 227.042535][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 227.042551][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 227.042568][ C0] kasan_save_track+0x3e/0x80 [ 227.042585][ C0] ? kasan_save_track+0x3e/0x80 [ 227.042600][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 227.042616][ C0] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 227.042656][ C0] __kasan_slab_alloc+0x6c/0x80 [ 227.042673][ C0] ? kmem_cache_alloc_node_noprof+0x181/0x610 [ 227.042690][ C0] kmem_cache_alloc_node_noprof+0x355/0x610 [ 227.042705][ C0] ? local_lock_release+0x9c/0x160 [ 227.042725][ C0] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 227.042741][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 227.042760][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 227.042785][ C0] __alloc_skb+0x1d7/0x7a0 [ 227.042806][ C0] synproxy_send_client_synack+0x175/0xde0 [ 227.042827][ C0] ? lock_acquire+0x106/0x350 [ 227.042845][ C0] ? synproxy_pernet+0x45/0x270 [ 227.042867][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 227.042885][ C0] ? nft_xfrm_get_init+0x320/0x430 [ 227.042903][ C0] ? synproxy_pernet+0x45/0x270 [ 227.042925][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 227.042947][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 227.042967][ C0] ? nf_ip_checksum+0x13c/0x510 [ 227.042989][ C0] nft_synproxy_do_eval+0x335/0x550 [ 227.043009][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 227.043029][ C0] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 227.043049][ C0] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 227.043073][ C0] nft_do_chain+0x48d/0x1b10 [ 227.043099][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 227.043122][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 227.043152][ C0] nft_do_chain_inet+0x360/0x4b0 [ 227.043173][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 227.043192][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 227.043212][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 227.043230][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 227.043249][ C0] nf_hook_slow+0xc5/0x220 [ 227.043269][ C0] NF_HOOK+0x21f/0x3c0 [ 227.043289][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 227.043307][ C0] ? NF_HOOK+0x9e/0x3c0 [ 227.043325][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 227.043343][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 227.043365][ C0] ? ip_local_deliver+0x113/0x190 [ 227.043385][ C0] NF_HOOK+0x336/0x3c0 [ 227.043404][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 227.043421][ C0] ? NF_HOOK+0x9e/0x3c0 [ 227.043439][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 227.043458][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 227.043484][ C0] ? ip_rcv_core+0x88d/0xd50 [ 227.043504][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 227.043521][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 227.043539][ C0] process_backlog+0xa34/0x1860 [ 227.043562][ C0] ? process_backlog+0x3c3/0x1860 [ 227.043588][ C0] __napi_poll+0xaa/0x330 [ 227.043607][ C0] net_rx_action+0x61d/0xf50 [ 227.043632][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 227.043666][ C0] handle_softirqs+0x225/0x840 [ 227.043683][ C0] ? __irq_exit_rcu+0xca/0x220 [ 227.043700][ C0] __irq_exit_rcu+0xca/0x220 [ 227.043715][ C0] irq_exit_rcu+0x9/0x30 [ 227.043728][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 227.043747][ C0] [ 227.043751][ C0] [ 227.043757][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.043772][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 227.043790][ C0] Code: bb 7e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 be 18 00 fb f4 4c 07 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 227.043801][ C0] RSP: 0000:ffffffff8e807de0 EFLAGS: 00000246 [ 227.043812][ C0] RAX: 000000000109d1c9 RBX: ffffffff819b433c RCX: 0000000080000001 [ 227.043822][ C0] RDX: 0000000000000001 RSI: ffffffff8e228932 RDI: ffffffff8c4bbe80 [ 227.043832][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 227.043843][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 227.043852][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 227.043865][ C0] ? do_idle+0x1cc/0x540 [ 227.043886][ C0] default_idle+0x9/0x20 [ 227.043905][ C0] default_idle_call+0x72/0xb0 [ 227.043923][ C0] do_idle+0x1cc/0x540 [ 227.043941][ C0] ? __pfx_do_idle+0x10/0x10 [ 227.043961][ C0] cpu_startup_entry+0x43/0x60 [ 227.043978][ C0] rest_init+0x2de/0x300 [ 227.043991][ C0] start_kernel+0x392/0x3e0 [ 227.044010][ C0] x86_64_start_reservations+0x24/0x30 [ 227.044030][ C0] x86_64_start_kernel+0x137/0x1b0 [ 227.044049][ C0] common_startup_64+0x13e/0x157 [ 227.044072][ C0]