last executing test programs: 20.872649133s ago: executing program 0 (id=277): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x0, 0x0) (fail_nth: 1) 20.266052813s ago: executing program 0 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) 19.416624001s ago: executing program 0 (id=284): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000029c0)={0x4, 0x0}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a00)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) pipe2(&(0x7f0000000140), 0x180) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) close(0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000300)=0x0) sendmmsg$nfc_llcp(r6, &(0x7f0000002980)=[{&(0x7f0000000340)={0x27, r7, 0x1, 0x1, 0xc, 0x6, "56d2116289135d15152a26846d0d08719a7bc997b8201d5125594a1598de0a66522cc5c8d9693fd4a9bce57d0fc7d8a2c0a86eebf187a35de2ed44f7416dc6", 0x37}, 0x60, &(0x7f0000002840)=[{&(0x7f00000003c0)="561e35b8d7ac1ebe2476fe77781fff5eb5b9c362a492de1e32f0b47d5fe36e4d79adb8ac5dd9f83557b8c48133a180cdfc95fdfe165bf0567e1b8072ffb3c40fce808fc3f2cec576d8880ce3d0baaca2080219a9efc4154315d559b1680b464baf5b67ac7ec4ca782dbdc3cf799bee9bf33023c5e9422568719a7f647db7ea227884f62cc7334bd3e3bd488454747620286b13f7653a72d6114e5b1f6982d1446a90b209c55fe1f2f73dff9f4356823174936f7cf205", 0xb6}, {0xffffffffffffffff}, {&(0x7f00000024c0)="988d7306f0ea5f9921f99db54cb77f44f61121fce67f0476422250a0863dbdfb32b4004a2fc4e2fce756d45566e4d44b0e07232d0b01c460b0f6684824745165033345b744a70b87214c738f84244c0a5cf350e12def1969093e86d3676d7a68294cafa892aa7bbd62d401d7ecfc9ca680ed8426b274b684f18d5b75ab40ef18d40ea6ffd9d5c3d0de30345b8aa84ac653397e71dc4bcc31cd29b854528a85219025792ed4d55b3a", 0xa8}, {&(0x7f0000002580)="6631d8c9a047a543156eae91ab10fe9255dd581c744b6fc981c6dcba7c5e64961d5d5c76790d3748fa9b294942b95e107c3ad919522a5eef8801d9444750fa339da4c714c7f1f3118e05f38904ee0c09b0b8cc70b66aecd14e85b491956d3ef7056bc343146c9e28ba4482a15bf88c8398293ccb7a", 0x75}, {&(0x7f0000002600)="302cef3c074c1df3770d6619cadca416b656d11f921e38", 0x17}, {&(0x7f0000000800)="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", 0x1d1}, {&(0x7f0000002740)="567ce78550ced34137599702336c868fca895cc138345f765b20e78428587d192f1829b6d1fd2034702a54017b5472dd765935937121a29b384457921c25d233effd202ba571896deff90c28a049c21b5e3f5af9584f86c5a1cdd4a42ab09c1d8d127100e30e0983a242cf913474c5dc727835fc35a901e9353c4f57387e0a76dd7f528f37fca6d79d23e2648ac38f4eafe4f231b2494a58b7825f4bfb93dfbbbc8f34c70d348450c60545a058cb6360a2089caff1ac4fecc96c422cb9e9c815df95e5403123f733d9a2954e8737eddd7611dae475229c13", 0xd8}], 0x7, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x88, 0x20008090}], 0x1, 0x20000010) read$msr(0xffffffffffffffff, 0x0, 0x0) 17.223729907s ago: executing program 0 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0xe1}}}}]}, 0x38}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x98, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x7, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x8, 0x4, 0x0, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1000, 0x9, 0xf9, "95eab9"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x9, 0x9, {0x7, 0x25, 0x1, 0x80, 0x80, 0xc9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x4, "b1f84c52"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x2, 0x9, 0x22a}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xe, 0x0, 0x81, 0x20, 0x38}, 0x44, &(0x7f0000000140)={0x5, 0xf, 0x44, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x2b, 0x10, 0x4, "2dd49652ea19e18c5c1f81e9136c4266d54606a60dba31bf64956fd59aac427678b0ea9aa4c00ba9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x2, 0xe5, 0x6, 0x6}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x429}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x15, 0x5, 0x0) connect$unix(r3, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r3, 0x0, &(0x7f0000000240)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x2f) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)={0x40, 0x3, 0x3b, "bce321feea16e71543d32d20b31685f51f6ba73b665ce2d9251e54f17a3e34a98ccafe790b400ac2988436609cfcf123b935391974e438a5a16820"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.622525886s ago: executing program 3 (id=296): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x8004587d, &(0x7f0000000180)={@id={0x2, 0x0, @d}}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000100), 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 11.923378742s ago: executing program 3 (id=300): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28}, {0x6}]}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80) r3 = memfd_create(&(0x7f0000000040)='(,,&\x00', 0x7) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001400), 0x40801, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) sendmmsg$inet(r0, &(0x7f00000077c0), 0x400002c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r5, 0x1, 0x28, 0x0, &(0x7f00000012c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x32, r7, 0x8, &(0x7f0000000100), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) mremap(&(0x7f00000ae000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r9, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x18, 0x5, &(0x7f00000024c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) 11.707137992s ago: executing program 1 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000010140)={0x8, 0xc00000, 0x1, 0xfff, 0x95, 0x163f}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001c40)={0x6e, 0x7d, 0x1, {{0x0, 0x57, 0x8001, 0x0, {0x10, 0x4, 0x1}, 0x4000000, 0x82b00, 0x7, 0xfffffffffffffffd, 0xd, '/dev/snd/seq\x00', 0x5, 'l2tp\x00', 0x3, '@/,', 0xf, '/dev/cpu/#/msr\x00'}, 0x2, '[!'}}, 0x6e) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000000000000000c968000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$inet(r2, &(0x7f0000001b40)={&(0x7f0000001840)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001900)="a135171809baec603a0a31567cd72f3d1157e6bbd7705a044a7ebf2b722b81ea8faa9e9031e3cc0e598567239d7ff2cb322a65a99161ec82221f6fc636dddd59c6cd643f268514d6525498fdcebbae975f3774428b945e14a04c7c1b4f197115ec6823e9d3bd353f20479107ec40043113de822c3545f442e32dc814903a1e5d2e0e099912dea52e21da3327b4cf519dbb7d3bf02c34af66bfba27e8a8c8d985ee5376509afa98b7f9e88f3a7bd787d3d0d25dc5820597add3f1b93b7892c054fc0d5510d69cd9e1ddf3e9a8e3397d8330382328854536d3ff875200ed53325e131d823a797793b431b69e6695418a98d5e1f21b909b5d2ebac8c5066d", 0xfd}, {&(0x7f0000001a00)="fadae2bbab9566df4bd81691324d11e40d7fb53055f0a8d97ab1eeba84e5b0d09f7be9644e1d1aa7c05aa8b27826bcb394113a9e24ca6b6dc14be2686e36598e4b1511d7cbe54d8e09d1eb9106ad8f18c51e23c02987c232830f793eaf84d7115d7221", 0x63}, {&(0x7f0000001a80)="6b260b840b3b7040c99ce8beb8bfee3577d4e36b34d8e4060f3b7cb1e0db9af86bcff006fd06ba32d22f48811c588faec9b922c10686f46bc00b3417c6fb65605272003af620bf3416d253be704337cf51ab1772f33a81d345f8fbcf32689ee12fee16f0b8b265b4d34fa2d782458d20ad29098b3de52d2df08756ed930e230ddb49fe6ac2e05108ccfa8e9871d8e676d6d7d3750695c2c744552c514819fc343d5223f773831cfc5ec1356765cb3f987c58ff882707c530f7385ecf3068b30f", 0xc0}], 0x3}, 0x4000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xb0c80) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, 0x0) r7 = socket(0x10, 0x2, 0x0) io_setup(0x1, &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000448000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x42) r10 = openat$vsock(0xffffffffffffff9c, 0x0, 0x34d00, 0x0) io_submit(r8, 0x6, &(0x7f0000001800)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x4, r7, &(0x7f00000002c0)="a6fc59b128aa08ff2a950ae0957600ee86ec3d47cfe08326c4be725c0399ec3162e33cd47ec5f34f623431dece5244e811f4619e474c314341c2df19f7a42b4514aa0d0fced45d", 0x47, 0x3, 0x0, 0x6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7, r7, &(0x7f0000000380)="e4c6f9c8655ee93b2d4cf66325f13726b5de4cb9dd8a0a499bcd71719a36411003d2550ec4c2cc27bfdb22d426e48c83b1f7fa84e393a563f4130a5de17382fc0d7a4146cab87cc6f5d8ee1d88c776890ae4391843a6e733bf164f20f7b8fc41229a1237eb218a7944c02ff6e9cefa29bbda5221fd8875ca6ab76235404f3c1e43ccf0ebd4a42368ff819a0691a9ad53db366ac538f71b", 0x97, 0x9}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x4, r9, &(0x7f00000004c0)="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", 0x1000, 0x3, 0x0, 0x1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x5, 0x8, r7, &(0x7f0000001b80)="f31b0b8e087ec0fd43c1a2669e37b82dbd7aec18361e6e7ecedf41d4e9e08288e2a0132099889d6f5518b6f04f0ac834318fe295bcd9a56d592dd53a1ae3b9d65ff6c941f521ed7fbbbe9def28e4108a0b796ad2cd5305726733e22e006f8b4c366c8cf8495ad1861dccd3f135ba971bc57b332d0a34d4ba31f250ab314edc372c7b15e8fd3db566f615dfc1e968432df869bac4b6a5cab07e66f12a5847864feaa3ba44", 0xa4, 0x9, 0x0, 0x3, r10}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000001640)="24559f8ec68cebd7f632fe1dfe40feb56ea5e1c276031b70c54907b09a0fdd7f183ce7eded1a76e3882d68d9a16169917e9346a94d", 0x35, 0x0, 0x0, 0x2}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x19d0, r5, &(0x7f00000016c0)="25a6b2b51c62c613e9831e34d7c8f6e4bfbf54f0af2ad3d2509c0562b99ea34bec47dd19cf374a9e02586ec225dbad23cf3ea6a19810ea530d4ef69beb14f3a02b52cdb6f0b9965b49c074341ec3997a3bf9d78c4ef9cdd01ccce63457135f780aaa47586e7128fe5f0bd95f2956691dc7f8293c418e4edb75ef7c49115027ad4afc8449b60ad3bc5bebfa8896122a6a3b8d511a79c72f845356acfc5f441e444ff65c3103cb947c6726e1a3a2f5f43daabe168f2540d26c8be984ed", 0xbc, 0x9}]) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000fd6e08000a0000000000060002000100000014001f000000000006"], 0x5c}, 0x1, 0x620b}, 0x0) 11.275609606s ago: executing program 3 (id=304): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x408000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, 0xffffffffffffffff, 0xa46e9000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x168, 0x0, 0x148, 0x168, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'erspan0\x00', 'wg2\x00', {}, {}, 0x6}, 0xffffe000, 0x100, 0x168, 0x0, {0x0, 0x1c030000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1\x00', {}, 'veth1_to_bridge\x00', {}, 0x0, 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "ee3a145e71108157c7a58fd52abd150cdc1d3c8bac3dd980a975afbb612f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0xfffc, @empty}}, 0x7, 0x0, 0x0, 0x0, 0x5b3, 0x0, 0x92}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r5, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x9c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="64010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYBLOB="16954ce26659910f8f1207eb86f4ebeb4cf131efd14a0b96b9ea150fb4b8637092f70faf3bbf22be4dadd1f2c4874f4186be9667e670a163ebb8d1239f1e00672dc01c788a426d960513d5ef79e04e46ca5f3e7a40c85c7370c271c110366e9ccbc24880404a339928a5dd31b4b7db200554a7fa8581ce248959e1068820b53e14564137b5c037dc191dfb79d1380772d6b3ac5a", @ANYRES64=r6, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000ac00070000000000000000000000ffffac14143aac1414bb0000000000000000000000004e2201014e230000020020803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0x164}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x800) 10.46599983s ago: executing program 3 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x1) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x84, 0x20) r3 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) mount_setattr(r2, &(0x7f0000000080)='./file0\x00', 0x100, &(0x7f0000000100)={0x2, 0x0, 0xa0000, {r3}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r5, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a000100aa"], 0x48}}, 0x0) 10.426681974s ago: executing program 1 (id=306): r0 = socket(0x10, 0x803, 0x0) r1 = semget$private(0x0, 0x2, 0x388) semtimedop(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/155) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) semop(r1, &(0x7f0000000100)=[{0x0, 0x3, 0x800}, {0x2, 0x5, 0x1000}, {0x1, 0x8, 0x400}, {0x0, 0x5, 0x800}, {0x0, 0xd065, 0x1800}, {0x2, 0x4, 0x800}, {0x0, 0x1, 0x1800}, {0x2, 0x7}, {0x4, 0x4, 0x1000}, {0x3, 0x3}], 0xa) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000b640)="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", 0x2000, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x60}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x60}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 10.288056887s ago: executing program 3 (id=307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.265067641s ago: executing program 0 (id=308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x5, 0x0, 0x6}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x0]}}, 0x0, 0x36, 0x0, 0x0, 0x1000, 0x0, @void, @value}, 0x28) 10.160752151s ago: executing program 1 (id=309): r0 = syz_usb_connect$hid(0x0, 0x2a, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xfffffffffffffe09, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x4, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x6}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x6, 0xc}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001c000000000005000b003d"], 0x3c}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xfb}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc0000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8001}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000ac0)=""/4096) 9.972003546s ago: executing program 0 (id=310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r3}}, 0x30) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0xf}]}}}], 0x18}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001640), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x34, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x80808) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r12) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22fdb911"], 0xfdef) r13 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r13, 0x11e, 0x2, 0x0, &(0x7f0000000040)=0xffffffffffffff84) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 9.080035885s ago: executing program 2 (id=313): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11c, 0x1, 0x0, 0x74efdfe049b861ab) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000000c0)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) getgroups(0x6, &(0x7f00000001c0)=[0xee01, 0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff]) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f00000000c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) write$P9_RSTATu(r2, &(0x7f0000000240)={0x67, 0x7d, 0x2, {{0x0, 0x41, 0x9f7d, 0x3ff, {0x0, 0x1, 0x2}, 0x30010000, 0x5428, 0x7, 0x3ff, 0x0, '', 0x7, '^.}-].\x00', 0x2, '-]', 0x5, '+-#/!'}, 0x11, '/\\.%/(!)!\\\':@($$\\', r3, r4, r7}}, 0x67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_open_procfs(r1, &(0x7f0000000100)='sched\x00') preadv(r10, &(0x7f0000001400), 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000080)='^.}-].\x00', 0x0) 6.936147042s ago: executing program 3 (id=316): syz_emit_ethernet(0x5e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x8000404, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x4008005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'veth1_to_hsr\x00', @random='\x00\a\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000240), 0x85, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 6.935845321s ago: executing program 2 (id=317): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$vcs(0xffffff9c, 0x0, 0x20080, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x80b9, 0x20000006) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file1\x00', 0x280000, 0x61) getdents(r0, &(0x7f0000000140)=""/101, 0x65) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1}) syz_open_dev$usbfs(0x0, 0x77, 0x129301) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$getown(r5, 0x9) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, 0x0, &(0x7f0000001bc0)=0xfffffffffffffdb4) creat(&(0x7f0000000540)='./file0\x00', 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 6.935549018s ago: executing program 1 (id=318): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x1, 0x6, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "34f2"}, {0x5, 0x24, 0x0, 0xe92}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x7fff, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x48, 0x6, 0x5d, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7b, 0x7, 0xfa}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xd, 0x8, 0xdf, 0x10, 0xe2}, 0x16, &(0x7f00000002c0)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x8, 0x7, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x88, &(0x7f0000000480)=@string={0x88, 0x3, "ed949c00cbcfc5adbfa4390ae63328f9c8613c557dfb5ba1567c158659cfea8eff62491fdfb12c2ff1341d72745ade094afe4e58fd9104adca814498d6bd977e2ce78ea977614a4a8415653d3da84e3f70f6e4a5a0bcd732adeef36f2f41083059a5c75b7e44da3fb1c909e320053bef7703e6b1ed48f24351aff43a77a3ddee9f3b8fcee58c"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000240)={0x20, 0x7, 0x3, "3087e8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = inotify_init() r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r1, 0x0, 0xfffffffffffffffe, 0x8001}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_enter(r2, 0x54, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x40, 0xb, 0x3, "d6ed8e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.975238272s ago: executing program 2 (id=321): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2100, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 5.8406825s ago: executing program 4 (id=322): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000029c0)={0x4, 0x0}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a00)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) pipe2(&(0x7f0000000140), 0x180) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syslog(0x1, &(0x7f0000000140)=""/219, 0xdb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000300)=0x0) sendmmsg$nfc_llcp(r6, &(0x7f0000002980)=[{&(0x7f0000000340)={0x27, r7, 0x1, 0x1, 0xc, 0x6, "56d2116289135d15152a26846d0d08719a7bc997b8201d5125594a1598de0a66522cc5c8d9693fd4a9bce57d0fc7d8a2c0a86eebf187a35de2ed44f7416dc6", 0x37}, 0x60, &(0x7f0000002840)=[{&(0x7f00000003c0)="561e35b8d7ac1ebe2476fe77781fff5eb5b9c362a492de1e32f0b47d5fe36e4d79adb8ac5dd9f83557b8c48133a180cdfc95fdfe165bf0567e1b8072ffb3c40fce808fc3f2cec576d8880ce3d0baaca2080219a9efc4154315d559b1680b464baf5b67ac7ec4ca782dbdc3cf799bee9bf33023c5e9422568719a7f647db7ea227884f62cc7334bd3e3bd488454747620286b13f7653a72d6114e5b1f6982d1446a90b209c55fe1f2f73dff9f4356823174936f7cf205", 0xb6}, {0xffffffffffffffff}, {&(0x7f00000024c0)="988d7306f0ea5f9921f99db54cb77f44f61121fce67f0476422250a0863dbdfb32b4004a2fc4e2fce756d45566e4d44b0e07232d0b01c460b0f6684824745165033345b744a70b87214c738f84244c0a5cf350e12def1969093e86d3676d7a68294cafa892aa7bbd62d401d7ecfc9ca680ed8426b274b684f18d5b75ab40ef18d40ea6ffd9d5c3d0de30345b8aa84ac653397e71dc4bcc31cd29b854528a85219025792ed4d55b3a", 0xa8}, {&(0x7f0000002580)="6631d8c9a047a543156eae91ab10fe9255dd581c744b6fc981c6dcba7c5e64961d5d5c76790d3748fa9b294942b95e107c3ad919522a5eef8801d9444750fa339da4c714c7f1f3118e05f38904ee0c09b0b8cc70b66aecd14e85b491956d3ef7056bc343146c9e28ba4482a15bf88c8398293ccb7a", 0x75}, {&(0x7f0000002600)="302cef3c074c1df3770d6619cadca416b656d11f921e38", 0x17}, {&(0x7f0000000800)="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", 0x1d1}, {&(0x7f0000002740)="567ce78550ced34137599702336c868fca895cc138345f765b20e78428587d192f1829b6d1fd2034702a54017b5472dd765935937121a29b384457921c25d233effd202ba571896deff90c28a049c21b5e3f5af9584f86c5a1cdd4a42ab09c1d8d127100e30e0983a242cf913474c5dc727835fc35a901e9353c4f57387e0a76dd7f528f37fca6d79d23e2648ac38f4eafe4f231b2494a58b7825f4bfb93dfbbbc8f34c70d348450c60545a058cb6360a2089caff1ac4fecc96c422cb9e9c815df95e5403123f733d9a2954e8737eddd7611dae475229c13", 0xd8}], 0x7, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x88, 0x20008090}], 0x1, 0x20000010) read$msr(0xffffffffffffffff, 0x0, 0x0) 5.512415193s ago: executing program 2 (id=323): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000086110a400000000001f010000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.372921742s ago: executing program 2 (id=324): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='cq_alloc_error\x00', r3, 0x0, 0x3}, 0x18) (fail_nth: 9) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0xf, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b72", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.894405317s ago: executing program 2 (id=325): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @nfc={0x27, r0, 0x0, 0x4}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x6, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)='bond_slave_1\x00', 0x3, 0x6, 0xd}) r1 = socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00005a5000/0x1000)=nil, 0x1000) munlock(&(0x7f0000c62000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ec4000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ce8000/0x1000)=nil, 0x1000) munlockall() connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) write$binfmt_misc(r2, &(0x7f00000001c0), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0), 0x8) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000340)=0xe, &(0x7f0000000380)=0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000602000008000300b77d6e1d7bb0cf9b4afc518ac6a5c7be1f29026cfbd6dcf4b3295a3bb1c3987e1873b073a2fea977fed52d3bb8985888e9391fb78c6506a92b40ff8ca377935013dde2bd1be4a65682e5054c9a61c11d65b895355de00337244bc54595a89e137e3abdb73c8af00ba08a3b0d5d93c084bc0160916aa05d93706bd33a0d739f9f15f84f7617a99ec77b4abcba2679b4cbf3eb6e04073d4d58d5db16c8776a4215e1284454c292bc39d9ec118a86bdc9168efd07c5fe56afebd7240b9a054b12df625a0ceb93675f6ac5cb723182ed2d4bd2ef9389b45e7c1c8f2a126b1ae5e2e2ec415cbc68755ba482f0e3ac797c85b713c9177603bc46ea874020c7f53ae77a6fce606fd52236be95fb5138197d8cb1c99c2e674f854c7b449a834ac27fcf6cc957c33287588519", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x240488c0}, 0x8000) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r5, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x38}}, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) 3.448283701s ago: executing program 1 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000042, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r1, r1, &(0x7f0000001000), 0xffff) 3.375342085s ago: executing program 4 (id=327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.721470669s ago: executing program 1 (id=328): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x42f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0xd9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xda6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x2}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x1, 0x95, &(0x7f00000001c0)={{0x12, 0x1, 0x603, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0xa, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x2, 0x6, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x3, 0xff, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xc8, 0x0, 0x5, {0x7, 0x25, 0x1, 0x86}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x3, 0x7}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x3, 0x6, 0x2, "0f75c1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x18, 0x3, 0x5, 0xf, {0x7, 0x25, 0x1, 0x0, 0xc, 0xc20}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030006ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.692107251s ago: executing program 4 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 1.578346977s ago: executing program 4 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x2000}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 579.585273ms ago: executing program 4 (id=331): r0 = socket(0x2, 0x3, 0xa) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x80000001, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r5 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000280)) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x8002, '\x00', @p_u16=0x0}}) lseek(0xffffffffffffffff, 0x6, 0x1) sendto$inet(r0, 0x0, 0x0, 0x97, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvfrom$unix(r0, 0x0, 0x0, 0x12122, 0x0, 0x0) 0s ago: executing program 4 (id=332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x003'], 0xf8}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0xa10, 0x3ed, 0x0, 0x0, 0x25dfdbfd, "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", ["", "", "", "", ""]}, 0xa10}}, 0x801) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40100) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x1000, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): .185196][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.209486][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.253508][ T5215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.269246][ T5215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.278636][ T5215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287807][ T5215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.394288][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.410306][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.419591][ T5222] veth0_vlan: entered promiscuous mode [ 57.493337][ T5222] veth1_vlan: entered promiscuous mode [ 57.505537][ T5220] veth0_vlan: entered promiscuous mode [ 57.515674][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.525876][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.586764][ T5226] veth0_vlan: entered promiscuous mode [ 57.609176][ T5220] veth1_vlan: entered promiscuous mode [ 57.609504][ T5221] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.616088][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.643817][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.645001][ T5226] veth1_vlan: entered promiscuous mode [ 57.687139][ T5222] veth0_macvtap: entered promiscuous mode [ 57.708607][ T5222] veth1_macvtap: entered promiscuous mode [ 57.736829][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.744695][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.752010][ T5220] veth0_macvtap: entered promiscuous mode [ 57.754859][ T5220] veth1_macvtap: entered promiscuous mode [ 57.816097][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.829526][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.839215][ T5304] ======================================================= [ 57.839215][ T5304] WARNING: The mand mount option has been deprecated and [ 57.839215][ T5304] and is ignored by this kernel. Remove the mand [ 57.839215][ T5304] option from the mount to silence this warning. [ 57.839215][ T5304] ======================================================= [ 57.840798][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.889633][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.903154][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.917192][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.930072][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.941851][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.953736][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.963970][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.975785][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.995382][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.014711][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.025350][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.035862][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.050190][ T5306] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 58.069547][ T5272] IPVS: starting estimator thread 0... [ 58.085788][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.102073][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.138552][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.163258][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.175056][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.176517][ T5307] IPVS: using max 21 ests per chain, 50400 per kthread [ 58.186198][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.208673][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.226131][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.243078][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.243247][ T5312] FAULT_INJECTION: forcing a failure. [ 58.243247][ T5312] name failslab, interval 1, probability 0, space 0, times 1 [ 58.254576][ T5220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.263665][ T5312] CPU: 1 UID: 0 PID: 5312 Comm: syz.3.7 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 58.278762][ T5220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.282191][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.299716][ T5220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.300894][ T5312] Call Trace: [ 58.300910][ T5312] [ 58.312269][ T5220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.312828][ T5312] dump_stack_lvl+0x241/0x360 [ 58.329176][ T5312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.334403][ T5312] ? __pfx__printk+0x10/0x10 [ 58.339027][ T5312] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 58.344603][ T5312] ? __pfx___might_resched+0x10/0x10 [ 58.349927][ T5312] should_fail_ex+0x3b0/0x4e0 [ 58.354642][ T5312] ? getname_flags+0xb7/0x540 [ 58.359342][ T5312] should_failslab+0xac/0x100 [ 58.364052][ T5312] ? getname_flags+0xb7/0x540 [ 58.368847][ T5312] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 58.374253][ T5312] getname_flags+0xb7/0x540 [ 58.378783][ T5312] user_path_at+0x24/0x60 [ 58.383136][ T5312] __se_sys_mount+0x297/0x3c0 [ 58.387847][ T5312] ? __pfx___se_sys_mount+0x10/0x10 [ 58.393077][ T5312] ? do_syscall_64+0x100/0x230 [ 58.397871][ T5312] ? __x64_sys_mount+0x20/0xc0 [ 58.402665][ T5312] do_syscall_64+0xf3/0x230 [ 58.407194][ T5312] ? clear_bhb_loop+0x35/0x90 [ 58.411912][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.417848][ T5312] RIP: 0033:0x7f5fc8f7dff9 [ 58.422290][ T5312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.441942][ T5312] RSP: 002b:00007f5fc9d74038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.450410][ T5312] RAX: ffffffffffffffda RBX: 00007f5fc9135f80 RCX: 00007f5fc8f7dff9 [ 58.458432][ T5312] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 58.466438][ T5312] RBP: 00007f5fc9d74090 R08: 0000000020000200 R09: 0000000000000000 [ 58.474445][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.482452][ T5312] R13: 0000000000000000 R14: 00007f5fc9135f80 R15: 00007fffd72b8658 [ 58.490485][ T5312] [ 58.509071][ T5226] veth0_macvtap: entered promiscuous mode [ 58.525470][ T5222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.537127][ T5222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.547100][ T5222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.561863][ T5222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.587413][ T5226] veth1_macvtap: entered promiscuous mode [ 58.662776][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.689876][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.711526][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.741870][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.755799][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.776374][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.789160][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.807452][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.825049][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.846515][ T5227] Bluetooth: hci0: command tx timeout [ 58.854599][ T5235] Bluetooth: hci2: command tx timeout [ 58.872846][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.891193][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.901219][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.911789][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.921668][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.932118][ T5235] Bluetooth: hci1: command tx timeout [ 58.932176][ T5235] Bluetooth: hci3: command tx timeout [ 58.932248][ T5235] Bluetooth: hci4: command tx timeout [ 58.937620][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.937635][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.937650][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.938968][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.003136][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.026151][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.068788][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.077934][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.087087][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.096621][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.199905][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.242456][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.315952][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.338017][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.356144][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.483497][ T5274] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.713117][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.977740][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.985746][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.109930][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.147448][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.172320][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.180704][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.256412][ T5274] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.289675][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.348154][ T5274] usb 4-1: config 0 descriptor?? [ 60.417420][ T5345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 60.421231][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 60.527638][ T5269] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.698651][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.715428][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.729896][ T5355] Process accounting resumed [ 60.741046][ T5269] usb 3-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 60.756977][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.787246][ T5357] openvswitch: netlink: Actions may not be safe on all matching packets [ 60.796918][ T5269] usb 3-1: config 0 descriptor?? [ 60.930473][ T5227] Bluetooth: hci2: command tx timeout [ 60.936839][ T5227] Bluetooth: hci0: command tx timeout [ 60.986640][ T5270] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 61.006883][ T5235] Bluetooth: hci3: command tx timeout [ 61.012608][ T5235] Bluetooth: hci1: command tx timeout [ 61.018540][ T5227] Bluetooth: hci4: command tx timeout [ 61.119621][ T5329] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.11'. [ 61.177878][ T5270] usb 1-1: device descriptor read/64, error -71 [ 61.209829][ T5328] 9pnet_fd: Insufficient options for proto=fd [ 61.272666][ T5269] wacom 0003:056A:00BB.0001: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 61.335849][ T5269] wacom 0003:056A:00BB.0001: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.2-1/input0 [ 61.390856][ T5269] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BB.0001/input/input5 [ 61.417340][ T5270] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 61.568325][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.616502][ T5270] usb 1-1: device descriptor read/64, error -71 [ 61.628226][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.641296][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.662618][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.737781][ T5270] usb usb1-port1: attempt power cycle [ 62.076692][ T5270] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 62.118271][ T5270] usb 1-1: device descriptor read/8, error -71 [ 62.276507][ T5274] usbhid 4-1:0.0: can't add hid device: -71 [ 62.288882][ T5274] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 62.322386][ T5274] usb 4-1: USB disconnect, device number 2 [ 62.377118][ T5270] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 62.408032][ T5270] usb 1-1: device descriptor read/8, error -71 [ 62.538237][ T5270] usb usb1-port1: unable to enumerate USB device [ 62.828290][ T5382] netlink: 168 bytes leftover after parsing attributes in process `syz.2.23'. [ 62.905740][ T5274] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 62.984640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.106079][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 63.373733][ T9] usb 3-1: USB disconnect, device number 2 [ 63.406388][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.493324][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.513277][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.568458][ T5274] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 63.629460][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.749326][ T5274] usb 4-1: config 0 descriptor?? [ 63.874829][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 63.921519][ T5397] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.036562][ T5342] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.167277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.196217][ T5274] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0 [ 64.206792][ T5403] netlink: 48 bytes leftover after parsing attributes in process `syz.4.29'. [ 64.231554][ T5342] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 64.245867][ T5274] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0 [ 64.250297][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.274898][ T5274] koneplus 0003:1E7D:2E22.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 64.317807][ T5412] FAULT_INJECTION: forcing a failure. [ 64.317807][ T5412] name failslab, interval 1, probability 0, space 0, times 0 [ 64.358530][ T5342] usb 2-1: config 0 descriptor?? [ 64.367198][ T5412] CPU: 0 UID: 0 PID: 5412 Comm: syz.0.30 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 64.377744][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.387808][ T5412] Call Trace: [ 64.391085][ T5412] [ 64.394012][ T5412] dump_stack_lvl+0x241/0x360 [ 64.398703][ T5412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.403919][ T5412] ? __pfx__printk+0x10/0x10 [ 64.408512][ T5412] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 64.414492][ T5412] ? __pfx___might_resched+0x10/0x10 [ 64.419784][ T5412] should_fail_ex+0x3b0/0x4e0 [ 64.424486][ T5412] should_failslab+0xac/0x100 [ 64.429157][ T5412] ? __alloc_skb+0x1c3/0x440 [ 64.433734][ T5412] kmem_cache_alloc_node_noprof+0x71/0x320 [ 64.439537][ T5412] __alloc_skb+0x1c3/0x440 [ 64.443962][ T5412] ? __pfx___alloc_skb+0x10/0x10 [ 64.448886][ T5412] ? netlink_autobind+0xd6/0x2f0 [ 64.453826][ T5412] ? netlink_autobind+0x2b0/0x2f0 [ 64.458879][ T5412] netlink_sendmsg+0x638/0xcb0 [ 64.463638][ T5412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.468930][ T5412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.474222][ T5412] __sock_sendmsg+0x221/0x270 [ 64.478904][ T5412] ____sys_sendmsg+0x52a/0x7e0 [ 64.483669][ T5412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.488975][ T5412] __sys_sendmsg+0x292/0x380 [ 64.493567][ T5412] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.498676][ T5412] ? __pfx_vfs_write+0x10/0x10 [ 64.503523][ T5412] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 64.509857][ T5412] ? do_syscall_64+0x100/0x230 [ 64.514611][ T5412] ? do_syscall_64+0xb6/0x230 [ 64.519278][ T5412] do_syscall_64+0xf3/0x230 [ 64.523778][ T5412] ? clear_bhb_loop+0x35/0x90 [ 64.528446][ T5412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.534346][ T5412] RIP: 0033:0x7fc87e97dff9 [ 64.538748][ T5412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.558341][ T5412] RSP: 002b:00007fc87f75b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.566756][ T5412] RAX: ffffffffffffffda RBX: 00007fc87eb36058 RCX: 00007fc87e97dff9 [ 64.574737][ T5412] RDX: 0000000000004000 RSI: 0000000020000200 RDI: 0000000000000006 [ 64.583131][ T5412] RBP: 00007fc87f75b090 R08: 0000000000000000 R09: 0000000000000000 [ 64.591088][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.599044][ T5412] R13: 0000000000000000 R14: 00007fc87eb36058 R15: 00007ffd9815cd08 [ 64.607022][ T5412] [ 64.631146][ T5342] cp210x 2-1:0.0: cp210x converter detected [ 64.649987][ T5274] koneplus 0003:1E7D:2E22.0002: couldn't init struct koneplus_device [ 64.716453][ T5274] koneplus 0003:1E7D:2E22.0002: couldn't install mouse [ 64.765069][ T5274] koneplus 0003:1E7D:2E22.0002: probe with driver koneplus failed with error -71 [ 64.774632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.786580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 64.794796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 64.805692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.814105][ T5274] usb 4-1: USB disconnect, device number 3 [ 65.828461][ T5404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.834572][ T5404] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 66.006849][ T5421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.090976][ T5421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.114152][ T5404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.131864][ T5404] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 66.179000][ T5404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.185028][ T5404] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 66.257655][ T5404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 66.264770][ T5404] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 66.346617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.348365][ T5404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.366514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.374883][ T5404] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 66.466096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 66.524616][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.568427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 66.764611][ T5342] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 66.836203][ T5342] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 66.974211][ T5342] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 67.037000][ T5440] bond0: (slave rose0): Enslaving as an active interface with an up link [ 67.071548][ T5342] usb 2-1: cp210x converter now attached to ttyUSB0 [ 67.098375][ T5442] No such timeout policy "syz0" [ 67.128034][ T5342] usb 2-1: USB disconnect, device number 2 [ 67.176055][ T5342] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 67.245391][ T5342] cp210x 2-1:0.0: device disconnected [ 67.333592][ T5452] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.430751][ T5457] netlink: 256 bytes leftover after parsing attributes in process `syz.1.37'. [ 67.786910][ T5269] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 68.009356][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 68.055640][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 68.099772][ T5269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.130968][ T5269] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.146474][ T25] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 68.186506][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.216082][ T5269] usb 1-1: config 0 descriptor?? [ 68.233757][ T5459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 68.378161][ T25] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 68.423405][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 68.615255][ T25] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 68.709967][ T25] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 68.775910][ T25] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 68.825093][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.031146][ T5269] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.051310][ T25] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 69.067162][ T5269] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 69.101640][ T25] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 69.110600][ T25] usb 4-1: Product: syz [ 69.135973][ T25] usb 4-1: Manufacturer: syz [ 69.146663][ T5269] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 69.161099][ T25] usb 4-1: SerialNumber: syz [ 69.175325][ T25] usb 4-1: config 0 descriptor?? [ 69.240749][ T5446] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 69.255466][ T25] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 69.296067][ T25] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 69.400874][ T5274] usb 1-1: USB disconnect, device number 6 [ 69.572559][ T5269] usb 4-1: USB disconnect, device number 4 [ 69.591098][ T5269] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 70.609300][ T5509] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 70.674756][ T5511] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 71.664731][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.673979][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.071906][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 74.016467][ T5302] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.615353][ T9] usb 4-1: device descriptor read/all, error -71 [ 75.825479][ T5565] No such timeout policy "syz0" [ 76.368414][ T5269] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.576421][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 76.596899][ T5269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.611456][ T5269] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 76.656372][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.608954][ T8] cfg80211: failed to load regulatory.db [ 77.632606][ T5269] usb 3-1: config 0 descriptor?? [ 77.725738][ T5269] usb 3-1: can't set config #0, error -71 [ 77.825896][ T5269] usb 3-1: USB disconnect, device number 3 [ 77.942634][ T5588] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.57'. [ 78.124063][ T5585] Zero length message leads to an empty skb [ 78.134809][ T5585] syz.3.58: attempt to access beyond end of device [ 78.134809][ T5585] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 78.149542][ T5585] SQUASHFS error: Failed to read block 0x0: -5 [ 78.157860][ T5585] unable to read squashfs_super_block [ 79.985138][ T5629] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 80.440380][ T5636] Invalid ELF header type: 0 != 1 [ 80.501681][ T5636] Bluetooth: MGMT ver 1.23 [ 82.190499][ T5653] Process accounting resumed [ 82.376451][ T5661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 83.116656][ T5269] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.117724][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.266780][ T5269] usb 3-1: device descriptor read/64, error -71 [ 83.687805][ T5269] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.463819][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.486907][ T5269] usb 3-1: device descriptor read/64, error -71 [ 84.596827][ T5269] usb usb3-port1: attempt power cycle [ 84.646083][ T5698] Process accounting resumed [ 84.889752][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.909532][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.940261][ T5269] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 84.948451][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.956981][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.978695][ T5269] usb 3-1: device descriptor read/8, error -71 [ 84.985148][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.996167][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.005111][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.028035][ T5709] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET) [ 85.047232][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.058582][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.067136][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.075932][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.083862][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.094921][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.110559][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.312716][ T5269] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 86.006483][ T5269] usb 3-1: device descriptor read/8, error -71 [ 86.116668][ T5269] usb usb3-port1: unable to enumerate USB device [ 86.259119][ T5726] FAULT_INJECTION: forcing a failure. [ 86.259119][ T5726] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.272520][ T5726] CPU: 1 UID: 0 PID: 5726 Comm: syz.2.88 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 86.283041][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.293090][ T5726] Call Trace: [ 86.296360][ T5726] [ 86.299284][ T5726] dump_stack_lvl+0x241/0x360 [ 86.303952][ T5726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.309138][ T5726] ? __pfx__printk+0x10/0x10 [ 86.313737][ T5726] ? snprintf+0xda/0x120 [ 86.317997][ T5726] should_fail_ex+0x3b0/0x4e0 [ 86.322674][ T5726] _copy_to_user+0x2f/0xb0 [ 86.327086][ T5726] simple_read_from_buffer+0xca/0x150 [ 86.332457][ T5726] proc_fail_nth_read+0x1e9/0x250 [ 86.337473][ T5726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.343007][ T5726] ? rw_verify_area+0x55e/0x6f0 [ 86.347846][ T5726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.353379][ T5726] vfs_read+0x201/0xbc0 [ 86.357525][ T5726] ? __pfx_lock_release+0x10/0x10 [ 86.362545][ T5726] ? __pfx_vfs_read+0x10/0x10 [ 86.367226][ T5726] ? __fget_files+0x3f3/0x470 [ 86.371902][ T5726] ? fdget_pos+0x24e/0x320 [ 86.376318][ T5726] ksys_read+0x183/0x2b0 [ 86.380597][ T5726] ? __pfx_ksys_read+0x10/0x10 [ 86.385374][ T5726] ? __secure_computing+0x125/0x370 [ 86.390578][ T5726] do_syscall_64+0xf3/0x230 [ 86.395075][ T5726] ? clear_bhb_loop+0x35/0x90 [ 86.399742][ T5726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.405628][ T5726] RIP: 0033:0x7f680bb7ca3c [ 86.410031][ T5726] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 86.429637][ T5726] RSP: 002b:00007f680c92b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.438043][ T5726] RAX: ffffffffffffffda RBX: 00007f680bd35f80 RCX: 00007f680bb7ca3c [ 86.445999][ T5726] RDX: 000000000000000f RSI: 00007f680c92b0a0 RDI: 0000000000000005 [ 86.453993][ T5726] RBP: 00007f680c92b090 R08: 0000000000000000 R09: 0000000000000000 [ 86.461950][ T5726] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 86.469909][ T5726] R13: 0000000000000000 R14: 00007f680bd35f80 R15: 00007ffc9d6f0cb8 [ 86.477912][ T5726] [ 87.032897][ T68] bridge_slave_1: left allmulticast mode [ 87.040082][ T68] bridge_slave_1: left promiscuous mode [ 87.099405][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.166700][ T5227] Bluetooth: hci4: command tx timeout [ 87.237511][ T68] bridge_slave_0: left allmulticast mode [ 87.288688][ T68] bridge_slave_0: left promiscuous mode [ 87.296105][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.747419][ T5750] FAULT_INJECTION: forcing a failure. [ 87.747419][ T5750] name failslab, interval 1, probability 0, space 0, times 0 [ 88.516655][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: syz.0.90 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 88.527233][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.537306][ T5750] Call Trace: [ 88.540606][ T5750] [ 88.543552][ T5750] dump_stack_lvl+0x241/0x360 [ 88.548253][ T5750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.553471][ T5750] ? __pfx__printk+0x10/0x10 [ 88.558080][ T5750] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 88.564081][ T5750] ? __pfx___might_resched+0x10/0x10 [ 88.569389][ T5750] should_fail_ex+0x3b0/0x4e0 [ 88.574090][ T5750] should_failslab+0xac/0x100 [ 88.578785][ T5750] ? __alloc_skb+0x1c3/0x440 [ 88.583391][ T5750] kmem_cache_alloc_node_noprof+0x71/0x320 [ 88.589229][ T5750] __alloc_skb+0x1c3/0x440 [ 88.593670][ T5750] ? __pfx___alloc_skb+0x10/0x10 [ 88.598624][ T5750] ? netlink_autobind+0xd6/0x2f0 [ 88.603706][ T5750] ? netlink_autobind+0x2b0/0x2f0 [ 88.608781][ T5750] netlink_sendmsg+0x638/0xcb0 [ 88.613589][ T5750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.618917][ T5750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.624220][ T5750] __sock_sendmsg+0x221/0x270 [ 88.628926][ T5750] ____sys_sendmsg+0x52a/0x7e0 [ 88.633716][ T5750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.639035][ T5750] __sys_sendmsg+0x292/0x380 [ 88.643646][ T5750] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.648785][ T5750] ? __pfx_vfs_write+0x10/0x10 [ 88.653599][ T5750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.659949][ T5750] ? do_syscall_64+0x100/0x230 [ 88.664731][ T5750] ? do_syscall_64+0xb6/0x230 [ 88.669426][ T5750] do_syscall_64+0xf3/0x230 [ 88.673941][ T5750] ? clear_bhb_loop+0x35/0x90 [ 88.678638][ T5750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.684552][ T5750] RIP: 0033:0x7fc87e97dff9 [ 88.688988][ T5750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.708619][ T5750] RSP: 002b:00007fc87f77c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.717054][ T5750] RAX: ffffffffffffffda RBX: 00007fc87eb35f80 RCX: 00007fc87e97dff9 [ 88.725045][ T5750] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 88.733038][ T5750] RBP: 00007fc87f77c090 R08: 0000000000000000 R09: 0000000000000000 [ 88.741043][ T5750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.749042][ T5750] R13: 0000000000000000 R14: 00007fc87eb35f80 R15: 00007ffd9815cd08 [ 88.757053][ T5750] [ 88.934803][ T5763] Process accounting resumed [ 89.260655][ T5227] Bluetooth: hci4: command tx timeout [ 90.453571][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.469133][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.490136][ T68] bond0 (unregistering): Released all slaves [ 90.557317][ T5758] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.93'. [ 90.667861][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.715637][ T5792] FAULT_INJECTION: forcing a failure. [ 90.715637][ T5792] name failslab, interval 1, probability 0, space 0, times 0 [ 90.744796][ T5792] CPU: 1 UID: 0 PID: 5792 Comm: syz.4.101 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 90.755451][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.765536][ T5792] Call Trace: [ 90.768846][ T5792] [ 90.771803][ T5792] dump_stack_lvl+0x241/0x360 [ 90.776514][ T5792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.781748][ T5792] ? __pfx__printk+0x10/0x10 [ 90.786366][ T5792] ? fs_reclaim_acquire+0x93/0x130 [ 90.791513][ T5792] ? __pfx___might_resched+0x10/0x10 [ 90.796827][ T5792] ? dynamic_dname+0x141/0x1b0 [ 90.801624][ T5792] should_fail_ex+0x3b0/0x4e0 [ 90.806340][ T5792] ? tomoyo_encode+0x26f/0x540 [ 90.811136][ T5792] should_failslab+0xac/0x100 [ 90.815861][ T5792] ? tomoyo_encode+0x26f/0x540 [ 90.820672][ T5792] __kmalloc_noprof+0xd8/0x400 [ 90.825467][ T5792] tomoyo_encode+0x26f/0x540 [ 90.830088][ T5792] ? __pfx_sockfs_dname+0x10/0x10 [ 90.835171][ T5792] tomoyo_realpath_from_path+0x59e/0x5e0 [ 90.840847][ T5792] tomoyo_path_number_perm+0x23a/0x880 [ 90.846343][ T5792] ? tomoyo_path_number_perm+0x208/0x880 [ 90.852007][ T5792] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.858054][ T5792] ? __fget_files+0x29/0x470 [ 90.862686][ T5792] ? __fget_files+0x3f3/0x470 [ 90.867409][ T5792] security_file_ioctl+0xc6/0x2a0 [ 90.872466][ T5792] __se_sys_ioctl+0x47/0x170 [ 90.877090][ T5792] do_syscall_64+0xf3/0x230 [ 90.881622][ T5792] ? clear_bhb_loop+0x35/0x90 [ 90.886326][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.892253][ T5792] RIP: 0033:0x7f47da77dff9 [ 90.896702][ T5792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.916343][ T5792] RSP: 002b:00007f47db634038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.924803][ T5792] RAX: ffffffffffffffda RBX: 00007f47da935f80 RCX: 00007f47da77dff9 [ 90.932807][ T5792] RDX: 0000000020000100 RSI: 00000000800452d2 RDI: 0000000000000005 [ 90.940808][ T5792] RBP: 00007f47db634090 R08: 0000000000000000 R09: 0000000000000000 [ 90.946501][ T9] usb 1-1: device descriptor read/64, error -71 [ 90.948793][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.948821][ T5792] R13: 0000000000000000 R14: 00007f47da935f80 R15: 00007ffd94f33828 [ 90.948849][ T5792] [ 90.974924][ T5792] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.975281][ T5786] warning: `syz.3.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.006016][ T5702] chnl_net:caif_netlink_parms(): no params data found [ 91.063429][ T5794] Process accounting resumed [ 91.152291][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 91.345598][ T5227] Bluetooth: hci4: command tx timeout [ 91.446218][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 91.980787][ T9] usb 1-1: device descriptor read/64, error -71 [ 92.229254][ T9] usb usb1-port1: attempt power cycle [ 92.231003][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.287963][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.295601][ T5702] bridge_slave_0: entered allmulticast mode [ 92.321408][ T5702] bridge_slave_0: entered promiscuous mode [ 92.423092][ T5827] Process accounting resumed [ 92.759499][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.767357][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.774627][ T5702] bridge_slave_1: entered allmulticast mode [ 92.908165][ T5702] bridge_slave_1: entered promiscuous mode [ 93.242484][ T68] hsr_slave_0: left promiscuous mode [ 93.255306][ T68] hsr_slave_1: left promiscuous mode [ 93.267207][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.285695][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.316795][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.324266][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.407478][ T5227] Bluetooth: hci4: command tx timeout [ 93.410142][ T68] veth1_macvtap: left promiscuous mode [ 93.456654][ T68] veth0_macvtap: left promiscuous mode [ 93.471715][ T68] veth1_vlan: left promiscuous mode [ 93.487808][ T68] veth0_vlan: left promiscuous mode [ 93.614157][ T5851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.692346][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.704557][ T5851] process 'syz.4.115' launched '/dev/fd/5' with NULL argv: empty string added [ 93.718684][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.728499][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.739534][ T5852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.748947][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.758334][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.767862][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.025052][ T5862] Process accounting resumed [ 94.537119][ T5872] tmpfs: Unknown parameter 'size`w/8jlMm#FIjF' [ 94.686037][ T68] team0 (unregistering): Port device team_slave_1 removed [ 94.731454][ T68] team0 (unregistering): Port device team_slave_0 removed [ 95.453660][ T5702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.549090][ T5702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.807346][ T5235] Bluetooth: hci2: command tx timeout [ 95.811725][ T5702] team0: Port device team_slave_0 added [ 96.127814][ T5890] FAULT_INJECTION: forcing a failure. [ 96.127814][ T5890] name failslab, interval 1, probability 0, space 0, times 0 [ 96.141013][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: syz.2.126 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 96.151639][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.161729][ T5890] Call Trace: [ 96.165008][ T5890] [ 96.167935][ T5890] dump_stack_lvl+0x241/0x360 [ 96.172615][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.177818][ T5890] ? __pfx__printk+0x10/0x10 [ 96.182405][ T5890] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 96.187949][ T5890] ? __pfx___might_resched+0x10/0x10 [ 96.193233][ T5890] should_fail_ex+0x3b0/0x4e0 [ 96.197915][ T5890] ? alloc_empty_file+0x9e/0x1d0 [ 96.202845][ T5890] should_failslab+0xac/0x100 [ 96.207526][ T5890] ? alloc_empty_file+0x9e/0x1d0 [ 96.212454][ T5890] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 96.217822][ T5890] alloc_empty_file+0x9e/0x1d0 [ 96.222583][ T5890] dentry_open+0x44/0xa0 [ 96.226820][ T5890] ovl_dir_read+0x26/0x570 [ 96.231234][ T5890] ? ovl_path_next+0x3b9/0x470 [ 96.235993][ T5890] ovl_dir_read_merged+0x313/0x5e0 [ 96.241104][ T5890] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 96.246733][ T5890] ? __pfx_ovl_fill_merge+0x10/0x10 [ 96.251942][ T5890] ovl_iterate+0x1194/0x21c0 [ 96.256534][ T5890] ? __pfx___schedule+0x10/0x10 [ 96.261384][ T5890] ? __pfx_ovl_iterate+0x10/0x10 [ 96.266330][ T5890] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.272312][ T5890] ? preempt_schedule+0xe1/0xf0 [ 96.277158][ T5890] ? preempt_schedule_common+0x84/0xd0 [ 96.282613][ T5890] ? preempt_schedule+0xe1/0xf0 [ 96.287473][ T5890] ? __pfx_preempt_schedule+0x10/0x10 [ 96.292850][ T5890] ? preempt_schedule_thunk+0x1a/0x30 [ 96.298220][ T5890] ? down_write+0x1de/0x220 [ 96.302715][ T5890] ? __pfx_down_write+0x10/0x10 [ 96.307560][ T5890] ? __pfx_shared_ovl_iterate+0x10/0x10 [ 96.313108][ T5890] ? __pfx_ovl_iterate+0x10/0x10 [ 96.318040][ T5890] wrap_directory_iterator+0x91/0xd0 [ 96.323324][ T5890] iterate_dir+0x571/0x800 [ 96.327741][ T5890] __se_sys_getdents64+0x1d3/0x4a0 [ 96.332848][ T5890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.339179][ T5890] ? __pfx___se_sys_getdents64+0x10/0x10 [ 96.344805][ T5890] ? __pfx_filldir64+0x10/0x10 [ 96.349577][ T5890] do_syscall_64+0xf3/0x230 [ 96.354072][ T5890] ? clear_bhb_loop+0x35/0x90 [ 96.358741][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.364637][ T5890] RIP: 0033:0x7f680bb7dff9 [ 96.369052][ T5890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.388657][ T5890] RSP: 002b:00007f680c8e9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 96.397090][ T5890] RAX: ffffffffffffffda RBX: 00007f680bd36130 RCX: 00007f680bb7dff9 [ 96.405070][ T5890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 96.413044][ T5890] RBP: 00007f680c8e9090 R08: 0000000000000000 R09: 0000000000000000 [ 96.421015][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.429000][ T5890] R13: 0000000000000000 R14: 00007f680bd36130 R15: 00007ffc9d6f0cb8 [ 96.436992][ T5890] [ 96.702186][ T5702] team0: Port device team_slave_1 added [ 96.919742][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.931684][ T5896] TCP: out of memory -- consider tuning tcp_mem [ 96.997627][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.087069][ T5702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.154000][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.170179][ T5912] FAULT_INJECTION: forcing a failure. [ 97.170179][ T5912] name failslab, interval 1, probability 0, space 0, times 0 [ 97.188011][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.246578][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: syz.2.131 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 97.257215][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.267290][ T5912] Call Trace: [ 97.270590][ T5912] [ 97.273533][ T5912] dump_stack_lvl+0x241/0x360 [ 97.278237][ T5912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.283456][ T5912] ? __pfx__printk+0x10/0x10 [ 97.288069][ T5912] ? fs_reclaim_acquire+0x93/0x130 [ 97.293201][ T5912] ? __pfx___might_resched+0x10/0x10 [ 97.298515][ T5912] should_fail_ex+0x3b0/0x4e0 [ 97.303225][ T5912] ? tomoyo_encode+0x26f/0x540 [ 97.304365][ T5702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.307994][ T5912] should_failslab+0xac/0x100 [ 97.308026][ T5912] ? tomoyo_encode+0x26f/0x540 [ 97.308046][ T5912] __kmalloc_noprof+0xd8/0x400 [ 97.308070][ T5912] tomoyo_encode+0x26f/0x540 [ 97.308095][ T5912] tomoyo_realpath_from_path+0x59e/0x5e0 [ 97.308129][ T5912] tomoyo_path_number_perm+0x23a/0x880 [ 97.308154][ T5912] ? tomoyo_path_number_perm+0x208/0x880 [ 97.308173][ T5912] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.308222][ T5912] ? __fget_files+0x29/0x470 [ 97.364739][ T5912] ? __fget_files+0x3f3/0x470 [ 97.369399][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.371710][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.376363][ T5912] security_file_ioctl+0xc6/0x2a0 [ 97.376396][ T5912] __se_sys_ioctl+0x47/0x170 [ 97.376420][ T5912] do_syscall_64+0xf3/0x230 [ 97.376441][ T5912] ? clear_bhb_loop+0x35/0x90 [ 97.385676][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.388478][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.388511][ T5912] RIP: 0033:0x7f680bb7dff9 [ 97.388530][ T5912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.388544][ T5912] RSP: 002b:00007f680c92b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.394924][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.397614][ T5912] RAX: ffffffffffffffda RBX: 00007f680bd35f80 RCX: 00007f680bb7dff9 [ 97.397633][ T5912] RDX: 0000000020000200 RSI: 0000000040305829 RDI: 0000000000000003 [ 97.397645][ T5912] RBP: 00007f680c92b090 R08: 0000000000000000 R09: 0000000000000000 [ 97.397657][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.397668][ T5912] R13: 0000000000000000 R14: 00007f680bd35f80 R15: 00007ffc9d6f0cb8 [ 97.397695][ T5912] [ 97.404054][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.490272][ T5912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.537015][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.623099][ T5702] hsr_slave_0: entered promiscuous mode [ 97.643573][ T5702] hsr_slave_1: entered promiscuous mode [ 97.651082][ T5702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.664566][ T5702] Cannot create hsr debugfs directory [ 97.730510][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 97.781171][ T5918] netlink: 148 bytes leftover after parsing attributes in process `syz.4.132'. [ 97.886737][ T5227] Bluetooth: hci2: command tx timeout [ 97.951731][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.388381][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.433155][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 98.437164][ T5938] capability: warning: `syz.2.134' uses 32-bit capabilities (legacy support in use) [ 98.665071][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.994815][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.079616][ T5953] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 99.587509][ T5227] Bluetooth: hci0: command tx timeout [ 99.945546][ T5956] mmap: syz.4.137 (5956) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.967710][ T5227] Bluetooth: hci2: command tx timeout [ 99.978258][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.995648][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.034155][ T5853] bridge_slave_0: entered allmulticast mode [ 100.052233][ T5853] bridge_slave_0: entered promiscuous mode [ 100.116485][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.150863][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.166050][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.173946][ T5853] bridge_slave_1: entered allmulticast mode [ 100.189365][ T5853] bridge_slave_1: entered promiscuous mode [ 100.208374][ T5913] chnl_net:caif_netlink_parms(): no params data found [ 100.261446][ T25] usb 3-1: device descriptor read/64, error -71 [ 100.374648][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.402138][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.414538][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.483265][ T5965] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.138'. [ 100.680774][ T5853] team0: Port device team_slave_0 added [ 100.739492][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.829882][ T5853] team0: Port device team_slave_1 added [ 100.883249][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.896486][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 100.970941][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.985115][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.993979][ T5913] bridge_slave_0: entered allmulticast mode [ 101.010030][ T5913] bridge_slave_0: entered promiscuous mode [ 101.026546][ T25] usb 3-1: device descriptor read/64, error -71 [ 101.042659][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.052071][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.081251][ T5913] bridge_slave_1: entered allmulticast mode [ 101.091402][ T5913] bridge_slave_1: entered promiscuous mode [ 101.118488][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.136713][ T25] usb usb3-port1: attempt power cycle [ 101.142710][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.151669][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.187046][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.203215][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.210514][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.237866][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.249603][ T5702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.270116][ T5702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.318208][ T5702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.340638][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.362324][ T5702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.403479][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.467138][ T5913] team0: Port device team_slave_0 added [ 101.475738][ T5913] team0: Port device team_slave_1 added [ 101.546630][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 101.559150][ T5974] overlayfs: failed to resolve './file1': -2 [ 101.569563][ T25] usb 3-1: device descriptor read/8, error -71 [ 101.584581][ T5974] Process accounting resumed [ 101.642471][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.650012][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.658191][ T5227] Bluetooth: hci0: command tx timeout [ 101.676427][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.695699][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.702799][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.728994][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.785038][ T5853] hsr_slave_0: entered promiscuous mode [ 101.792778][ T5853] hsr_slave_1: entered promiscuous mode [ 101.807537][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.815142][ T5853] Cannot create hsr debugfs directory [ 101.862147][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.878461][ T5702] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.888124][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.916789][ T25] usb 3-1: device descriptor read/8, error -71 [ 101.924348][ T5913] hsr_slave_0: entered promiscuous mode [ 101.937771][ T5913] hsr_slave_1: entered promiscuous mode [ 101.955958][ T5913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.971453][ T5913] Cannot create hsr debugfs directory [ 102.011149][ T5979] No such timeout policy "syz0" [ 102.028714][ T25] usb usb3-port1: unable to enumerate USB device [ 102.048836][ T5227] Bluetooth: hci2: command tx timeout [ 102.099921][ T68] bridge_slave_1: left allmulticast mode [ 102.107576][ T68] bridge_slave_1: left promiscuous mode [ 102.114426][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.154210][ T68] bridge_slave_0: left allmulticast mode [ 102.161062][ T68] bridge_slave_0: left promiscuous mode [ 102.186520][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.329532][ T68] bridge_slave_1: left allmulticast mode [ 102.335806][ T68] bridge_slave_1: left promiscuous mode [ 102.344304][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.381506][ T68] bridge_slave_0: left allmulticast mode [ 102.389905][ T68] bridge_slave_0: left promiscuous mode [ 102.403063][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.654740][ T5981] ipt_REJECT: TCP_RESET invalid for non-tcp [ 103.280591][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.292806][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.304203][ T68] bond0 (unregistering): Released all slaves [ 103.412591][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.424971][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.436096][ T68] bond0 (unregistering): Released all slaves [ 103.464906][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.472100][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.550996][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.558680][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.726556][ T5227] Bluetooth: hci0: command tx timeout [ 104.360422][ T6012] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.146'. [ 104.478894][ T68] hsr_slave_0: left promiscuous mode [ 104.504479][ T68] hsr_slave_1: left promiscuous mode [ 104.534177][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.543526][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.564523][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.587879][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.620435][ T68] hsr_slave_0: left promiscuous mode [ 104.627502][ T68] hsr_slave_1: left promiscuous mode [ 104.639791][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.649780][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.681498][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.709528][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.850697][ T68] veth1_macvtap: left promiscuous mode [ 104.867534][ T6028] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.874803][ T6028] overlayfs: failed to set xattr on upper [ 104.876336][ T68] veth0_macvtap: left promiscuous mode [ 104.880847][ T6028] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.893254][ T6028] overlayfs: ...falling back to index=off. [ 104.896509][ T68] veth1_vlan: left promiscuous mode [ 104.899315][ T6028] overlayfs: ...falling back to uuid=null. [ 104.904416][ T68] veth0_vlan: left promiscuous mode [ 104.923631][ T68] veth1_macvtap: left promiscuous mode [ 104.929744][ T68] veth0_macvtap: left promiscuous mode [ 104.935355][ T68] veth1_vlan: left promiscuous mode [ 104.942461][ T68] veth0_vlan: left promiscuous mode [ 105.775058][ T68] team0 (unregistering): Port device team_slave_1 removed [ 105.817719][ T5227] Bluetooth: hci0: command tx timeout [ 105.828999][ T68] team0 (unregistering): Port device team_slave_0 removed [ 106.490997][ T68] team0 (unregistering): Port device team_slave_1 removed [ 106.531092][ T68] team0 (unregistering): Port device team_slave_0 removed [ 106.896756][ T6040] netlink: 44 bytes leftover after parsing attributes in process `syz.4.151'. [ 106.905752][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.022138][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.231258][ T5702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.331764][ T29] audit: type=1326 audit(1729750936.472:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 107.417096][ T5702] veth0_vlan: entered promiscuous mode [ 107.513141][ T29] audit: type=1326 audit(1729750936.472:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 107.665612][ T6055] xt_hashlimit: invalid rate [ 109.248443][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.261699][ T29] audit: type=1326 audit(1729750936.472:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 109.380819][ T29] audit: type=1326 audit(1729750936.472:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 109.448317][ T5702] veth1_vlan: entered promiscuous mode [ 109.478431][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.574735][ T29] audit: type=1326 audit(1729750936.472:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 109.627116][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.642669][ T29] audit: type=1326 audit(1729750936.472:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 109.664222][ T5702] veth0_macvtap: entered promiscuous mode [ 109.684355][ T29] audit: type=1326 audit(1729750936.472:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 109.728769][ T29] audit: type=1326 audit(1729750936.512:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 109.760989][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.768495][ T29] audit: type=1326 audit(1729750936.512:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 109.817017][ T29] audit: type=1326 audit(1729750936.512:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47da77dff9 code=0x7ffc0000 [ 109.892510][ T5702] veth1_macvtap: entered promiscuous mode [ 110.084108][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.209927][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.238741][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.289973][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.305972][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.323071][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.354796][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.399016][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.523866][ T68] IPVS: stop unused estimator thread 0... [ 110.533550][ T5702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.557997][ T5702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.571364][ T5702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.583082][ T5702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.645820][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.765776][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.820072][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.827203][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.886001][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.893129][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.966182][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.977778][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.028828][ T5913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.049905][ T5913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.075202][ T5913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.082338][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.102173][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.107579][ T5913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.209719][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.243558][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.417323][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.477388][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.523326][ T5913] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.571259][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.578468][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.615147][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.622343][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.709001][ T5853] veth0_vlan: entered promiscuous mode [ 111.748832][ T5853] veth1_vlan: entered promiscuous mode [ 111.887682][ T5853] veth0_macvtap: entered promiscuous mode [ 111.934821][ T5853] veth1_macvtap: entered promiscuous mode [ 112.029687][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.082939][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.109951][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.120752][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.151390][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.192978][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.225650][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.262078][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.325039][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.372556][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.415281][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.480451][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.537721][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.555233][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.574824][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.584661][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.649485][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.273839][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.281878][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.351127][ T5913] veth0_vlan: entered promiscuous mode [ 114.774806][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.782791][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.031383][ T5913] veth1_vlan: entered promiscuous mode [ 115.536410][ T5913] veth0_macvtap: entered promiscuous mode [ 115.629027][ T5913] veth1_macvtap: entered promiscuous mode [ 115.691250][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.751166][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.775272][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.786402][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.796235][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.807455][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.004399][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.210148][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.359241][ T5271] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.378296][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.427453][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.497239][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.510088][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.521591][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.532146][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.566418][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.579943][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 116.579959][ T29] audit: type=1326 audit(1729750945.722:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680bb7dff9 code=0x7ffc0000 [ 116.587613][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.630661][ T29] audit: type=1326 audit(1729750945.752:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680bb7dff9 code=0x7ffc0000 [ 116.657818][ T5913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.667280][ T29] audit: type=1326 audit(1729750945.762:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f680bb7dff9 code=0x7ffc0000 [ 116.710759][ T5913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.723267][ T5913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.739050][ T5913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.752564][ T29] audit: type=1326 audit(1729750945.762:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680bb7dff9 code=0x7ffc0000 [ 116.890215][ T5271] usb 2-1: Using ep0 maxpacket: 32 [ 116.919630][ T29] audit: type=1326 audit(1729750945.762:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680bb7dff9 code=0x7ffc0000 [ 116.949732][ T29] audit: type=1326 audit(1729750945.762:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f680bb7c990 code=0x7ffc0000 [ 116.991855][ T5271] usb 2-1: config 1 interface 0 has no altsetting 0 [ 117.041194][ T5271] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 117.108932][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.149077][ T29] audit: type=1326 audit(1729750945.762:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f680bb7f827 code=0x7ffc0000 [ 117.175297][ T5271] usb 2-1: Product: syz [ 117.184375][ T5271] usb 2-1: Manufacturer: syz [ 117.190796][ T29] audit: type=1326 audit(1729750945.762:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f680bb7dff9 code=0x7ffc0000 [ 117.195436][ T5271] usb 2-1: SerialNumber: syz [ 117.221425][ T29] audit: type=1326 audit(1729750945.762:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f680bb7f827 code=0x7ffc0000 [ 117.243182][ T29] audit: type=1326 audit(1729750945.762:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6132 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f680bb7cc8a code=0x7ffc0000 [ 117.900796][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.936328][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.936823][ T5823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.958309][ T5823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.966031][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.036759][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.167325][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 118.734530][ T6157] Process accounting resumed [ 119.046523][ T5271] usbhid 2-1:1.0: can't add hid device: -71 [ 119.056583][ T5271] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 119.750658][ T5271] usb 2-1: USB disconnect, device number 3 [ 120.865335][ T6177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.181'. [ 121.435436][ T6183] netlink: 'syz.1.184': attribute type 7 has an invalid length. [ 121.456697][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 121.629437][ T9] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 121.638088][ T9] usb 4-1: config 0 has no interface number 0 [ 121.671074][ T9] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=64.02 [ 121.686890][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.710482][ T9] usb 4-1: Product: syz [ 121.730170][ T9] usb 4-1: Manufacturer: syz [ 121.745818][ T9] usb 4-1: SerialNumber: syz [ 121.794089][ T9] usb 4-1: config 0 descriptor?? [ 122.092117][ T6174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.266778][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.546646][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 122.563308][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.672895][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.732604][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.746408][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.759443][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.768517][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.833321][ T9] snd-usb-audio 4-1:0.91: probe with driver snd-usb-audio failed with error -71 [ 122.862508][ T6221] Invalid ELF header type: 0 != 1 [ 122.873060][ T6221] FAULT_INJECTION: forcing a failure. [ 122.873060][ T6221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.889604][ T6221] CPU: 0 UID: 0 PID: 6221 Comm: syz.1.191 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 122.900234][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.910317][ T6221] Call Trace: [ 122.913620][ T6221] [ 122.916571][ T6221] dump_stack_lvl+0x241/0x360 [ 122.921280][ T6221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.926505][ T6221] ? __pfx__printk+0x10/0x10 [ 122.931126][ T6221] should_fail_ex+0x3b0/0x4e0 [ 122.935848][ T6221] _copy_from_user+0x2f/0xe0 [ 122.940467][ T6221] move_addr_to_kernel+0x82/0x150 [ 122.945509][ T6221] __sys_connect+0xc1/0x300 [ 122.950037][ T6221] ? __pfx___sys_connect+0x10/0x10 [ 122.955182][ T6221] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.961526][ T6221] ? do_syscall_64+0x100/0x230 [ 122.966301][ T6221] __x64_sys_connect+0x7a/0x90 [ 122.971077][ T6221] do_syscall_64+0xf3/0x230 [ 122.975579][ T6221] ? clear_bhb_loop+0x35/0x90 [ 122.980283][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.986193][ T6221] RIP: 0033:0x7fd603d7dff9 [ 122.990627][ T6221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.010262][ T6221] RSP: 002b:00007fd604af1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 123.018713][ T6221] RAX: ffffffffffffffda RBX: 00007fd603f36058 RCX: 00007fd603d7dff9 [ 123.026704][ T6221] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0000000000000007 [ 123.034690][ T6221] RBP: 00007fd604af1090 R08: 0000000000000000 R09: 0000000000000000 [ 123.042675][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.050660][ T6221] R13: 0000000000000000 R14: 00007fd603f36058 R15: 00007ffcab537d38 [ 123.058676][ T6221] [ 123.067269][ T9] usb 4-1: USB disconnect, device number 7 [ 123.594485][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 123.600249][ T25] usbtmc 5-1:16.0: can't read capabilities [ 123.997716][ T6226] Invalid ELF header type: 0 != 1 [ 124.316972][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.332122][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.345721][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.359730][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.446222][ T5269] usb 5-1: USB disconnect, device number 3 [ 129.168015][ T6247] netlink: 'syz.4.199': attribute type 4 has an invalid length. [ 129.839848][ T6258] binder: 6252:6258 ioctl c0306201 20000680 returned -14 [ 132.793476][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 132.922456][ T6288] binder: 6287:6288 ioctl c0306201 20000580 returned -22 [ 133.093100][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.099596][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.152056][ T6294] FAULT_INJECTION: forcing a failure. [ 133.152056][ T6294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.165487][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.3.212 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 133.176096][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.186161][ T6294] Call Trace: [ 133.189449][ T6294] [ 133.192386][ T6294] dump_stack_lvl+0x241/0x360 [ 133.197087][ T6294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.202293][ T6294] ? __pfx__printk+0x10/0x10 [ 133.206899][ T6294] ? snprintf+0xda/0x120 [ 133.211157][ T6294] should_fail_ex+0x3b0/0x4e0 [ 133.215852][ T6294] _copy_to_user+0x2f/0xb0 [ 133.220290][ T6294] simple_read_from_buffer+0xca/0x150 [ 133.225681][ T6294] proc_fail_nth_read+0x1e9/0x250 [ 133.230727][ T6294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.236290][ T6294] ? rw_verify_area+0x55e/0x6f0 [ 133.241149][ T6294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.246711][ T6294] vfs_read+0x201/0xbc0 [ 133.250876][ T6294] ? __pfx_lock_release+0x10/0x10 [ 133.255925][ T6294] ? __pfx_vfs_read+0x10/0x10 [ 133.260622][ T6294] ? __fget_files+0x3f3/0x470 [ 133.265322][ T6294] ? fdget_pos+0x24e/0x320 [ 133.269755][ T6294] ksys_read+0x183/0x2b0 [ 133.274012][ T6294] ? __pfx_ksys_read+0x10/0x10 [ 133.278797][ T6294] ? do_syscall_64+0x100/0x230 [ 133.283573][ T6294] ? do_syscall_64+0xb6/0x230 [ 133.288265][ T6294] do_syscall_64+0xf3/0x230 [ 133.292777][ T6294] ? clear_bhb_loop+0x35/0x90 [ 133.297467][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.303373][ T6294] RIP: 0033:0x7f8dd937ca3c [ 133.307795][ T6294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 133.327411][ T6294] RSP: 002b:00007f8dd91f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.335845][ T6294] RAX: ffffffffffffffda RBX: 00007f8dd9535f80 RCX: 00007f8dd937ca3c [ 133.343830][ T6294] RDX: 000000000000000f RSI: 00007f8dd91f90a0 RDI: 0000000000000004 [ 133.351810][ T6294] RBP: 00007f8dd91f9090 R08: 0000000000000000 R09: 0000000000000000 [ 133.359788][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.367769][ T6294] R13: 0000000000000000 R14: 00007f8dd9535f80 R15: 00007ffe9a6a6928 [ 133.375767][ T6294] [ 136.596218][ T8] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 136.826584][ T6336] No such timeout policy "syz0" [ 136.950372][ T8] usb 1-1: no configurations [ 136.950394][ T8] usb 1-1: can't read configurations, error -22 [ 136.990767][ T5269] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.003195][ T5269] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.057621][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 137.057638][ T29] audit: type=1107 audit(1729750966.202:92): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 137.076624][ T8] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 137.227890][ T8] usb 1-1: no configurations [ 137.240979][ T8] usb 1-1: can't read configurations, error -22 [ 137.256157][ T8] usb usb1-port1: attempt power cycle [ 138.036415][ T8] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 138.067951][ T8] usb 1-1: no configurations [ 138.072609][ T8] usb 1-1: can't read configurations, error -22 [ 138.216746][ T8] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 138.262958][ T8] usb 1-1: no configurations [ 138.268030][ T8] usb 1-1: can't read configurations, error -22 [ 138.276870][ T8] usb usb1-port1: unable to enumerate USB device [ 138.459388][ T6362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.108884][ T29] audit: type=1326 audit(1729750969.252:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6379 comm="syz.3.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dd937dff9 code=0x0 [ 140.593597][ T6384] No such timeout policy "syz0" [ 141.027895][ T6409] FAULT_INJECTION: forcing a failure. [ 141.027895][ T6409] name failslab, interval 1, probability 0, space 0, times 0 [ 141.041697][ T6409] CPU: 1 UID: 0 PID: 6409 Comm: syz.0.250 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 141.052322][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.062407][ T6409] Call Trace: [ 141.065703][ T6409] [ 141.068654][ T6409] dump_stack_lvl+0x241/0x360 [ 141.073365][ T6409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.078589][ T6409] ? __pfx__printk+0x10/0x10 [ 141.083202][ T6409] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 141.088690][ T6409] ? __pfx___might_resched+0x10/0x10 [ 141.094007][ T6409] should_fail_ex+0x3b0/0x4e0 [ 141.098714][ T6409] should_failslab+0xac/0x100 [ 141.103414][ T6409] ? udmabuf_create+0xf0/0x11b0 [ 141.108288][ T6409] __kmalloc_cache_noprof+0x6c/0x2c0 [ 141.113596][ T6409] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.119953][ T6409] udmabuf_create+0xf0/0x11b0 [ 141.124649][ T6409] ? irqentry_exit+0x63/0x90 [ 141.129258][ T6409] ? lockdep_hardirqs_on+0x99/0x150 [ 141.134495][ T6409] ? __pfx_udmabuf_create+0x10/0x10 [ 141.139719][ T6409] ? rep_movs_alternative+0x4a/0x70 [ 141.144938][ T6409] ? _copy_from_user+0xa6/0xe0 [ 141.149727][ T6409] udmabuf_ioctl+0x3ac/0x4e0 [ 141.154340][ T6409] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 141.159477][ T6409] ? __fget_files+0x3f3/0x470 [ 141.164189][ T6409] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 141.169325][ T6409] __se_sys_ioctl+0xf9/0x170 [ 141.173941][ T6409] do_syscall_64+0xf3/0x230 [ 141.178467][ T6409] ? clear_bhb_loop+0x35/0x90 [ 141.183169][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.189086][ T6409] RIP: 0033:0x7f0f7517dff9 [ 141.193522][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.200329][ T6413] FAULT_INJECTION: forcing a failure. [ 141.200329][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 141.213123][ T6409] RSP: 002b:00007f0f7605b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.213148][ T6409] RAX: ffffffffffffffda RBX: 00007f0f75335f80 RCX: 00007f0f7517dff9 [ 141.213162][ T6409] RDX: 0000000020000080 RSI: 0000000040087543 RDI: 0000000000000003 [ 141.213174][ T6409] RBP: 00007f0f7605b090 R08: 0000000000000000 R09: 0000000000000000 [ 141.213186][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.213197][ T6409] R13: 0000000000000000 R14: 00007f0f75335f80 R15: 00007fff92dcd628 [ 141.213222][ T6409] [ 141.213367][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.283321][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.436756][ T6413] CPU: 1 UID: 0 PID: 6413 Comm: syz.3.251 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 141.447408][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.457475][ T6413] Call Trace: [ 141.460750][ T6413] [ 141.463667][ T6413] dump_stack_lvl+0x241/0x360 [ 141.468359][ T6413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.473575][ T6413] ? __pfx__printk+0x10/0x10 [ 141.478169][ T6413] ? fs_reclaim_acquire+0x93/0x130 [ 141.483279][ T6413] ? __pfx___might_resched+0x10/0x10 [ 141.488562][ T6413] should_fail_ex+0x3b0/0x4e0 [ 141.493245][ T6413] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 141.498967][ T6413] should_failslab+0xac/0x100 [ 141.503646][ T6413] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 141.509359][ T6413] __kmalloc_noprof+0xd8/0x400 [ 141.514121][ T6413] tomoyo_realpath_from_path+0xcf/0x5e0 [ 141.519671][ T6413] tomoyo_path_number_perm+0x23a/0x880 [ 141.525130][ T6413] ? tomoyo_path_number_perm+0x208/0x880 [ 141.530760][ T6413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.536763][ T6413] ? __fget_files+0x29/0x470 [ 141.541350][ T6413] ? __fget_files+0x3f3/0x470 [ 141.546027][ T6413] security_file_ioctl+0xc6/0x2a0 [ 141.551050][ T6413] __se_sys_ioctl+0x47/0x170 [ 141.555636][ T6413] do_syscall_64+0xf3/0x230 [ 141.560146][ T6413] ? clear_bhb_loop+0x35/0x90 [ 141.564818][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.570726][ T6413] RIP: 0033:0x7f8dd937dff9 [ 141.575131][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.594729][ T6413] RSP: 002b:00007f8dd91d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.603140][ T6413] RAX: ffffffffffffffda RBX: 00007f8dd9536058 RCX: 00007f8dd937dff9 [ 141.611105][ T6413] RDX: 0000000020000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 141.619069][ T6413] RBP: 00007f8dd91d8090 R08: 0000000000000000 R09: 0000000000000000 [ 141.627041][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.635007][ T6413] R13: 0000000000000000 R14: 00007f8dd9536058 R15: 00007ffe9a6a6928 [ 141.642982][ T6413] [ 141.646061][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.809335][ T6413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.302226][ T6446] No such timeout policy "syz0" [ 146.789768][ T6467] FAULT_INJECTION: forcing a failure. [ 146.789768][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 146.946394][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.1.268 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 146.957039][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.967128][ T6467] Call Trace: [ 146.970423][ T6467] [ 146.973366][ T6467] dump_stack_lvl+0x241/0x360 [ 146.978075][ T6467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.983303][ T6467] ? __pfx__printk+0x10/0x10 [ 146.987923][ T6467] ? fs_reclaim_acquire+0x93/0x130 [ 146.993069][ T6467] ? __pfx___might_resched+0x10/0x10 [ 146.998399][ T6467] should_fail_ex+0x3b0/0x4e0 [ 147.003105][ T6467] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 147.008851][ T6467] should_failslab+0xac/0x100 [ 147.013563][ T6467] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 147.019320][ T6467] __kmalloc_noprof+0xd8/0x400 [ 147.024113][ T6467] tomoyo_realpath_from_path+0xcf/0x5e0 [ 147.029714][ T6467] tomoyo_path_number_perm+0x23a/0x880 [ 147.035207][ T6467] ? tomoyo_path_number_perm+0x208/0x880 [ 147.040866][ T6467] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.046910][ T6467] ? __fget_files+0x29/0x470 [ 147.049839][ T6469] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 147.051520][ T6467] ? __fget_files+0x3f3/0x470 [ 147.051563][ T6467] security_file_ioctl+0xc6/0x2a0 [ 147.051589][ T6467] __se_sys_ioctl+0x47/0x170 [ 147.074114][ T6467] do_syscall_64+0xf3/0x230 [ 147.078648][ T6467] ? clear_bhb_loop+0x35/0x90 [ 147.083353][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.089283][ T6467] RIP: 0033:0x7fd603d7dff9 [ 147.093730][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.113362][ T6467] RSP: 002b:00007fd604b12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.121786][ T6467] RAX: ffffffffffffffda RBX: 00007fd603f35f80 RCX: 00007fd603d7dff9 [ 147.129759][ T6467] RDX: 00000000200003c0 RSI: 0000000000008922 RDI: 0000000000000003 [ 147.137737][ T6467] RBP: 00007fd604b12090 R08: 0000000000000000 R09: 0000000000000000 [ 147.145706][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.153673][ T6467] R13: 0000000000000000 R14: 00007fd603f35f80 R15: 00007ffcab537d38 [ 147.161655][ T6467] [ 147.341367][ T6467] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.074427][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.266'. [ 148.097526][ T6480] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 148.105286][ T6480] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 148.113856][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.266'. [ 148.316343][ T6485] dccp_invalid_packet: P.Data Offset(172) too large [ 148.595395][ T5274] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 148.883238][ T6493] FAULT_INJECTION: forcing a failure. [ 148.883238][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 148.896107][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.0.274 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 148.906722][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.916793][ T6493] Call Trace: [ 148.920081][ T6493] [ 148.923020][ T6493] dump_stack_lvl+0x241/0x360 [ 148.927719][ T6493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.932933][ T6493] ? __pfx__printk+0x10/0x10 [ 148.937539][ T6493] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 148.943020][ T6493] ? __pfx___might_resched+0x10/0x10 [ 148.948318][ T6493] ? preempt_schedule+0xe1/0xf0 [ 148.953185][ T6493] should_fail_ex+0x3b0/0x4e0 [ 148.957886][ T6493] should_failslab+0xac/0x100 [ 148.962582][ T6493] ? binder_get_thread+0x1c2/0x6c0 [ 148.967711][ T6493] __kmalloc_cache_noprof+0x6c/0x2c0 [ 148.973020][ T6493] binder_get_thread+0x1c2/0x6c0 [ 148.977981][ T6493] binder_ioctl+0x2b6/0x1cc0 [ 148.982590][ T6493] ? __pfx___schedule+0x10/0x10 [ 148.987471][ T6493] ? smack_log+0x123/0x540 [ 148.991899][ T6493] ? __pfx_binder_ioctl+0x10/0x10 [ 148.997030][ T6493] ? __pfx_smack_log+0x10/0x10 [ 149.001809][ T6493] ? smk_access+0x4ab/0x4e0 [ 149.006332][ T6493] ? smk_tskacc+0x300/0x370 [ 149.010861][ T6493] ? smack_file_ioctl+0x2f7/0x3a0 [ 149.015897][ T6493] ? __pfx_smack_file_ioctl+0x10/0x10 [ 149.021287][ T6493] ? security_file_ioctl+0xd1/0x2a0 [ 149.026503][ T6493] ? security_file_ioctl+0x251/0x2a0 [ 149.031810][ T6493] ? smack_file_ioctl+0xe/0x3a0 [ 149.036678][ T6493] ? __pfx_binder_ioctl+0x10/0x10 [ 149.041717][ T6493] __se_sys_ioctl+0xf9/0x170 [ 149.046324][ T6493] do_syscall_64+0xf3/0x230 [ 149.050839][ T6493] ? clear_bhb_loop+0x35/0x90 [ 149.055530][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.061442][ T6493] RIP: 0033:0x7f0f7517dff9 [ 149.065870][ T6493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.085492][ T6493] RSP: 002b:00007f0f76019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.093935][ T6493] RAX: ffffffffffffffda RBX: 00007f0f75336130 RCX: 00007f0f7517dff9 [ 149.101922][ T6493] RDX: 0000000020000480 RSI: 00000000c0306201 RDI: 0000000000000005 [ 149.109912][ T6493] RBP: 00007f0f76019090 R08: 0000000000000000 R09: 0000000000000000 [ 149.117899][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.125879][ T6493] R13: 0000000000000000 R14: 00007f0f75336130 R15: 00007fff92dcd628 [ 149.133878][ T6493] [ 149.138078][ T6493] binder: 6488:6493 ioctl c0306201 20000480 returned -12 [ 149.381860][ T5274] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 149.818245][ T5274] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 149.833055][ T5274] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 149.844320][ T5274] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 149.863163][ T5274] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 149.904049][ T6499] FAULT_INJECTION: forcing a failure. [ 149.904049][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 149.915348][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.924786][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.0.277 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 149.935414][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.945495][ T6499] Call Trace: [ 149.946855][ T5274] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 149.948774][ T6499] [ 149.958115][ T5274] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 149.960709][ T6499] dump_stack_lvl+0x241/0x360 [ 149.973822][ T6499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.979052][ T6499] ? __pfx__printk+0x10/0x10 [ 149.983683][ T6499] ? __kmalloc_node_noprof+0xb7/0x440 [ 149.989110][ T6499] ? __pfx___might_resched+0x10/0x10 [ 149.992948][ T5274] usb 5-1: Product: syz [ 149.994405][ T6499] should_fail_ex+0x3b0/0x4e0 [ 149.994444][ T6499] should_failslab+0xac/0x100 [ 150.007964][ T6499] __kmalloc_node_noprof+0xdf/0x440 [ 150.013184][ T6499] ? __kvmalloc_node_noprof+0x72/0x190 [ 150.018685][ T6499] __kvmalloc_node_noprof+0x72/0x190 [ 150.024002][ T6499] seq_read_iter+0x20c/0xd70 [ 150.028626][ T6499] ? kernfs_fop_read_iter+0x142/0x640 [ 150.034036][ T6499] do_iter_readv_writev+0x600/0x880 [ 150.038069][ T5274] usb 5-1: Manufacturer: syz [ 150.039247][ T6499] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 150.039285][ T6499] ? rw_verify_area+0x55e/0x6f0 [ 150.054431][ T6499] vfs_readv+0x2b3/0xa80 [ 150.058712][ T6499] ? __pfx_vfs_readv+0x10/0x10 [ 150.063496][ T6499] ? vfs_write+0x7bf/0xc90 [ 150.067946][ T6499] ? __fget_files+0x29/0x470 [ 150.072567][ T6499] ? __fget_files+0x29/0x470 [ 150.073399][ T5274] usb 5-1: SerialNumber: syz [ 150.077172][ T6499] __x64_sys_preadv+0x1c7/0x2d0 [ 150.077204][ T6499] ? __pfx___x64_sys_preadv+0x10/0x10 [ 150.077228][ T6499] ? do_syscall_64+0x100/0x230 [ 150.077250][ T6499] ? do_syscall_64+0xb6/0x230 [ 150.077270][ T6499] do_syscall_64+0xf3/0x230 [ 150.077287][ T6499] ? clear_bhb_loop+0x35/0x90 [ 150.077307][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.077331][ T6499] RIP: 0033:0x7f0f7517dff9 [ 150.077348][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.140551][ T6499] RSP: 002b:00007f0f7605b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 150.148957][ T6499] RAX: ffffffffffffffda RBX: 00007f0f75335f80 RCX: 00007f0f7517dff9 [ 150.156920][ T6499] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 150.164886][ T6499] RBP: 00007f0f7605b090 R08: 0000000000000000 R09: 0000000000000000 [ 150.172845][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.180805][ T6499] R13: 0000000000000000 R14: 00007f0f75335f80 R15: 00007fff92dcd628 [ 150.188789][ T6499] [ 150.347387][ T5274] usb 5-1: config 0 descriptor?? [ 150.471837][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 150.670771][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.809799][ T9] usb 4-1: config 0 has no interfaces? [ 150.990245][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 151.052739][ T5274] usb 5-1: can't set config #0, error -71 [ 151.077070][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.117599][ T5274] usb 5-1: USB disconnect, device number 4 [ 151.127239][ T9] usb 4-1: config 0 descriptor?? [ 151.186889][ T6517] FAULT_INJECTION: forcing a failure. [ 151.186889][ T6517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.225094][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.4.283 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 151.235736][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.245817][ T6517] Call Trace: [ 151.249116][ T6517] [ 151.252063][ T6517] dump_stack_lvl+0x241/0x360 [ 151.256767][ T6517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.261991][ T6517] ? __pfx__printk+0x10/0x10 [ 151.266604][ T6517] ? __pfx_lock_release+0x10/0x10 [ 151.271656][ T6517] should_fail_ex+0x3b0/0x4e0 [ 151.276358][ T6517] _copy_from_user+0x2f/0xe0 [ 151.280967][ T6517] copy_msghdr_from_user+0xae/0x680 [ 151.286186][ T6517] ? __lock_acquire+0x1384/0x2050 [ 151.291235][ T6517] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 151.297078][ T6517] do_recvmmsg+0x3f9/0xad0 [ 151.301523][ T6517] ? __pfx_do_recvmmsg+0x10/0x10 [ 151.306501][ T6517] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 151.312419][ T6517] ? ksys_write+0x229/0x2b0 [ 151.316941][ T6517] ? __pfx_lock_release+0x10/0x10 [ 151.321991][ T6517] ? vfs_write+0x7bf/0xc90 [ 151.326427][ T6517] ? kmem_cache_free+0x1a2/0x420 [ 151.331388][ T6517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.337399][ T6517] __x64_sys_recvmmsg+0x199/0x250 [ 151.342446][ T6517] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 151.348008][ T6517] ? do_syscall_64+0x100/0x230 [ 151.352789][ T6517] ? do_syscall_64+0xb6/0x230 [ 151.357486][ T6517] do_syscall_64+0xf3/0x230 [ 151.362012][ T6517] ? clear_bhb_loop+0x35/0x90 [ 151.366705][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.372619][ T6517] RIP: 0033:0x7f47da77dff9 [ 151.377061][ T6517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.396698][ T6517] RSP: 002b:00007f47db634038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.405146][ T6517] RAX: ffffffffffffffda RBX: 00007f47da935f80 RCX: 00007f47da77dff9 [ 151.413148][ T6517] RDX: 0000000000000001 RSI: 0000000020001a40 RDI: 0000000000000003 [ 151.421140][ T6517] RBP: 00007f47db634090 R08: 0000000000000000 R09: 0000000000000000 [ 151.429110][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.437074][ T6517] R13: 0000000000000000 R14: 00007f47da935f80 R15: 00007ffd94f33828 [ 151.445050][ T6517] [ 151.477111][ T25] usb 4-1: USB disconnect, device number 8 [ 152.845639][ T6527] FAULT_INJECTION: forcing a failure. [ 152.845639][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 152.897532][ T6527] CPU: 1 UID: 0 PID: 6527 Comm: syz.1.286 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 152.908166][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.918216][ T6527] Call Trace: [ 152.921485][ T6527] [ 152.924406][ T6527] dump_stack_lvl+0x241/0x360 [ 152.929112][ T6527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.934311][ T6527] ? __pfx__printk+0x10/0x10 [ 152.938896][ T6527] ? ref_tracker_alloc+0x332/0x490 [ 152.943998][ T6527] should_fail_ex+0x3b0/0x4e0 [ 152.948677][ T6527] ? skb_clone+0x20c/0x390 [ 152.953095][ T6527] should_failslab+0xac/0x100 [ 152.957770][ T6527] ? skb_clone+0x20c/0x390 [ 152.962175][ T6527] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 152.967537][ T6527] skb_clone+0x20c/0x390 [ 152.971767][ T6527] __netlink_deliver_tap+0x3cc/0x7c0 [ 152.977045][ T6527] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.982226][ T6527] netlink_deliver_tap+0x19d/0x1b0 [ 152.987351][ T6527] netlink_sendskb+0x68/0x140 [ 152.992023][ T6527] netlink_unicast+0x39d/0x990 [ 152.996782][ T6527] ? __asan_memcpy+0x40/0x70 [ 153.001367][ T6527] ? __pfx_netlink_unicast+0x10/0x10 [ 153.006648][ T6527] netlink_rcv_skb+0x262/0x430 [ 153.011416][ T6527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.016430][ T6527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.021729][ T6527] ? __netlink_deliver_tap+0x77e/0x7c0 [ 153.027218][ T6527] genl_rcv+0x28/0x40 [ 153.031204][ T6527] netlink_unicast+0x7f6/0x990 [ 153.035975][ T6527] ? __pfx_netlink_unicast+0x10/0x10 [ 153.041257][ T6527] ? __virt_addr_valid+0x183/0x530 [ 153.046369][ T6527] ? __check_object_size+0x48e/0x900 [ 153.051657][ T6527] netlink_sendmsg+0x8e4/0xcb0 [ 153.056418][ T6527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.061694][ T6527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.066965][ T6527] __sock_sendmsg+0x221/0x270 [ 153.071656][ T6527] ____sys_sendmsg+0x52a/0x7e0 [ 153.076413][ T6527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.081694][ T6527] __sys_sendmsg+0x292/0x380 [ 153.086291][ T6527] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.091433][ T6527] ? __pfx_vfs_write+0x10/0x10 [ 153.096238][ T6527] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.102584][ T6527] ? do_syscall_64+0x100/0x230 [ 153.107347][ T6527] ? do_syscall_64+0xb6/0x230 [ 153.112017][ T6527] do_syscall_64+0xf3/0x230 [ 153.116516][ T6527] ? clear_bhb_loop+0x35/0x90 [ 153.121181][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.127063][ T6527] RIP: 0033:0x7fd603d7dff9 [ 153.131464][ T6527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.151055][ T6527] RSP: 002b:00007fd604b12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.159456][ T6527] RAX: ffffffffffffffda RBX: 00007fd603f35f80 RCX: 00007fd603d7dff9 [ 153.167414][ T6527] RDX: 0000000000000850 RSI: 0000000020000240 RDI: 0000000000000003 [ 153.175372][ T6527] RBP: 00007fd604b12090 R08: 0000000000000000 R09: 0000000000000000 [ 153.183329][ T6527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.191287][ T6527] R13: 0000000000000000 R14: 00007fd603f35f80 R15: 00007ffcab537d38 [ 153.199303][ T6527] [ 153.356416][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.936818][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 154.102310][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 154.112163][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 154.122424][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.130939][ T25] usb 5-1: Product: 힨免띋鷃ꍝ [ 154.136902][ T25] usb 5-1: Manufacturer: ࠠ [ 154.141887][ T25] usb 5-1: SerialNumber: ఊ [ 154.306554][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 154.585080][ T6544] FAULT_INJECTION: forcing a failure. [ 154.585080][ T6544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.598315][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.1.291 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 154.608922][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.619005][ T6544] Call Trace: [ 154.622293][ T6544] [ 154.625238][ T6544] dump_stack_lvl+0x241/0x360 [ 154.629957][ T6544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.635192][ T6544] ? __pfx__printk+0x10/0x10 [ 154.639828][ T6544] should_fail_ex+0x3b0/0x4e0 [ 154.644532][ T6544] _copy_from_user+0x2f/0xe0 [ 154.649144][ T6544] copy_msghdr_from_user+0xae/0x680 [ 154.654365][ T6544] ? do_raw_spin_unlock+0x13c/0x8b0 [ 154.659591][ T6544] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 154.665430][ T6544] __sys_recvmsg+0x24c/0x3d0 [ 154.670041][ T6544] ? __pfx___sys_recvmsg+0x10/0x10 [ 154.675191][ T6544] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.681541][ T6544] ? do_syscall_64+0x100/0x230 [ 154.686322][ T6544] ? do_syscall_64+0xb6/0x230 [ 154.691022][ T6544] do_syscall_64+0xf3/0x230 [ 154.695542][ T6544] ? clear_bhb_loop+0x35/0x90 [ 154.700240][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.706150][ T6544] RIP: 0033:0x7fd603d7dff9 [ 154.710582][ T6544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.730211][ T6544] RSP: 002b:00007fd604ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 154.738649][ T6544] RAX: ffffffffffffffda RBX: 00007fd603f36130 RCX: 00007fd603d7dff9 [ 154.746633][ T6544] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000009 [ 154.754612][ T6544] RBP: 00007fd604ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 154.762596][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.770576][ T6544] R13: 0000000000000000 R14: 00007fd603f36130 R15: 00007ffcab537d38 [ 154.778594][ T6544] [ 155.226991][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.643159][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.909410][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.957933][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.966748][ T5342] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.774450][ T25] usbhid 5-1:1.0: can't add hid device: -71 [ 156.784837][ T25] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 156.797061][ T25] usb 5-1: USB disconnect, device number 5 [ 156.847662][ T5342] usb 2-1: Using ep0 maxpacket: 32 [ 156.857346][ T5342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.867700][ T5342] usb 2-1: config 5 has an invalid interface number: 232 but max is 0 [ 156.875917][ T5342] usb 2-1: config 5 has no interface number 0 [ 156.902511][ T5342] usb 2-1: config 5 interface 232 altsetting 128 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.913270][ T5342] usb 2-1: config 5 interface 232 has no altsetting 0 [ 156.924393][ T5342] usb 2-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=8f.78 [ 156.944018][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.976492][ T5342] usb 2-1: Product: syz [ 156.983546][ T5342] usb 2-1: Manufacturer: syz [ 156.995043][ T5342] usb 2-1: SerialNumber: syz [ 157.117377][ T5269] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 157.257188][ T6567] FAULT_INJECTION: forcing a failure. [ 157.257188][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 157.270133][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.4.295 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 157.280742][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.290813][ T6567] Call Trace: [ 157.294144][ T6567] [ 157.297120][ T6567] dump_stack_lvl+0x241/0x360 [ 157.301823][ T6567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.307040][ T6567] ? __pfx__printk+0x10/0x10 [ 157.311648][ T6567] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 157.317558][ T6567] ? __pfx___might_resched+0x10/0x10 [ 157.322866][ T6567] should_fail_ex+0x3b0/0x4e0 [ 157.327571][ T6567] should_failslab+0xac/0x100 [ 157.332269][ T6567] __kmalloc_cache_node_noprof+0x74/0x300 [ 157.338002][ T6567] ? __get_vm_area_node+0x113/0x270 [ 157.343217][ T6567] __get_vm_area_node+0x113/0x270 [ 157.348263][ T6567] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 157.354177][ T6567] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 157.359745][ T6567] ? finish_task_switch+0x1e5/0x870 [ 157.364960][ T6567] ? lockdep_hardirqs_on+0x99/0x150 [ 157.370178][ T6567] ? __schedule+0x1862/0x4b70 [ 157.374950][ T6567] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 157.381311][ T6567] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 157.386873][ T6567] __vmalloc_noprof+0x79/0x90 [ 157.391570][ T6567] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 157.397135][ T6567] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 157.402529][ T6567] ? bpf_prog_alloc+0x28/0x1b0 [ 157.407312][ T6567] bpf_prog_alloc+0x3a/0x1b0 [ 157.411946][ T6567] bpf_prog_load+0x7f7/0x20f0 [ 157.416664][ T6567] ? __pfx_bpf_prog_load+0x10/0x10 [ 157.421804][ T6567] ? _copy_from_user+0x11/0xe0 [ 157.426594][ T6567] ? rep_movs_alternative+0x4a/0x70 [ 157.431816][ T6567] __sys_bpf+0x4ee/0x810 [ 157.436078][ T6567] ? __pfx___sys_bpf+0x10/0x10 [ 157.440876][ T6567] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 157.446882][ T6567] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.453227][ T6567] ? do_syscall_64+0x100/0x230 [ 157.458008][ T6567] __x64_sys_bpf+0x7c/0x90 [ 157.462437][ T6567] do_syscall_64+0xf3/0x230 [ 157.466960][ T6567] ? clear_bhb_loop+0x35/0x90 [ 157.471650][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.477560][ T6567] RIP: 0033:0x7f47da77dff9 [ 157.481992][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.501617][ T6567] RSP: 002b:00007f47db5f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.510054][ T6567] RAX: ffffffffffffffda RBX: 00007f47da936130 RCX: 00007f47da77dff9 [ 157.518042][ T6567] RDX: 0000000000000094 RSI: 0000000020000840 RDI: 0000000000000005 [ 157.526024][ T6567] RBP: 00007f47db5f2090 R08: 0000000000000000 R09: 0000000000000000 [ 157.534008][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.541990][ T6567] R13: 0000000000000000 R14: 00007f47da936130 R15: 00007ffd94f33828 [ 157.549989][ T6567] [ 157.553768][ T6567] syz.4.295: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 157.570539][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.4.295 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 157.581144][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.591210][ T6567] Call Trace: [ 157.594497][ T6567] [ 157.597438][ T6567] dump_stack_lvl+0x241/0x360 [ 157.602137][ T6567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.607350][ T6567] ? __pfx__printk+0x10/0x10 [ 157.611970][ T6567] ? __rcu_read_unlock+0xa1/0x110 [ 157.617029][ T6567] warn_alloc+0x278/0x410 [ 157.621381][ T6567] ? __pfx_warn_alloc+0x10/0x10 [ 157.626242][ T6567] ? __get_vm_area_node+0x113/0x270 [ 157.631447][ T6567] ? __get_vm_area_node+0x261/0x270 [ 157.636647][ T6567] __vmalloc_node_range_noprof+0x3cb/0x13f0 [ 157.642538][ T6567] ? finish_task_switch+0x1e5/0x870 [ 157.647732][ T6567] ? lockdep_hardirqs_on+0x99/0x150 [ 157.652943][ T6567] ? __schedule+0x1862/0x4b70 [ 157.657627][ T6567] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 157.663963][ T6567] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 157.669503][ T6567] __vmalloc_noprof+0x79/0x90 [ 157.674181][ T6567] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 157.679729][ T6567] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 157.685096][ T6567] ? bpf_prog_alloc+0x28/0x1b0 [ 157.689856][ T6567] bpf_prog_alloc+0x3a/0x1b0 [ 157.694443][ T6567] bpf_prog_load+0x7f7/0x20f0 [ 157.699140][ T6567] ? __pfx_bpf_prog_load+0x10/0x10 [ 157.704257][ T6567] ? _copy_from_user+0x11/0xe0 [ 157.709022][ T6567] ? rep_movs_alternative+0x4a/0x70 [ 157.714222][ T6567] __sys_bpf+0x4ee/0x810 [ 157.718469][ T6567] ? __pfx___sys_bpf+0x10/0x10 [ 157.723244][ T6567] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 157.729227][ T6567] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.735551][ T6567] ? do_syscall_64+0x100/0x230 [ 157.740311][ T6567] __x64_sys_bpf+0x7c/0x90 [ 157.744730][ T6567] do_syscall_64+0xf3/0x230 [ 157.749233][ T6567] ? clear_bhb_loop+0x35/0x90 [ 157.753925][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.759820][ T6567] RIP: 0033:0x7f47da77dff9 [ 157.764232][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.783832][ T6567] RSP: 002b:00007f47db5f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.792241][ T6567] RAX: ffffffffffffffda RBX: 00007f47da936130 RCX: 00007f47da77dff9 [ 157.800205][ T6567] RDX: 0000000000000094 RSI: 0000000020000840 RDI: 0000000000000005 [ 157.808178][ T6567] RBP: 00007f47db5f2090 R08: 0000000000000000 R09: 0000000000000000 [ 157.816142][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.824107][ T6567] R13: 0000000000000000 R14: 00007f47da936130 R15: 00007ffd94f33828 [ 157.832089][ T6567] [ 157.835949][ T6567] Mem-Info: [ 157.839145][ T6567] active_anon:232 inactive_anon:7490 isolated_anon:0 [ 157.839145][ T6567] active_file:15210 inactive_file:39929 isolated_file:0 [ 157.839145][ T6567] unevictable:768 dirty:66 writeback:0 [ 157.839145][ T6567] slab_reclaimable:9057 slab_unreclaimable:96684 [ 157.839145][ T6567] mapped:25020 shmem:4099 pagetables:949 [ 157.839145][ T6567] sec_pagetables:0 bounce:0 [ 157.839145][ T6567] kernel_misc_reclaimable:0 [ 157.839145][ T6567] free:1345055 free_pcp:1401 free_cma:0 [ 157.874464][ T6563] EXT4-fs (sda1): shut down requested (2) [ 157.884337][ T6567] Node 0 active_anon:928kB inactive_anon:29960kB active_file:60768kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100080kB dirty:264kB writeback:0kB shmem:14860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10728kB pagetables:3796kB sec_pagetables:0kB all_unreclaimable? no [ 157.884393][ T6567] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 157.884436][ T6567] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.884485][ T6567] lowmem_reserve[]: 0 2465 2466 0 0 [ 157.902902][ T6563] Aborting journal on device sda1-8. [ 157.923100][ T6567] [ 157.923114][ T6567] Node 0 DMA32 free:1435808kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:924kB inactive_anon:29924kB active_file:59984kB inactive_file:159664kB unevictable:1536kB writepending:264kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:4936kB free_cma:0kB [ 157.923173][ T6567] lowmem_reserve[]: 0 0 0 0 0 [ 157.923215][ T6567] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:784kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 157.923264][ T6567] lowmem_reserve[]: 0 0 0 0 0 [ 157.923306][ T6567] Node 1 Normal free:3929644kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.923356][ T6567] lowmem_reserve[]: 0 0 0 0 0 [ 157.923397][ T6567] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) [ 157.984193][ T5269] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 158.092351][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 158.097584][ T6567] 3*4096kB [ 158.114474][ T6564] netlink: 'syz.3.296': attribute type 30 has an invalid length. [ 158.116331][ T6567] (M) = 15360kB [ 158.138940][ T6567] Node 0 DMA32: 19*4kB (UME) 311*8kB (UME) 567*16kB (UME) 545*32kB (UME) 418*64kB (UME) 128*128kB (UM) 68*256kB (UME) 18*512kB (UM) 12*1024kB (ME) 7*2048kB (UME) 321*4096kB (UM) = 1440276kB [ 158.157806][ T6567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 158.169373][ T6567] Node 1 Normal: 191*4kB (UME) 54*8kB (UME) 44*16kB (UME) 186*32kB (UME) 92*64kB (UME) 35*128kB (UME) 15*256kB (UM) 10*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 950*4096kB (M) = 3929644kB [ 158.188018][ T6567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.197591][ T6567] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.206943][ T6567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.216899][ T6567] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.226176][ T6567] 59238 total pagecache pages [ 158.230886][ T6567] 0 pages in swap cache [ 158.235023][ T6567] Free swap = 124384kB [ 158.239226][ T6567] Total swap = 124996kB [ 158.243375][ T6567] 2097051 pages RAM [ 158.247454][ T6567] 0 pages HighMem/MovableOnly [ 158.252114][ T6567] 427074 pages reserved [ 158.256289][ T6567] 0 pages cma reserved [ 158.312257][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.323335][ T5342] dvb-usb: found a 'ASUS My Cinema U3000 Mini DVBT Tuner' in cold state, will try to load a firmware [ 158.342574][ T5342] usb 2-1: loading /lib/firmware/dvb-usb-dib0700-1.20.fw failed with error -5 [ 158.352092][ T5342] usb 2-1: Direct firmware load for dvb-usb-dib0700-1.20.fw failed with error -5 [ 158.361616][ T5342] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dib0700-1.20.fw [ 158.376331][ T5269] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 158.385410][ T5269] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 158.394803][ T5269] usb 1-1: Manufacturer: syz [ 158.407349][ T5269] usb 1-1: config 0 descriptor?? [ 158.424236][ T5269] rc_core: Couldn't load IR keymap rc-hauppauge [ 158.431296][ T5269] Registered IR keymap rc-empty [ 158.432815][ T5269] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 158.449464][ T5269] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 158.587107][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 158.633455][ T6575] netlink: 124 bytes leftover after parsing attributes in process `syz.4.299'. [ 158.643410][ T6575] tipc: Started in network mode [ 158.654768][ T6575] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 158.668934][ T6575] tipc: Enabled bearer , priority 0 [ 158.770162][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.788177][ T25] usb 3-1: config 0 has no interfaces? [ 158.793748][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 158.826624][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.859170][ T25] usb 3-1: config 0 descriptor?? [ 158.949545][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.991475][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.112217][ T8] usb 1-1: USB disconnect, device number 14 [ 159.140508][ T5274] usb 3-1: USB disconnect, device number 12 [ 159.686623][ T25] tipc: Node number set to 10922666 [ 159.915707][ T6587] No such timeout policy "syz0" [ 160.027194][ T5271] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.196382][ T5271] usb 5-1: Using ep0 maxpacket: 16 [ 160.228584][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.261104][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.271517][ T6592] Process accounting resumed [ 160.292181][ T5271] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.319105][ T5271] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.331378][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.350181][ T5271] usb 5-1: config 0 descriptor?? [ 160.583602][ T6606] netlink: 104 bytes leftover after parsing attributes in process `syz.0.310'. [ 161.026720][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.168253][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.321191][ T5271] usbhid 5-1:0.0: can't add hid device: -71 [ 161.333786][ T5271] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 161.364180][ T5271] usb 5-1: USB disconnect, device number 6 [ 161.712204][ T6623] fuse: Unknown parameter '000000000000000000000060x0000000000000008' [ 163.680685][ T6635] overlayfs: missing 'lowerdir' [ 163.756790][ T6640] No buffer was provided with the request [ 165.996559][ T6659] FAULT_INJECTION: forcing a failure. [ 165.996559][ T6659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.010043][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.2.324 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 166.020637][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.030695][ T6659] Call Trace: [ 166.033970][ T6659] [ 166.036897][ T6659] dump_stack_lvl+0x241/0x360 [ 166.041573][ T6659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.046756][ T6659] ? __pfx__printk+0x10/0x10 [ 166.051330][ T6659] ? snprintf+0xda/0x120 [ 166.055562][ T6659] should_fail_ex+0x3b0/0x4e0 [ 166.060232][ T6659] _copy_to_user+0x2f/0xb0 [ 166.064638][ T6659] simple_read_from_buffer+0xca/0x150 [ 166.070004][ T6659] proc_fail_nth_read+0x1e9/0x250 [ 166.075018][ T6659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.080553][ T6659] ? rw_verify_area+0x55e/0x6f0 [ 166.085388][ T6659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.090921][ T6659] vfs_read+0x201/0xbc0 [ 166.095065][ T6659] ? __pfx_lock_release+0x10/0x10 [ 166.100081][ T6659] ? __pfx_vfs_read+0x10/0x10 [ 166.104753][ T6659] ? __fget_files+0x3f3/0x470 [ 166.109425][ T6659] ? fdget_pos+0x24e/0x320 [ 166.113835][ T6659] ksys_read+0x183/0x2b0 [ 166.118067][ T6659] ? __pfx_ksys_read+0x10/0x10 [ 166.122825][ T6659] ? do_syscall_64+0x100/0x230 [ 166.127579][ T6659] ? do_syscall_64+0xb6/0x230 [ 166.132245][ T6659] do_syscall_64+0xf3/0x230 [ 166.136732][ T6659] ? clear_bhb_loop+0x35/0x90 [ 166.141393][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.147273][ T6659] RIP: 0033:0x7f680bb7ca3c [ 166.151672][ T6659] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 166.171263][ T6659] RSP: 002b:00007f680c8e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.179666][ T6659] RAX: ffffffffffffffda RBX: 00007f680bd36130 RCX: 00007f680bb7ca3c [ 166.187622][ T6659] RDX: 000000000000000f RSI: 00007f680c8e90a0 RDI: 0000000000000006 [ 166.195597][ T6659] RBP: 00007f680c8e9090 R08: 0000000000000000 R09: 0000000000000000 [ 166.203566][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.211532][ T6659] R13: 0000000000000000 R14: 00007f680bd36130 R15: 00007ffc9d6f0cb8 [ 166.219521][ T6659] [ 167.499394][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 168.852038][ T6674] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.876457][ T6674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.894252][ T6674] Process accounting resumed SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 170.786380][ T5274] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.334410][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.469939][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.619097][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.671595][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.785181][ T1105] bridge_slave_1: left allmulticast mode [ 171.794043][ T1105] bridge_slave_1: left promiscuous mode [ 171.800738][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.811610][ T1105] bridge_slave_0: left allmulticast mode [ 171.817702][ T1105] bridge_slave_0: left promiscuous mode [ 171.823365][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.151493][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.164643][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.175437][ T1105] bond0 (unregistering): Released all slaves [ 172.400247][ T1105] hsr_slave_0: left promiscuous mode [ 172.406070][ T1105] hsr_slave_1: left promiscuous mode [ 172.412197][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.419717][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.430421][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.438254][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.460569][ T1105] veth1_macvtap: left promiscuous mode [ 172.466104][ T1105] veth0_macvtap: left promiscuous mode [ 172.471926][ T1105] veth1_vlan: left promiscuous mode [ 172.477333][ T1105] veth0_vlan: left promiscuous mode [ 172.833072][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 172.869159][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 173.544153][ T1105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.613119][ T1105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.671456][ T1105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.751464][ T1105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.896609][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.973316][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.058254][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.124187][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.290409][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.364740][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.429082][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.494703][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.629844][ T1105] bridge_slave_1: left allmulticast mode [ 174.643358][ T1105] bridge_slave_1: left promiscuous mode [ 174.650829][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.659456][ T1105] bridge_slave_0: left allmulticast mode [ 174.665100][ T1105] bridge_slave_0: left promiscuous mode [ 174.671290][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.682290][ T1105] bridge_slave_1: left allmulticast mode [ 174.689535][ T1105] bridge_slave_1: left promiscuous mode [ 174.695196][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.706389][ T1105] bridge_slave_0: left allmulticast mode [ 174.712067][ T1105] bridge_slave_0: left promiscuous mode [ 174.719053][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.728188][ T1105] bridge_slave_1: left allmulticast mode [ 174.733831][ T1105] bridge_slave_1: left promiscuous mode [ 174.739986][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.749223][ T1105] bridge_slave_0: left allmulticast mode [ 174.754870][ T1105] bridge_slave_0: left promiscuous mode [ 174.761050][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.772488][ T1105] tipc: Resetting bearer [ 175.253264][ T1105] tipc: Disabling bearer [ 175.519965][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.532359][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.542809][ T1105] bond0 (unregistering): Released all slaves [ 175.648288][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.659223][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.670877][ T1105] bond0 (unregistering): Released all slaves [ 175.769175][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.779786][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.790470][ T1105] bond0 (unregistering): Released all slaves [ 175.874815][ T1105] tipc: Left network mode [ 176.366551][ T1105] hsr_slave_0: left promiscuous mode [ 176.372342][ T1105] hsr_slave_1: left promiscuous mode [ 176.378609][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.386005][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.395883][ T1105] hsr_slave_0: left promiscuous mode [ 176.403773][ T1105] hsr_slave_1: left promiscuous mode [ 176.409988][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.417545][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.425138][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.432713][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.442651][ T1105] hsr_slave_0: left promiscuous mode [ 176.449259][ T1105] hsr_slave_1: left promiscuous mode [ 176.454990][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.462598][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.470301][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.478284][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.513465][ T1105] veth1_macvtap: left promiscuous mode [ 176.519056][ T1105] veth0_macvtap: left promiscuous mode [ 176.524616][ T1105] veth1_vlan: left promiscuous mode [ 176.530055][ T1105] veth0_vlan: left promiscuous mode [ 176.537522][ T1105] veth1_macvtap: left promiscuous mode [ 176.543049][ T1105] veth0_macvtap: left promiscuous mode [ 176.548971][ T1105] veth1_vlan: left promiscuous mode [ 176.554235][ T1105] veth0_vlan: left promiscuous mode [ 176.562452][ T1105] veth1_macvtap: left promiscuous mode [ 176.568049][ T1105] veth0_macvtap: left promiscuous mode [ 176.574548][ T1105] veth1_vlan: left promiscuous mode [ 176.580035][ T1105] veth0_vlan: left promiscuous mode [ 177.043623][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 177.084745][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 177.731649][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 177.768438][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 178.374588][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 178.411935][ T1105] team0 (unregistering): Port device team_slave_0 removed