last executing test programs: 12.895518442s ago: executing program 4 (id=21): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_read(r3, 0x2, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000200)="0e00300000000100000000020000") syz_usb_ep_read(r3, 0x2, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, &(0x7f0000000400)) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 9.715078926s ago: executing program 4 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0xa, 0x3, 0xff) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.005260063s ago: executing program 1 (id=28): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x402, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0xf000000, 0x0, 0x12}, 0x4004004) 8.635148657s ago: executing program 3 (id=29): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 8.062241029s ago: executing program 1 (id=31): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x1033, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000003e00010324bd7002fadbdf250100000015c808d7fb6f859e5ee606a1c63a3edc28797f2a0c7b9524844601e45d9eceab8765253d2adb194f6dba4e47ecb70d3ac6d164cd3fcadcdc564021f5f5cd07db8dfc733b019e238a7be3d52e5acd789d6e74b228743d7ef48136a9136419b39db6b0cf7949c5c23ba8436da54694ce8caf5883d0f95933b6dafc40730e581fced77d"], 0x14}}, 0xc084) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a010100081a0000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000002c0069942800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a3000000000140000001100010000000000000000000000000a8155cd123a9ec8441e98547fe5bb88e7ea9caa93ef18637b"], 0xc8}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac5", 0x19, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r8, r7}, &(0x7f00000000c0)=""/83, 0x53, 0x0) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000400)={&(0x7f000016c000/0x3000)=nil, &(0x7f000008e000/0x3000)=nil, 0x3000}) syz_ublk_setup_io_uring(0x5774, &(0x7f0000000080)={0x0, 0x1a4e, 0x40, 0x0, 0xeb}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000002c0)={0x0, 0x8, 0x2007, 0x1}) 7.85172562s ago: executing program 3 (id=32): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.595017342s ago: executing program 4 (id=35): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(0xffffffffffffffff, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df8235646186", 0x58}, {&(0x7f0000000300)}, {0x0}], 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 7.039767565s ago: executing program 4 (id=36): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) 5.639404547s ago: executing program 1 (id=39): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0x7) socket$inet(0x2, 0xa, 0x200000) syz_usbip_server_init(0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x84) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x0, 0x0}) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_setup(0x64b, &(0x7f0000000040)={0x0, 0x8835c, 0x80, 0x1, 0x77}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 5.399914824s ago: executing program 2 (id=42): landlock_restrict_self(0xffffffffffffffff, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = timerfd_create(0x0, 0x80800) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 5.302877313s ago: executing program 2 (id=43): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) close(0x3) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 4.839348363s ago: executing program 2 (id=45): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) clock_gettime(0x9, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0xa2, 0x1, 0x0, 0x0, 0x7}, 0x1c) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59508000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff020000000000000000000000000001080008000207"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400a59500000000000000000a6800c8", @ANYRES32=r2, @ANYBLOB="14000200ff0200"/19], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@remote, 0x0}, &(0x7f0000000180)=0x14) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) unshare(0x2c020400) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x2000000000000289, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="d9ea693249cd0180c200000086dd61fbddf000083aff00000000000000000000ffffac1e0001ff0200000000000000000000000000018100907800020004"], 0x0) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', r2, 0x2f, 0x5, 0x65, 0x1ff, 0x20, @loopback, @loopback, 0x40, 0x20, 0x7299, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, &(0x7f00000001c0), &(0x7f0000001480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 4.733955718s ago: executing program 3 (id=46): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r0, 0x1269, 0x0) 4.52963298s ago: executing program 1 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) 4.464914837s ago: executing program 3 (id=49): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.449079109s ago: executing program 2 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 4.184196739s ago: executing program 1 (id=51): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x0, 0x100, 0x1, 0x0, 0x808, 0xffff1000, 0x70000, '\x00', 0x4}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.301473142s ago: executing program 2 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x242d3c50, 0x2, 0x0, 0x8}}) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x109540, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x7fffffff, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) 3.297540656s ago: executing program 3 (id=54): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.159787031s ago: executing program 4 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x3, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) r3 = socket$unix(0x1, 0x1, 0x0) unshare(0x0) syz_emit_ethernet(0xfffffe9b, &(0x7f00000005c0)={@local, @broadcast, @void, {@llc_tr={0x11, {@llc={0xfe, 0xa, "3ccf", "d56f0e829bc74f9b7181685c4069124ace5855d8c4e1a269a2d7892f77273a572ad6c078b7a1d6b96ca8d14574533cf67da1f119c52b1125c16fef5e134a17b7c137d375a5ccae81d5d83320a39b6c584908a06930c69f654d4e4344a4418d78220929284e32db1f06a60460f8f3578254e0c3aa46f4eafa429a2788c8b0d178d1d4968626f535d205ecf8f4d3c898df267c499e63876c194081da7077bfec4d063094bf9f01bdeb15c0828852ea54f19b02"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xf}}], 0x1, 0x24008000) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) socket$unix(0x1, 0x1, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000980)=@ethtool_coalesce={0xe, 0x2, 0x5a6, 0x400, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x38, 0x1ff, 0x5, 0xfffffffd, 0x8, 0x2, 0xb, 0x81, 0x4, 0xfffff20f, 0x1, 0x3, 0x73, 0x9}}) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c01000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ffffffff000000000000000000000000050000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000c0ff00000000000000000004"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2e"], 0xe0}], 0x1}, 0x2000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) writev(r8, &(0x7f0000000040), 0x2) 3.0793276s ago: executing program 0 (id=56): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0xd25f8e34d7c46251, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x6, {0x2, 0xf0}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) 939.418087ms ago: executing program 2 (id=57): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8003}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r3, 0x0, 0x3, 0x1}}, 0x20) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_ublk_setup_io_uring(0x5885, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x84084) syz_io_uring_setup(0xefe, &(0x7f00000004c0)={0x0, 0x56a6, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000300)=0x0, &(0x7f0000000540)) syz_io_uring_modify_offsets$flags(r6, r9, 0x38, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000400)={0xffffffff, 0xfffffff8, 0xffffffff, 0x2}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) 815.709899ms ago: executing program 0 (id=58): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 619.844351ms ago: executing program 0 (id=59): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 541.300235ms ago: executing program 4 (id=60): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) getpid() socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x0, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 533.062852ms ago: executing program 0 (id=61): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 431.885008ms ago: executing program 1 (id=62): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="44001029", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000050004000100000006001a004e230000050021000100000008001800ac1414bb06000300070000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x31) write(r2, &(0x7f0000000140)='off', 0x3) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) write(r2, &(0x7f0000000180)='on', 0x2) 267.53888ms ago: executing program 0 (id=63): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 48.456937ms ago: executing program 0 (id=64): syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806"], 0x0) 0s ago: executing program 3 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 82.983626][ T5573] cgroup: Unknown subsys name 'net' [ 83.228013][ T5573] cgroup: Unknown subsys name 'cpuset' [ 83.300848][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.071552][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.515945][ T5586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.522378][ T5586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.525912][ T5586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.545656][ T5586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.554387][ T5586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.621438][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.644542][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.655225][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.656338][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.682443][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.685836][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.688540][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.699248][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.713924][ T4902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.714553][ T4902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.731922][ T4902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.770857][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.772541][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.775659][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.777929][ T4902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.822472][ T5586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.846598][ T5586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.848422][ T5586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.874815][ T4902] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.877346][ T4902] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.614009][ T5597] Bluetooth: hci0: command tx timeout [ 89.770406][ T5597] Bluetooth: hci1: command tx timeout [ 89.930397][ T4902] Bluetooth: hci4: command tx timeout [ 89.930503][ T5586] Bluetooth: hci2: command tx timeout [ 89.930592][ T5597] Bluetooth: hci3: command tx timeout [ 90.253540][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.254203][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.254342][ T5589] bridge_slave_0: entered allmulticast mode [ 90.256240][ T5589] bridge_slave_0: entered promiscuous mode [ 90.331270][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.331384][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.331534][ T5589] bridge_slave_1: entered allmulticast mode [ 90.334569][ T5589] bridge_slave_1: entered promiscuous mode [ 90.336183][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.336293][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.336405][ T5590] bridge_slave_0: entered allmulticast mode [ 90.338467][ T5590] bridge_slave_0: entered promiscuous mode [ 90.394925][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.395145][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.395292][ T5588] bridge_slave_0: entered allmulticast mode [ 90.397218][ T5588] bridge_slave_0: entered promiscuous mode [ 90.445512][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.445623][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.445931][ T5590] bridge_slave_1: entered allmulticast mode [ 90.448288][ T5590] bridge_slave_1: entered promiscuous mode [ 90.449720][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.449830][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.460144][ T5583] bridge_slave_0: entered allmulticast mode [ 90.466440][ T5583] bridge_slave_0: entered promiscuous mode [ 90.486289][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.486649][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.487030][ T5588] bridge_slave_1: entered allmulticast mode [ 90.497498][ T5588] bridge_slave_1: entered promiscuous mode [ 90.565541][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.565657][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.565764][ T5583] bridge_slave_1: entered allmulticast mode [ 90.567774][ T5583] bridge_slave_1: entered promiscuous mode [ 90.602773][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.602900][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.603021][ T5585] bridge_slave_0: entered allmulticast mode [ 90.604653][ T5585] bridge_slave_0: entered promiscuous mode [ 90.617404][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.713642][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.713758][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.713912][ T5585] bridge_slave_1: entered allmulticast mode [ 90.715997][ T5585] bridge_slave_1: entered promiscuous mode [ 90.719319][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.736829][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.775188][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.808142][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.820177][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.831598][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.878310][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.903550][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.905894][ T5589] team0: Port device team_slave_0 added [ 90.960556][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.963028][ T5589] team0: Port device team_slave_1 added [ 90.965101][ T5590] team0: Port device team_slave_0 added [ 90.997592][ T5588] team0: Port device team_slave_0 added [ 91.028216][ T5590] team0: Port device team_slave_1 added [ 91.029925][ T5583] team0: Port device team_slave_0 added [ 91.042891][ T5588] team0: Port device team_slave_1 added [ 91.109282][ T5583] team0: Port device team_slave_1 added [ 91.130001][ T5585] team0: Port device team_slave_0 added [ 91.133968][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.134008][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.134069][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.219902][ T5585] team0: Port device team_slave_1 added [ 91.223372][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.223411][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.223479][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.229014][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.229046][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.229117][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.300051][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.300149][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.301446][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.374011][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.374021][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.374038][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.375070][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.375080][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.375096][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.376438][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.376451][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.376476][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.504429][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.504456][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.504518][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.548580][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.548628][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.548696][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.617851][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.617861][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.617878][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.690655][ T5597] Bluetooth: hci0: command tx timeout [ 91.712556][ T5589] hsr_slave_0: entered promiscuous mode [ 91.713436][ T5589] hsr_slave_1: entered promiscuous mode [ 91.782436][ T1239] cfg80211: failed to load regulatory.db [ 91.850411][ T5597] Bluetooth: hci1: command tx timeout [ 92.010507][ T5586] Bluetooth: hci4: command tx timeout [ 92.010541][ T5586] Bluetooth: hci2: command tx timeout [ 92.010689][ T5597] Bluetooth: hci3: command tx timeout [ 92.248193][ T5590] hsr_slave_0: entered promiscuous mode [ 92.249054][ T5590] hsr_slave_1: entered promiscuous mode [ 92.249741][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 92.249825][ T5590] Cannot create hsr debugfs directory [ 92.306046][ T5588] hsr_slave_0: entered promiscuous mode [ 92.307050][ T5588] hsr_slave_1: entered promiscuous mode [ 92.307703][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 92.307727][ T5588] Cannot create hsr debugfs directory [ 92.335426][ T5583] hsr_slave_0: entered promiscuous mode [ 92.336261][ T5583] hsr_slave_1: entered promiscuous mode [ 92.336918][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 92.336940][ T5583] Cannot create hsr debugfs directory [ 92.396695][ T5585] hsr_slave_0: entered promiscuous mode [ 92.397546][ T5585] hsr_slave_1: entered promiscuous mode [ 92.398118][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 92.398138][ T5585] Cannot create hsr debugfs directory [ 93.292098][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.323848][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.328030][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.361685][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.363861][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.393863][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.416776][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.454922][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.557476][ T5588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.583847][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.588147][ T5588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.623573][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.642080][ T5588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.684380][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.708521][ T5588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.734499][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.770345][ T5597] Bluetooth: hci0: command tx timeout [ 93.844780][ T5583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.874214][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.894563][ T5583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.930481][ T5597] Bluetooth: hci1: command tx timeout [ 93.934623][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.937992][ T5583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.974395][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.004334][ T5583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.034568][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.093178][ T5597] Bluetooth: hci3: command tx timeout [ 94.093209][ T5597] Bluetooth: hci2: command tx timeout [ 94.093234][ T5597] Bluetooth: hci4: command tx timeout [ 94.188571][ T5585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.213783][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.228392][ T5585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.266965][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.297702][ T5585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.323815][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.328719][ T5585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.353401][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.469562][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.487220][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.514729][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.518707][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.543897][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.550140][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.593850][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.609234][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.634395][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.693301][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.723237][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.759627][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.759922][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.803682][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.804946][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.870191][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.925999][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.942379][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.942528][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.998043][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.998273][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.066608][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.106999][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.133282][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.133403][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.204230][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.206994][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.288671][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.373459][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.415594][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.415803][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.496904][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.497059][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.538404][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.593890][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.594074][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.650747][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.650947][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.850596][ T5597] Bluetooth: hci0: command tx timeout [ 96.013072][ T5597] Bluetooth: hci1: command tx timeout [ 96.170411][ T5597] Bluetooth: hci4: command tx timeout [ 96.170444][ T5597] Bluetooth: hci2: command tx timeout [ 96.170467][ T5597] Bluetooth: hci3: command tx timeout [ 96.209872][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.637589][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.673046][ T5589] veth0_vlan: entered promiscuous mode [ 96.742067][ T5589] veth1_vlan: entered promiscuous mode [ 96.960652][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.963135][ T5589] veth0_macvtap: entered promiscuous mode [ 96.994878][ T5588] veth0_vlan: entered promiscuous mode [ 97.016427][ T5589] veth1_macvtap: entered promiscuous mode [ 97.066810][ T5588] veth1_vlan: entered promiscuous mode [ 97.157503][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.217308][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.272507][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.306897][ T5583] veth0_vlan: entered promiscuous mode [ 97.331047][ T5588] veth0_macvtap: entered promiscuous mode [ 97.433116][ T5588] veth1_macvtap: entered promiscuous mode [ 97.437548][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.465217][ T5583] veth1_vlan: entered promiscuous mode [ 97.796850][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.845539][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.986456][ T5585] veth0_vlan: entered promiscuous mode [ 98.003776][ T5583] veth0_macvtap: entered promiscuous mode [ 98.004568][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.004587][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.102405][ T5583] veth1_macvtap: entered promiscuous mode [ 98.161177][ T5585] veth1_vlan: entered promiscuous mode [ 98.309134][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.309152][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.443765][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.496076][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.496092][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.497988][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.598098][ T5590] veth0_vlan: entered promiscuous mode [ 98.736299][ T5585] veth0_macvtap: entered promiscuous mode [ 98.813624][ T5590] veth1_vlan: entered promiscuous mode [ 98.814590][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.814607][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.906770][ T5585] veth1_macvtap: entered promiscuous mode [ 99.220956][ T5777] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 99.225139][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.323098][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.418685][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.418701][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.517288][ T5590] veth0_macvtap: entered promiscuous mode [ 99.566677][ T5590] veth1_macvtap: entered promiscuous mode [ 99.796967][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.796989][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.892455][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.146418][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.166670][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 100.203855][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.312811][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.361285][ T9] usb 3-1: config 0 descriptor?? [ 100.607384][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.608346][ T211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.707051][ T9] cp210x 3-1:0.0: cp210x converter detected [ 101.596760][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.596778][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.677913][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 101.783609][ T9] usb 3-1: USB disconnect, device number 2 [ 102.040306][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 102.128708][ T9] cp210x 3-1:0.0: device disconnected [ 102.531747][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.531767][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.581773][ T91] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.038552][ T5794] input: syz0 as /devices/virtual/input/input5 [ 104.022836][ T91] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.026357][ T3378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.026653][ T3378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.026927][ T3378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.041023][ T3378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.185359][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.185373][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.736468][ T3270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.736489][ T3270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.795026][ T1183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.860619][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.861022][ T91] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.882552][ T3378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.883917][ T3378] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.883983][ T3378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.884107][ T3378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.105218][ T5808] capability: warning: `syz.2.12' uses deprecated v2 capabilities in a way that may be insecure [ 105.154679][ T3270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.155073][ T3270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.155664][ T3270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.155878][ T3270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.244056][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.427895][ T5816] loop5: detected capacity change from 0 to 7 [ 106.751631][ T5816] Dev loop5: unable to read RDB block 7 [ 106.751675][ T5816] loop5: AHDI p2 p3 [ 106.751695][ T5816] loop5: partition table partially beyond EOD, truncated [ 106.920556][ T5816] loop5: p3 start 335544320 is beyond EOD, truncated [ 107.451231][ T5821] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.424955][ T5824] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 110.612329][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.641516][ T5718] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.811694][ T5718] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 110.813166][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.813259][ T5718] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 110.813287][ T5718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 110.871701][ T36] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 110.873882][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.873906][ T5718] usb 4-1: Product: syz [ 110.873922][ T5718] usb 4-1: Manufacturer: syz [ 110.873938][ T5718] usb 4-1: SerialNumber: syz [ 110.921527][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.130551][ T5597] Bluetooth: hci2: command 0x2016 tx timeout [ 111.546625][ T5718] usb-storage 4-1:1.0: USB Mass Storage device detected [ 111.727594][ C1] dln2 5-1:1.0: short response: 0 [ 111.913563][ T36] dln2 5-1:1.0: failed to initialize hardware [ 111.928262][ T36] dln2 5-1:1.0: probe with driver dln2 failed with error -110 [ 111.984563][ T5718] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 112.136777][ T5846] nvme_fabrics: missing parameter 'transport=%s' [ 112.136792][ T5846] nvme_fabrics: missing parameter 'nqn=%s' [ 112.466635][ T10] usb 5-1: USB disconnect, device number 2 [ 112.518564][ T5847] nvme_fabrics: missing parameter 'transport=%s' [ 112.518578][ T5847] nvme_fabrics: missing parameter 'nqn=%s' [ 112.756587][ T5591] usb 4-1: USB disconnect, device number 2 [ 113.213513][ T5586] Bluetooth: hci2: command 0x2016 tx timeout [ 113.867704][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.022261][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 114.053207][ T10] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 114.053230][ T10] usb 5-1: Product: syz [ 114.053240][ T10] usb 5-1: SerialNumber: syz [ 114.071932][ T10] usb 5-1: config 0 descriptor?? [ 114.102793][ T5878] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 114.335839][ T10] hso 5-1:0.0: Failed to find BULK eps [ 114.581708][ T36] usb 5-1: USB disconnect, device number 3 [ 114.614178][ T5878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.143183][ T5776] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.246255][ T5892] Zero length message leads to an empty skb [ 115.364589][ T5776] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 115.367757][ T5776] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.379098][ T5776] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 115.434018][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.434035][ T5776] usb 1-1: Product: syz [ 115.434044][ T5776] usb 1-1: Manufacturer: syz [ 115.434054][ T5776] usb 1-1: SerialNumber: syz [ 115.516979][ T5776] usb-storage 1-1:1.0: USB Mass Storage device detected [ 115.557950][ T5776] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 115.580421][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.580745][ T5776] scsi host1: usb-storage 1-1:1.0 [ 115.687473][ T5905] input: syz0 as /devices/virtual/input/input7 [ 115.746877][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 115.749396][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.749414][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 115.749438][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.912078][ T5776] usb 1-1: USB disconnect, device number 2 [ 116.031249][ T10] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 116.200435][ T10] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 116.500465][ T196] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.640440][ T196] usb 5-1: device descriptor read/64, error -71 [ 116.875509][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 116.931232][ T196] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.073684][ T196] usb 5-1: device descriptor read/64, error -71 [ 117.181740][ T196] usb usb5-port1: attempt power cycle [ 117.394711][ T5919] syz.1.39 uses obsolete (PF_INET,SOCK_PACKET) [ 117.496058][ T5919] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 117.496086][ T5919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.506436][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 117.519920][ T5919] vhci_hcd vhci_hcd.0: Device attached [ 117.611306][ T196] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.631050][ T196] usb 5-1: device descriptor read/8, error -71 [ 117.674300][ T5925] vhci_hcd: connection closed [ 117.699005][ T1183] vhci_hcd vhci_hcd.1: stop threads [ 117.699653][ T1183] vhci_hcd vhci_hcd.1: release socket [ 117.750486][ T1183] vhci_hcd vhci_hcd.1: disconnect device [ 117.750520][ T5717] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 117.931136][ T196] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.960741][ T196] usb 5-1: device descriptor read/8, error -71 [ 118.080798][ T196] usb usb5-port1: unable to enumerate USB device [ 118.139906][ T196] usb 4-1: USB disconnect, device number 3 [ 118.155723][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 118.305675][ T196] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 118.315000][ T196] spcp8x5 4-1:1.0: device disconnected [ 120.744804][ T5960] netlink: 36 bytes leftover after parsing attributes in process `syz.4.55'. [ 120.749693][ T5960] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.55'. [ 120.752247][ T5960] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.55'. [ 121.530458][ T5685] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.150368][ T5685] usb 4-1: device descriptor read/64, error -71 [ 122.401712][ T5685] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.532020][ T5685] usb 4-1: device descriptor read/64, error -71 [ 122.643866][ T5685] usb usb4-port1: attempt power cycle [ 123.064738][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 123.064773][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 123.280489][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.331484][ T27] [ 123.331493][ T27] ====================================================== [ 123.331498][ T27] WARNING: possible circular locking dependency detected [ 123.331508][ T27] syzkaller #0 Not tainted [ 123.331515][ T27] ------------------------------------------------------ [ 123.331520][ T27] migration/1/27 is trying to acquire lock: [ 123.331533][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 123.331605][ T27] [ 123.331605][ T27] but task is already holding lock: [ 123.331610][ T27] ffff8880379aaa40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 123.331653][ T27] [ 123.331653][ T27] which lock already depends on the new lock. [ 123.331653][ T27] [ 123.331658][ T27] [ 123.331658][ T27] the existing dependency chain (in reverse order) is: [ 123.331663][ T27] [ 123.331663][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 123.331683][ T27] _raw_spin_lock+0x2e/0x40 [ 123.331697][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 123.331718][ T27] rt_spin_lock+0x165/0x400 [ 123.331737][ T27] fast_dput+0x2a4/0x690 [ 123.331756][ T27] dput+0x30/0x60 [ 123.331780][ T27] terminate_walk+0xb5/0x4c0 [ 123.331800][ T27] path_openat+0x139e/0x1d60 [ 123.331812][ T27] do_file_open+0x23e/0x4a0 [ 123.331824][ T27] do_open_execat+0x12b/0x590 [ 123.331843][ T27] alloc_bprm+0x24/0x640 [ 123.331855][ T27] kernel_execve+0x85/0x9c0 [ 123.331876][ T27] call_usermodehelper_exec_async+0x212/0x360 [ 123.331892][ T27] ret_from_fork+0x514/0xb70 [ 123.331913][ T27] ret_from_fork_asm+0x1a/0x30 [ 123.331925][ T27] [ 123.331925][ T27] -> #0 (_T->lock){....}-{2:2}: [ 123.331944][ T27] __lock_acquire+0x1520/0x2ce0 [ 123.331958][ T27] lock_acquire+0x106/0x350 [ 123.331972][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 123.331986][ T27] rt_spin_trylock+0x56/0x2b0 [ 123.332006][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 123.332021][ T27] kvfree_call_rcu+0xa4/0x430 [ 123.332035][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 123.332055][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 123.332074][ T27] select_fallback_rq+0x11e/0x200 [ 123.332095][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 123.332108][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 123.332127][ T27] smpboot_thread_fn+0x565/0xa70 [ 123.332145][ T27] kthread+0x38b/0x470 [ 123.332166][ T27] ret_from_fork+0x514/0xb70 [ 123.332186][ T27] ret_from_fork_asm+0x1a/0x30 [ 123.332197][ T27] [ 123.332197][ T27] other info that might help us debug this: [ 123.332197][ T27] [ 123.332202][ T27] Possible unsafe locking scenario: [ 123.332202][ T27] [ 123.332206][ T27] CPU0 CPU1 [ 123.332211][ T27] ---- ---- [ 123.332215][ T27] lock(&p->pi_lock); [ 123.332224][ T27] lock(_T->lock); [ 123.332234][ T27] lock(&p->pi_lock); [ 123.332244][ T27] lock(_T->lock); [ 123.332253][ T27] [ 123.332253][ T27] *** DEADLOCK *** [ 123.332253][ T27] [ 123.332257][ T27] locks held by migration/1/27: 2, last CPU#1: [ 123.332270][ T27] #0: ffff8880379aaa40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 123.332304][ T27] #1: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 123.332343][ T27] [ 123.332343][ T27] stack backtrace: [ 123.332358][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.332374][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.332383][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 123.332411][ T27] Call Trace: [ 123.332416][ T27] [ 123.332422][ T27] dump_stack_lvl+0xe8/0x150 [ 123.332444][ T27] print_circular_bug+0x2e1/0x300 [ 123.332465][ T27] check_noncircular+0x12e/0x150 [ 123.332487][ T27] __lock_acquire+0x1520/0x2ce0 [ 123.332503][ T27] ? __pfx_usage_match+0x10/0x10 [ 123.332525][ T27] ? __asan_memset+0x22/0x50 [ 123.332538][ T27] ? __enqueue_entity+0x74b/0xc60 [ 123.332554][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 123.332575][ T27] lock_acquire+0x106/0x350 [ 123.332589][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 123.332612][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 123.332635][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 123.332650][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 123.332671][ T27] rt_spin_trylock+0x56/0x2b0 [ 123.332694][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 123.332712][ T27] kvfree_call_rcu+0xa4/0x430 [ 123.332726][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 123.332751][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 123.332778][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 123.332799][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 123.332822][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 123.332854][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 123.332875][ T27] select_fallback_rq+0x11e/0x200 [ 123.332897][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 123.332911][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 123.332924][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 123.332939][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 123.332953][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 123.332978][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 123.332997][ T27] smpboot_thread_fn+0x565/0xa70 [ 123.333016][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 123.333037][ T27] kthread+0x38b/0x470 [ 123.333058][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 123.333088][ T27] ? __pfx_kthread+0x10/0x10 [ 123.333107][ T27] ret_from_fork+0x514/0xb70 [ 123.333128][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 123.333147][ T27] ? __switch_to+0xc89/0x1420 [ 123.333166][ T27] ? __pfx_kthread+0x10/0x10 [ 123.333185][ T27] ret_from_fork_asm+0x1a/0x30 [ 123.333202][ T27] [ 123.333212][ T27] process 5986 (syz.4.60) no longer affine to cpu1 [ 123.431508][ T31] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 123.436593][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.436668][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.640115][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.640414][ T31] usb 1-1: Product: syz [ 123.640478][ T31] usb 1-1: Manufacturer: syz [ 123.640507][ T31] usb 1-1: SerialNumber: syz [ 123.658801][ T31] usb-storage 1-1:1.0: USB Mass Storage device detected [ 123.685507][ T31] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 123.962027][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 123.962051][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 123.979575][ T5994] smpboot: CPU 1 is now offline [ 124.095139][ T5776] usb 1-1: USB disconnect, device number 3 [ 124.136361][ T5991] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 124.137291][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 124.137309][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 124.511099][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.670838][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 124.673794][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.673817][ T31] usb 3-1: Product: syz [ 124.673830][ T31] usb 3-1: Manufacturer: syz [ 124.673843][ T31] usb 3-1: SerialNumber: syz [ 124.915384][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 124.915423][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 124.915664][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 124.971268][ T31] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 127.261742][ T196] usb 3-1: USB disconnect, device number 3 [ 131.451594][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.451649][ T1331] ieee802154 phy1 wpan1: encryption failed: -22