last executing test programs: 14.57271432s ago: executing program 1 (id=260): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create(0x7d95) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80002028}) listen(r0, 0x7866) shutdown(r0, 0x0) 13.667956488s ago: executing program 1 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4044000) 13.501582901s ago: executing program 1 (id=265): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0xffffffff, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0xc, 0xf8, 0x8, 0x4ce, 0x9e9b, 0xa27, 0x401, 0x9, 0x8, 0x1000004, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x67a8, 0x4]}) 13.369265003s ago: executing program 1 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a010600000000000000000100"], 0x6c}, 0x1, 0x0, 0x0, 0x20008084}, 0x20008020) 8.424479905s ago: executing program 0 (id=277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xc008aeba, 0x0) 5.766337324s ago: executing program 0 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 5.609073927s ago: executing program 3 (id=281): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_usb_connect$uac3(0x4, 0xce, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/38, 0x26, 0x100000000004) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 5.607587665s ago: executing program 4 (id=282): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file1\x00', 0x2000, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x43403d0e, &(0x7f0000000140)) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x1118, 0x2, 0x3, 0x800000c5}, &(0x7f0000000240), &(0x7f0000000540), &(0x7f0000000f40)) 5.319806253s ago: executing program 2 (id=284): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) io_getevents(0x0, 0x4, 0x26, &(0x7f00000019c0), 0x0) 4.085462058s ago: executing program 4 (id=285): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x4000850) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r2, 0x0, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000640)='usbip-', 0x6) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x3ff, 0x9, 0x2, 0x1000, 0xf, 0x2, 0x3, 0x3, 0x80008, 0x3, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x98f2, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x6, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x40a6, &(0x7f00000000c0)={0x0, 0xadfe, 0x800, 0x0, 0x3ff}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x44050) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3.396231189s ago: executing program 2 (id=286): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x101002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/208, 0xd0, 0x8d39) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) chdir(0x0) socket(0x2b, 0x1, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x80008, 0x0) 2.424204014s ago: executing program 2 (id=287): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = semget$private(0x0, 0x0, 0x418) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000200)=""/188) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010049397842c316125fb62320a6ead92873790008000000d614000480080002406375fd82080001"], 0xb0}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000001300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='e&my_read_msr1 msr/read_msr', 0x1b) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r2}, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x10000, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='add syz0 127', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r6, &(0x7f00000000c0)='syz0\n\x00', 0x5) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 2.169441611s ago: executing program 3 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004007f00"], 0x50}}, 0xc0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES8=r1], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) bind$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @broadcast, 0x3}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000028001680080001000200000014000500fe8000000000000000000000000000010800070001000000"], 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000020001680080001000200000014000500fe800000000000000000000000000001"], 0x4c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) write(r5, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 2.165437414s ago: executing program 0 (id=289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x40000}, 0xc101) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000019c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000001a00)=0x40) 1.939113756s ago: executing program 0 (id=290): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$l2tp6(0xa, 0x2, 0x73) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$l2tp6(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 1.938677721s ago: executing program 4 (id=291): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x6384, 0x0, &(0x7f0000001040), &(0x7f0000000080), &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 1.834310363s ago: executing program 3 (id=292): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) write$dsp(r0, &(0x7f0000000200)="bb", 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) getresuid(0x0, 0x0, 0x0) r2 = timerfd_create(0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) inotify_init() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) 1.818289778s ago: executing program 4 (id=293): close(0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000100)={{[0x8001, 0xfffffffa, 0x9, 0x2]}, 0x0, 0x1, 0x1, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x5) io_setup(0x400, &(0x7f0000000080)=0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x2, 0x0, 0x27}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) r3 = syz_io_uring_setup(0x635a, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x80000000, 0x399}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x7) ioctl$UI_DEV_CREATE(r2, 0x5501) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 1.713281038s ago: executing program 2 (id=294): r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.581488879s ago: executing program 2 (id=295): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file1\x00', 0x2000, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x43403d0e, &(0x7f0000000140)) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x1118, 0x2, 0x3, 0x800000c5}, &(0x7f0000000240), &(0x7f0000000540), &(0x7f0000000f40)) 1.51385536s ago: executing program 4 (id=296): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)) io_setup(0x3, &(0x7f00000003c0)=0x0) io_getevents(r0, 0x4, 0x26, &(0x7f00000019c0), 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b000000000002f31f792da16fd327abc2aa14da7ef23a3921543bc1cfc4fff34c75dedcf4b91fceb5cc72fe1dad8f513fc4bf1fbf832fdad126cd49b9464af484a7d8381aa75e8e15d69c93353eac2c1181a3d0398b02ac3ac14256478cf9856c149bd3b30531"], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108f8ffffffffffffff070000000900010073797a30000000004c000000090a01042fbc47e500000000000000001700000008000a4053c154210900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000379534380240000800c00054000000000000000080c0004400000000000000003040002800400018014000000100001000000000000000000"], 0xe8}}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0xfff3}, {0x0, 0x4}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 932.160023ms ago: executing program 1 (id=297): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80004518, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)="34ca8a", 0x3) 771.988498ms ago: executing program 0 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) read$FUSE(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0xb35) 674.76291ms ago: executing program 3 (id=299): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008d010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100ffffffff9500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000082000000850000000600000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 606.321006ms ago: executing program 2 (id=300): pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0xfffffffffffffc01, 0x0) 403.285969ms ago: executing program 1 (id=301): ptrace(0x10, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r2, 0x7}, 0x14}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)={0x13, 0x65, 0xffff, 0xa45, 0x6, '9P2000'}, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='off', 0x3) 372.100753ms ago: executing program 0 (id=302): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @sdr={0x38414761, 0x391}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xe00) 356.712948ms ago: executing program 3 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004007f00"], 0x50}}, 0xc0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES8=r1], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) bind$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @broadcast, 0x3}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000028001680080001000200000014000500fe8000000000000000000000000000010800070001000000"], 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000020001680080001000200000014000500fe800000000000000000000000000001"], 0x4c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) write(r5, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 184.761634ms ago: executing program 4 (id=304): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = semget$private(0x0, 0x0, 0x418) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000200)=""/188) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010049397842c316125fb62320a6ead92873790008000000d614000480080002406375fd82080001"], 0xb0}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000001300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='e&my_read_msr1 msr/read_msr', 0x1b) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r2}, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x10000, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='add syz0 127', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r6, &(0x7f00000000c0)='syz0\n\x00', 0x5) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 0s ago: executing program 3 (id=305): r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 77.068290][ T5594] cgroup: Unknown subsys name 'net' [ 77.308487][ T5594] cgroup: Unknown subsys name 'cpuset' [ 77.364801][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.977228][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.396485][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.404534][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.419344][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.437667][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.441914][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.457670][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.460009][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.461195][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.461487][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.461875][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.462760][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.464542][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.468568][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.471674][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.476895][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.490012][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.495586][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.499674][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.501189][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.503446][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.506044][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.506702][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.508609][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.523804][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.566408][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.585236][ T4921] Bluetooth: hci4: command tx timeout [ 83.664263][ T4921] Bluetooth: hci2: command tx timeout [ 83.824387][ T5621] Bluetooth: hci1: command tx timeout [ 83.826303][ T5621] Bluetooth: hci0: command tx timeout [ 83.826505][ T4921] Bluetooth: hci3: command tx timeout [ 84.185880][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.187061][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.187303][ T5607] bridge_slave_0: entered allmulticast mode [ 84.189983][ T5607] bridge_slave_0: entered promiscuous mode [ 84.196489][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.196603][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.196747][ T5606] bridge_slave_0: entered allmulticast mode [ 84.200255][ T5606] bridge_slave_0: entered promiscuous mode [ 84.264225][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.264486][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.265042][ T5607] bridge_slave_1: entered allmulticast mode [ 84.267506][ T5607] bridge_slave_1: entered promiscuous mode [ 84.269452][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.269565][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.276763][ T5606] bridge_slave_1: entered allmulticast mode [ 84.279572][ T5606] bridge_slave_1: entered promiscuous mode [ 84.363166][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.363373][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.363577][ T5608] bridge_slave_0: entered allmulticast mode [ 84.368457][ T5608] bridge_slave_0: entered promiscuous mode [ 84.370261][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.370375][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.370843][ T5610] bridge_slave_0: entered allmulticast mode [ 84.376213][ T5610] bridge_slave_0: entered promiscuous mode [ 84.384009][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.384802][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.384969][ T5609] bridge_slave_0: entered allmulticast mode [ 84.387688][ T5609] bridge_slave_0: entered promiscuous mode [ 84.429068][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.429184][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.429329][ T5608] bridge_slave_1: entered allmulticast mode [ 84.433057][ T5608] bridge_slave_1: entered promiscuous mode [ 84.437310][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.437455][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.437913][ T5610] bridge_slave_1: entered allmulticast mode [ 84.441476][ T5610] bridge_slave_1: entered promiscuous mode [ 84.442765][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.442882][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.443339][ T5609] bridge_slave_1: entered allmulticast mode [ 84.447963][ T5609] bridge_slave_1: entered promiscuous mode [ 84.459216][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.465458][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.528697][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.532380][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.717366][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.723521][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.733083][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.764023][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.768101][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.771316][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.776612][ T5607] team0: Port device team_slave_0 added [ 84.780232][ T5606] team0: Port device team_slave_0 added [ 84.825521][ T5607] team0: Port device team_slave_1 added [ 84.831496][ T5606] team0: Port device team_slave_1 added [ 84.891343][ T5608] team0: Port device team_slave_0 added [ 84.898110][ T5610] team0: Port device team_slave_0 added [ 84.901534][ T5609] team0: Port device team_slave_0 added [ 84.939300][ T5608] team0: Port device team_slave_1 added [ 84.941975][ T5610] team0: Port device team_slave_1 added [ 84.945403][ T5609] team0: Port device team_slave_1 added [ 84.946759][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.946771][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.946790][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.952197][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.952211][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.952234][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.017405][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.017420][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.017444][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.019235][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.019248][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.019271][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.125692][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.125718][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.125742][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.127855][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.127868][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.127891][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.138584][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.138598][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.138622][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.143198][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.143211][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.143235][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.145935][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.145948][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.145971][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.150912][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.150925][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.150948][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.299151][ T5607] hsr_slave_0: entered promiscuous mode [ 85.300668][ T5607] hsr_slave_1: entered promiscuous mode [ 85.316006][ T5606] hsr_slave_0: entered promiscuous mode [ 85.317285][ T5606] hsr_slave_1: entered promiscuous mode [ 85.319544][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 85.319652][ T5606] Cannot create hsr debugfs directory [ 85.455284][ T5608] hsr_slave_0: entered promiscuous mode [ 85.457489][ T5608] hsr_slave_1: entered promiscuous mode [ 85.460386][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 85.460411][ T5608] Cannot create hsr debugfs directory [ 85.488763][ T5610] hsr_slave_0: entered promiscuous mode [ 85.492318][ T5610] hsr_slave_1: entered promiscuous mode [ 85.493128][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 85.493149][ T5610] Cannot create hsr debugfs directory [ 85.519166][ T5609] hsr_slave_0: entered promiscuous mode [ 85.520367][ T5609] hsr_slave_1: entered promiscuous mode [ 85.521175][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 85.521198][ T5609] Cannot create hsr debugfs directory [ 85.664290][ T4921] Bluetooth: hci4: command tx timeout [ 85.744403][ T4921] Bluetooth: hci2: command tx timeout [ 85.905249][ T4921] Bluetooth: hci3: command tx timeout [ 85.905410][ T5622] Bluetooth: hci0: command tx timeout [ 85.905435][ T5622] Bluetooth: hci1: command tx timeout [ 86.685280][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.709779][ T10] cfg80211: failed to load regulatory.db [ 86.730981][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.753734][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.778763][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.795903][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.836730][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.855548][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.898110][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.019605][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.048020][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.059974][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.088035][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.092591][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.110816][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.133394][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.168359][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.307350][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.359725][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.371223][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.408689][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.415610][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.458285][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.480087][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.516688][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.650290][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.678575][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.696510][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.739560][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.744410][ T4921] Bluetooth: hci4: command tx timeout [ 87.759642][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.788996][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.815170][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.824924][ T4921] Bluetooth: hci2: command tx timeout [ 87.847661][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.914051][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.985591][ T4921] Bluetooth: hci3: command tx timeout [ 87.985645][ T5622] Bluetooth: hci0: command tx timeout [ 87.985730][ T5621] Bluetooth: hci1: command tx timeout [ 87.992164][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.026793][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.039585][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.069119][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.088809][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.130705][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.138240][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.169271][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.181848][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.226578][ T3047] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.235547][ T3047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.274211][ T3047] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.274415][ T3047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.315649][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.404465][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.452981][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.474049][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.477035][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.509967][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.510188][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.567488][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.600430][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.638524][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.644867][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.701126][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.701299][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.800487][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.859146][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.860784][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.860858][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.912360][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.912579][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.048209][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.135936][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.136143][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.173937][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.175508][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.826535][ T4921] Bluetooth: hci4: command tx timeout [ 89.904609][ T4921] Bluetooth: hci2: command tx timeout [ 89.979431][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.064430][ T4921] Bluetooth: hci3: command tx timeout [ 90.076198][ T4921] Bluetooth: hci1: command tx timeout [ 90.076858][ T5621] Bluetooth: hci0: command tx timeout [ 90.480403][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.529959][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.847433][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.877458][ T5610] veth0_vlan: entered promiscuous mode [ 90.933301][ T5606] veth0_vlan: entered promiscuous mode [ 90.946062][ T5607] veth0_vlan: entered promiscuous mode [ 90.957645][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.972019][ T5610] veth1_vlan: entered promiscuous mode [ 90.987290][ T5606] veth1_vlan: entered promiscuous mode [ 91.003338][ T5607] veth1_vlan: entered promiscuous mode [ 91.122856][ T5609] veth0_vlan: entered promiscuous mode [ 91.156588][ T5610] veth0_macvtap: entered promiscuous mode [ 91.169550][ T5606] veth0_macvtap: entered promiscuous mode [ 91.191713][ T5609] veth1_vlan: entered promiscuous mode [ 91.197914][ T5607] veth0_macvtap: entered promiscuous mode [ 91.202061][ T5610] veth1_macvtap: entered promiscuous mode [ 91.209615][ T5608] veth0_vlan: entered promiscuous mode [ 91.215428][ T5606] veth1_macvtap: entered promiscuous mode [ 91.236497][ T5607] veth1_macvtap: entered promiscuous mode [ 91.265637][ T5608] veth1_vlan: entered promiscuous mode [ 91.282970][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.298421][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.312537][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.320202][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.337241][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.363827][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.401718][ T5609] veth0_macvtap: entered promiscuous mode [ 91.432219][ T5609] veth1_macvtap: entered promiscuous mode [ 91.656335][ T5608] veth0_macvtap: entered promiscuous mode [ 91.903899][ T5608] veth1_macvtap: entered promiscuous mode [ 92.080924][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.299907][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.358713][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.430301][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.446034][ T1364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.450632][ T1364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.509596][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.509667][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.660040][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.668401][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.943697][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.945595][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.332669][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.341610][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.377151][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.379499][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.714559][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.714619][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.720719][ T2957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.766317][ T2957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.786209][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.949709][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.949790][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.016193][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.019176][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.089426][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.089499][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.147183][ T2964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.352895][ T2964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353228][ T2964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353432][ T2964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353629][ T2964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353799][ T2964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.489263][ T36] audit: type=1326 audit(1788885222.802:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5806 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 94.489509][ T36] audit: type=1326 audit(1788885222.802:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5806 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 94.536457][ T2964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.536712][ T2964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.537095][ T2964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.571924][ T36] audit: type=1326 audit(1788885222.892:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5806 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 94.573367][ T36] audit: type=1326 audit(1788885222.892:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5806 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 94.573403][ T36] audit: type=1326 audit(1788885222.892:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5806 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 94.573432][ T36] audit: type=1326 audit(1788885222.892:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5806 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 94.573462][ T36] audit: type=1326 audit(1788885222.892:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5806 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 94.573507][ T36] audit: type=1326 audit(1788885222.892:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5806 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 94.756279][ T2964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.817367][ T2975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.918179][ T2964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920375][ T2964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920416][ T2964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920450][ T2964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920483][ T2964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.922806][ T2964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.922845][ T2964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.433027][ T5808] syz.0.1 (5808) used greatest stack depth: 18912 bytes left [ 96.980430][ T5747] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.298772][ T5845] Zero length message leads to an empty skb [ 97.365293][ T5747] usb 3-1: Using ep0 maxpacket: 8 [ 97.391782][ T5747] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 97.485394][ T5747] usb 3-1: config 0 has no interfaces? [ 97.503614][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.511871][ T5747] usb 3-1: Product: syz [ 97.511892][ T5747] usb 3-1: Manufacturer: syz [ 97.511914][ T5747] usb 3-1: SerialNumber: syz [ 97.589021][ T5747] usb 3-1: config 0 descriptor?? [ 97.991967][ T5715] usb 3-1: USB disconnect, device number 2 [ 98.942405][ T5877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 98.964009][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.891256][ T5904] netlink: 'syz.3.22': attribute type 1 has an invalid length. [ 101.196701][ T5910] syz.4.23 uses obsolete (PF_INET,SOCK_PACKET) [ 101.219874][ T5905] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 102.669287][ T5944] ======================================================= [ 102.669287][ T5944] WARNING: The mand mount option has been deprecated and [ 102.669287][ T5944] and is ignored by this kernel. Remove the mand [ 102.669287][ T5944] option from the mount to silence this warning. [ 102.669287][ T5944] ======================================================= [ 103.089530][ T5944] NILFS (loop0): device size too small [ 103.996380][ T5950] binder: 5948:5950 ioctl c0306201 200000004a40 returned -22 [ 105.168089][ T5987] process 'syz.0.37' launched '/dev/fd/4' with NULL argv: empty string added [ 105.297683][ T5971] Need at least one configuration in g1. [ 105.395699][ T5971] udc dummy_udc.0: failed to start g1: -22 [ 105.395729][ T5971] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 105.531908][ T5971] UDC core: g1: couldn't find an available UDC or it's busy [ 108.446119][ T6038] NILFS (loop4): device size too small [ 108.593095][ T6039] netlink: 'syz.4.50': attribute type 9 has an invalid length. [ 108.597125][ T6039] netlink: 'syz.4.50': attribute type 7 has an invalid length. [ 108.597224][ T6039] netlink: 'syz.4.50': attribute type 8 has an invalid length. [ 114.035707][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 114.111076][ T6082] Illegal XDP return value 3410 on prog (id 2) dev syz_tun, expect packet loss! [ 114.190827][ T4921] Bluetooth: hci4: Invalid handle: 0xed88 > 0x0eff [ 114.422636][ T6090] netlink: 'syz.2.63': attribute type 9 has an invalid length. [ 114.422880][ T6090] netlink: 'syz.2.63': attribute type 7 has an invalid length. [ 114.422896][ T6090] netlink: 'syz.2.63': attribute type 8 has an invalid length. [ 114.465792][ T6084] Invalid logical block size (8192) [ 115.006134][ T36] audit: type=1326 audit(1788885243.332:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6099 comm="syz.3.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c48ae159 code=0x7ffc0000 [ 115.006222][ T36] audit: type=1326 audit(1788885243.332:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6099 comm="syz.3.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c48ae159 code=0x7ffc0000 [ 115.016953][ T36] audit: type=1326 audit(1788885243.342:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6099 comm="syz.3.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fd0c48ae159 code=0x7ffc0000 [ 115.017000][ T36] audit: type=1326 audit(1788885243.342:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6099 comm="syz.3.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c48ae159 code=0x7ffc0000 [ 115.017040][ T36] audit: type=1326 audit(1788885243.342:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6099 comm="syz.3.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c48ae159 code=0x7ffc0000 [ 115.641613][ T6120] netlink: 'syz.3.71': attribute type 10 has an invalid length. [ 116.456596][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.475857][ T6120] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 116.778221][ T6135] netlink: 'syz.3.77': attribute type 9 has an invalid length. [ 116.780485][ T6135] netlink: 'syz.3.77': attribute type 7 has an invalid length. [ 116.780502][ T6135] netlink: 'syz.3.77': attribute type 8 has an invalid length. [ 117.024619][ T6144] netlink: 'syz.1.79': attribute type 2 has an invalid length. [ 117.094310][ T1243] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.264525][ T1243] usb 3-1: Using ep0 maxpacket: 8 [ 117.267073][ T1243] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.277544][ T1243] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.277570][ T1243] usb 3-1: config 0 has no interface number 0 [ 117.277615][ T1243] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.277637][ T1243] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 117.277661][ T1243] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.277690][ T1243] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.277729][ T1243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.673901][ T1243] usb 3-1: config 0 descriptor?? [ 118.903695][ T1243] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 119.179442][ T10] usb 3-1: USB disconnect, device number 3 [ 119.378301][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 120.180860][ T6178] netlink: 'syz.1.90': attribute type 9 has an invalid length. [ 120.183024][ T6178] netlink: 'syz.1.90': attribute type 7 has an invalid length. [ 120.183041][ T6178] netlink: 'syz.1.90': attribute type 8 has an invalid length. [ 120.504192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.514196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.524206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.534212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.554214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.564197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.574218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.584206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.594192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.604188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.352588][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 122.851190][ T6198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98'. [ 124.222354][ T40] IPVS: starting estimator thread 0... [ 124.417560][ T6230] IPVS: using max 8 ests per chain, 19200 per kthread [ 124.635528][ T5617] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.834343][ T5617] usb 2-1: Using ep0 maxpacket: 8 [ 124.840007][ T5617] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.840859][ T5617] usb 2-1: config 0 has no interfaces? [ 124.840880][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.965548][ T5617] usb 2-1: config 0 descriptor?? [ 126.484242][ T5620] usb 2-1: USB disconnect, device number 2 [ 128.377056][ T5621] Bluetooth: hci1: hcon ffff88803f2d4000 sent 1 < count 1025 [ 129.345597][ T6257] jffs2: notice: (6257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.672414][ T6269] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 129.733838][ T6274] netlink: 14 bytes leftover after parsing attributes in process `syz.2.112'. [ 129.935229][ T6269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.942480][ T6269] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 129.943878][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 130.901464][ T6274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.173393][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 131.312405][ T6275] mmap: syz.2.112 (6275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.890048][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.908620][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.898252][ T6274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.977351][ T6274] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 134.111829][ T6274] bond0 (unregistering): Released all slaves [ 134.220990][ T6279] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 134.355307][ T6283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.437436][ T6283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.520291][ T6283] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 134.598820][ T6283] bond0 (unregistering): Released all slaves [ 134.967222][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.127777][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 135.136872][ T9] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 135.152358][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 135.162851][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 135.162882][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 135.162908][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 135.162933][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 135.216495][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.224657][ T9] usb 1-1: Product: syz [ 135.224678][ T9] usb 1-1: Manufacturer: syz [ 135.224693][ T9] usb 1-1: SerialNumber: syz [ 135.231189][ T9] usb 1-1: config 0 descriptor?? [ 135.270743][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 135.596617][ T9] usb 1-1: USB disconnect, device number 2 [ 136.554276][ T5747] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.754440][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 136.759409][ T5747] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 136.781068][ T5747] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 136.781639][ T5747] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.781662][ T5747] usb 2-1: config 0 has no interface number 0 [ 136.788790][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.788816][ T5747] usb 2-1: Product: syz [ 136.788830][ T5747] usb 2-1: Manufacturer: syz [ 136.788845][ T5747] usb 2-1: SerialNumber: syz [ 137.023513][ T5747] usb 2-1: config 0 descriptor?? [ 137.158713][ T5747] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 137.158805][ T5747] uvcvideo 2-1:0.105: No valid video chain found. [ 138.726798][ T5715] usb 2-1: USB disconnect, device number 3 [ 139.521944][ T6396] netlink: 88 bytes leftover after parsing attributes in process `syz.1.151'. [ 140.038522][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 140.164801][ T6413] syz.0.157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 141.845209][ T6411] syz.0.157 (6411) used greatest stack depth: 18312 bytes left [ 142.065082][ T6432] 9pnet_virtio: no channels available for device syz [ 144.918002][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 145.815723][ T36] audit: type=1326 audit(1788885274.142:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 145.864930][ T36] audit: type=1326 audit(1788885274.142:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 145.889595][ T36] audit: type=1326 audit(1788885274.162:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 145.889642][ T36] audit: type=1326 audit(1788885274.162:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 145.889681][ T36] audit: type=1326 audit(1788885274.162:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 145.889720][ T36] audit: type=1326 audit(1788885274.162:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 145.889764][ T36] audit: type=1326 audit(1788885274.172:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 145.889810][ T36] audit: type=1326 audit(1788885274.172:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 145.889849][ T36] audit: type=1326 audit(1788885274.172:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.1.171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 146.454284][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 146.635629][ T9] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 146.650040][ T9] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 146.650069][ T9] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 146.650088][ T9] usb 3-1: config 0 has no interface number 0 [ 146.650120][ T9] usb 3-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 146.650167][ T9] usb 3-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 146.650202][ T9] usb 3-1: config 0 interface 143 has no altsetting 0 [ 146.713498][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.724359][ T9] usb 3-1: Product: syz [ 146.724512][ T9] usb 3-1: Manufacturer: syz [ 146.724528][ T9] usb 3-1: SerialNumber: syz [ 146.898819][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 146.993449][ T9] usb 3-1: config 0 descriptor?? [ 147.312811][ T9] usb 3-1: USB disconnect, device number 4 [ 147.457847][ T6464] veth3: entered promiscuous mode [ 147.470221][ T6464] veth3: entered allmulticast mode [ 147.924355][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.959550][ T6465] veth3: entered promiscuous mode [ 147.959662][ T6465] veth3: entered allmulticast mode [ 148.064338][ T9] usb 3-1: device descriptor read/64, error -71 [ 148.309661][ T6479] FAULT_INJECTION: forcing a failure. [ 148.309661][ T6479] name failslab, interval 1, probability 0, space 0, times 1 [ 148.343044][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.4.180 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.343075][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.343095][ T6479] Call Trace: [ 148.343104][ T6479] [ 148.343114][ T6479] dump_stack_lvl+0xe8/0x150 [ 148.343163][ T6479] should_fail_ex+0x46b/0x600 [ 148.343194][ T6479] should_failslab+0xa8/0x100 [ 148.343229][ T6479] __kmalloc_cache_noprof+0xa1/0x680 [ 148.343259][ T6479] ? ppp_register_net_channel+0x5b/0x7c0 [ 148.343287][ T6479] ? ppp_register_net_channel+0x5b/0x7c0 [ 148.343322][ T6479] ppp_register_net_channel+0x5b/0x7c0 [ 148.343352][ T6479] ? rt_spin_unlock+0x165/0x200 [ 148.343374][ T6479] pppoe_connect+0x778/0xcf0 [ 148.343412][ T6479] __sys_connect+0x32d/0x470 [ 148.343443][ T6479] ? __pfx___sys_connect+0x10/0x10 [ 148.343481][ T6479] ? rcu_is_watching+0x16/0xb0 [ 148.343520][ T6479] __x64_sys_connect+0x7a/0x90 [ 148.343548][ T6479] do_syscall_64+0x166/0x520 [ 148.343573][ T6479] ? trace_irq_disable+0x3b/0x140 [ 148.343598][ T6479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.343619][ T6479] ? clear_bhb_loop+0x70/0xc0 [ 148.343654][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.343675][ T6479] RIP: 0033:0x7ff2a4b3e159 [ 148.343702][ T6479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.343720][ T6479] RSP: 002b:00007ff2a2d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 148.343748][ T6479] RAX: ffffffffffffffda RBX: 00007ff2a4dc5fa0 RCX: 00007ff2a4b3e159 [ 148.343764][ T6479] RDX: 000000000000001e RSI: 0000200000000040 RDI: 0000000000000006 [ 148.343777][ T6479] RBP: 00007ff2a4bd503b R08: 0000000000000000 R09: 0000000000000000 [ 148.343791][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.343803][ T6479] R13: 00007ff2a4dc6038 R14: 00007ff2a4dc5fa0 R15: 00007ffc35e3f2b8 [ 148.343834][ T6479] [ 148.363803][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.426040][ T6482] netlink: 88 bytes leftover after parsing attributes in process `syz.3.181'. [ 148.574327][ T9] usb 3-1: device descriptor read/64, error -71 [ 148.684630][ T9] usb usb3-port1: attempt power cycle [ 148.755878][ T36] audit: type=1326 audit(1788885277.062:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.1.184" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f7e7e159 code=0x7ffc0000 [ 151.748539][ T6516] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 152.248044][ T6516] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 152.248808][ T6516] overlayfs: failed to look up (tracing) for ino (-66) [ 152.744525][ T5621] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 152.752749][ T5621] Bluetooth: hci1: Injecting HCI hardware error event [ 152.753452][ T5621] Bluetooth: hci1: hardware error 0x00 [ 155.156270][ T4921] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 155.197727][ T4921] Bluetooth: hci3: Injecting HCI hardware error event [ 155.230414][ T5622] Bluetooth: hci3: hardware error 0x00 [ 155.904625][ T5621] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 158.627849][ T5622] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 159.572655][ T6568] overlay: ./bus is not a directory [ 159.821270][ T6567] input: syz0 as /devices/virtual/input/input8 [ 159.830145][ T6574] netlink: 88 bytes leftover after parsing attributes in process `syz.4.211'. [ 162.217942][ T6603] netlink: 'syz.1.221': attribute type 3 has an invalid length. [ 168.265604][ T5620] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.434427][ T5620] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 168.444624][ T5620] usb 1-1: config 0 has no interfaces? [ 168.450203][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.701793][ T5620] usb 1-1: config 0 descriptor?? [ 169.377668][ T55] usb 1-1: USB disconnect, device number 3 [ 171.667210][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 171.846729][ T9] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 171.860372][ T9] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 171.868683][ T9] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 171.868711][ T9] usb 4-1: config 0 has no interface number 0 [ 171.868749][ T9] usb 4-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 171.868789][ T9] usb 4-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 171.868818][ T9] usb 4-1: config 0 interface 143 has no altsetting 0 [ 171.892752][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.892781][ T9] usb 4-1: Product: syz [ 171.892795][ T9] usb 4-1: Manufacturer: syz [ 171.892809][ T9] usb 4-1: SerialNumber: syz [ 172.012636][ T9] usb 4-1: config 0 descriptor?? [ 172.349505][ T9] usb 4-1: USB disconnect, device number 2 [ 172.402673][ T6741] netlink: 88 bytes leftover after parsing attributes in process `syz.1.267'. [ 172.562067][ T2960] IPVS: starting estimator thread 0... [ 172.645071][ T6744] IPVS: using max 9 ests per chain, 21600 per kthread [ 173.095042][ T6765] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 173.095042][ T6765] [ 173.109930][ T6765] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 173.110364][ T6765] CIFS: Attempting to mount //127.0.0.1/share [ 174.068803][ T6765] CIFS: VFS: cifs_mount failed w/return code = -512 [ 178.614850][ T6801] input: syz0 as /devices/virtual/input/input10 [ 182.938588][ T6828] comedi comedi3: pcmda12: I/O base address or length out of range [ 183.403206][ T6833] busy [ 183.529701][ T6840] Need at least one configuration in g1. [ 183.546394][ T6840] udc dummy_udc.0: failed to start g1: -22 [ 183.546426][ T6840] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 183.567210][ T6840] UDC core: g1: couldn't find an available UDC or it's busy [ 183.693996][ T6847] input: syz0 as /devices/virtual/input/input11 [ 184.015128][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 184.015514][ T36] audit: type=1326 audit(1788885312.337:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.015558][ T36] audit: type=1326 audit(1788885312.337:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.019011][ T36] audit: type=1326 audit(1788885312.337:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.019240][ T36] audit: type=1326 audit(1788885312.337:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.020100][ T36] audit: type=1326 audit(1788885312.337:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.020143][ T36] audit: type=1326 audit(1788885312.337:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.020822][ T36] audit: type=1326 audit(1788885312.337:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.021332][ T36] audit: type=1326 audit(1788885312.337:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.021584][ T36] audit: type=1326 audit(1788885312.337:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6857 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff2a4b3e159 code=0x7ffc0000 [ 184.205412][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 184.869196][ T6868] 9pnet_virtio: no channels available for device syz [ 185.313222][ T6876] Need at least one configuration in g1. [ 185.322042][ T6876] udc dummy_udc.0: failed to start g1: -22 [ 185.322072][ T6876] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 185.427973][ T6876] UDC core: g1: couldn't find an available UDC or it's busy [ 185.479003][ T27] [ 185.481371][ T27] ====================================================== [ 185.488395][ T27] WARNING: possible circular locking dependency detected [ 185.495436][ T27] syzkaller #0 Not tainted [ 185.499858][ T27] ------------------------------------------------------ [ 185.506879][ T27] migration/1/27 is trying to acquire lock: [ 185.512780][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 185.521333][ T27] [ 185.521333][ T27] but task is already holding lock: [ 185.528705][ T27] ffff888032868b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 185.538215][ T27] [ 185.538215][ T27] which lock already depends on the new lock. [ 185.538215][ T27] [ 185.548623][ T27] [ 185.548623][ T27] the existing dependency chain (in reverse order) is: [ 185.557756][ T27] [ 185.557756][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 185.565056][ T27] _raw_spin_lock+0x2e/0x40 [ 185.570166][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 185.576190][ T27] rt_spin_lock+0x165/0x400 [ 185.581220][ T27] fast_dput+0x2a4/0x690 [ 185.586001][ T27] dput+0x30/0x60 [ 185.590179][ T27] terminate_walk+0xb5/0x4c0 [ 185.595290][ T27] path_openat+0x139e/0x1d60 [ 185.600406][ T27] do_file_open+0x23e/0x4a0 [ 185.605436][ T27] do_open_execat+0x12b/0x590 [ 185.610645][ T27] alloc_bprm+0x24/0x640 [ 185.615409][ T27] kernel_execve+0x85/0x9c0 [ 185.620426][ T27] call_usermodehelper_exec_async+0x212/0x360 [ 185.627014][ T27] ret_from_fork+0x514/0xb70 [ 185.632127][ T27] ret_from_fork_asm+0x1a/0x30 [ 185.637409][ T27] [ 185.637409][ T27] -> #0 (_T->lock){....}-{2:2}: [ 185.644438][ T27] __lock_acquire+0x164c/0x2de0 [ 185.649808][ T27] lock_acquire+0x115/0x350 [ 185.654823][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 185.660546][ T27] rt_spin_trylock+0x56/0x2b0 [ 185.665750][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 185.671125][ T27] kvfree_call_rcu+0xa4/0x430 [ 185.676324][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 185.682220][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 185.688634][ T27] select_fallback_rq+0x11e/0x200 [ 185.694184][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 185.700081][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 185.705623][ T27] smpboot_thread_fn+0x565/0xa70 [ 185.711102][ T27] kthread+0x38b/0x470 [ 185.715683][ T27] ret_from_fork+0x514/0xb70 [ 185.720794][ T27] ret_from_fork_asm+0x1a/0x30 [ 185.726077][ T27] [ 185.726077][ T27] other info that might help us debug this: [ 185.726077][ T27] [ 185.736294][ T27] Possible unsafe locking scenario: [ 185.736294][ T27] [ 185.743731][ T27] CPU0 CPU1 [ 185.749085][ T27] ---- ---- [ 185.754438][ T27] lock(&p->pi_lock); [ 185.758499][ T27] lock(_T->lock); [ 185.764815][ T27] lock(&p->pi_lock); [ 185.771431][ T27] lock(_T->lock); [ 185.775232][ T27] [ 185.775232][ T27] *** DEADLOCK *** [ 185.775232][ T27] [ 185.783365][ T27] locks held by migration/1/27: 2, last CPU#1: [ 185.789514][ T27] #0: ffff888032868b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 185.799436][ T27] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 185.809967][ T27] [ 185.809967][ T27] stack backtrace: [ 185.815852][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.825570][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.835632][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 185.844058][ T27] Call Trace: [ 185.847338][ T27] [ 185.850270][ T27] dump_stack_lvl+0xe8/0x150 [ 185.854865][ T27] print_circular_bug+0x2e2/0x300 [ 185.859899][ T27] check_noncircular+0x12f/0x150 [ 185.864841][ T27] __lock_acquire+0x164c/0x2de0 [ 185.869705][ T27] ? __asan_memset+0x22/0x50 [ 185.874298][ T27] ? __enqueue_entity+0x74b/0xc60 [ 185.879325][ T27] lock_acquire+0x115/0x350 [ 185.883819][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 185.888658][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 185.893941][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 185.899126][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 185.903966][ T27] rt_spin_trylock+0x56/0x2b0 [ 185.908633][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 185.913477][ T27] kvfree_call_rcu+0xa4/0x430 [ 185.918148][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 185.923249][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 185.928613][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 185.934508][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 185.940479][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 185.946363][ T27] select_fallback_rq+0x11e/0x200 [ 185.951462][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 185.957430][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 185.962789][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.967976][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 185.973945][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 185.978965][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 185.983982][ T27] smpboot_thread_fn+0x565/0xa70 [ 185.988912][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 185.993937][ T27] kthread+0x38b/0x470 [ 185.997992][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 186.003447][ T27] ? __pfx_kthread+0x10/0x10 [ 186.008027][ T27] ret_from_fork+0x514/0xb70 [ 186.012607][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 186.017713][ T27] ? __switch_to+0xc89/0x1420 [ 186.022384][ T27] ? __pfx_kthread+0x10/0x10 [ 186.026960][ T27] ret_from_fork_asm+0x1a/0x30 [ 186.031719][ T27] [ 186.034734][ T27] process 6878 (syz.0.302) no longer affine to cpu1