last executing test programs: 14.550261657s ago: executing program 0 (id=387): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (fail_nth: 1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 14.012079184s ago: executing program 0 (id=389): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x180, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11c, 0x1, [@m_skbmod={0x118, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0xffffffff, 0x3, 0x1, 0x1, 0x7}, 0x6}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x4, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x7, 0x8, 0x16}, 0xd}}]}, {0x8b, 0x6, "e45fc658ed808c6cc0f1a6e6d2bc78d35ee8237918bcca44264340efce46b71034137d942e216b58d77b93a3ba79f79f9177463b60b814b61381710e2d3118e9ade34f9e2b70854d9525012d979c0aabc5d83e9c601b5b09dfa8907bd2bfefe15b6cf68d382cb58066262f6aeab04b53d58efdc1a018eaef3691cd57a2c461374f4af8e3808a72"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13.815345045s ago: executing program 0 (id=391): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x7, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (fail_nth: 1) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 13.183576165s ago: executing program 0 (id=394): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00030300ffffffff00000000000000000700000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) 12.384046287s ago: executing program 0 (id=398): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x7fffffff, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r4 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) open$dir(0x0, 0x400000, 0x100) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvfrom(r6, 0x0, 0x0, 0x61, 0x0, 0x0) getdents(r1, &(0x7f0000000ec0)=""/4096, 0x1000) socket$vsock_stream(0x28, 0x1, 0x0) readv(r0, 0x0, 0x0) 10.819173708s ago: executing program 1 (id=404): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002e40)="ebde13617ba2422f85", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) 10.192973071s ago: executing program 1 (id=407): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) 9.601417706s ago: executing program 0 (id=410): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 8.88668933s ago: executing program 1 (id=413): syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r0, r1, r1, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, r1, r0, r1, r1, r0, r1]}}, @cred={{0x18}}, @cred={{0x18}}], 0x88, 0x8080}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002900)="05dff06ca178f9f3d13f6a35d7baf6345c38dbb6fcf1748add6c112eae6672e49302bd1fa47e8790ebcad4d950b3c224f9d5ec93612cbf7edaf5ffb2bd1518b83053919abdfb72c48481b8c909676d63475e0f775e182a41ed5c59d8b0bf894fdfdeb78f802cbf8764a392843ab73da388d29e086fcc81d711a837319d32d12e327b6787f9f560c0df63b26fad22f0f09919296516779e453bc470acb1790c61c36bd61cffc01b49c0879bcebb67f2dfd8bf", 0xb2}], 0x1, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xc8, 0x404c801}}], 0x2, 0x50000) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x7, 0x0, 0x7, 0x1, 0x9]}, &(0x7f0000000200)=0x58) (async) madvise(&(0x7f0000f50000/0x3000)=nil, 0x3000, 0xd) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x49, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8000}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 64) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) (rerun: 64) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000240)={0x15, 0xfffffffffffffec9, 0x0}) (async) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000001000000010000006cdbdb983c44c278d442000000000000000c737c08ca69bb4a853ff0a1d322a662e4a658c2b45b4e028aea8fff9764830c956f0954dfc148ed9eb7baf87e91b3f6"], 0x10}, 0x20040001) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='o'], 0x28) (async) close(r4) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (rerun: 32) 7.775875354s ago: executing program 4 (id=416): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00030300ffffffff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.552133236s ago: executing program 1 (id=417): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000800)=""/4093, 0xffd}], 0x2}, 0xb0}], 0x1, 0x10001, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 7.504627639s ago: executing program 2 (id=418): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904cc50f109"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000003140)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x2, "68ae"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0c}}, {0x60, &(0x7f0000000300)=@string={0x60, 0x3, "9d645ab292d7abe83b0b3a9f3f93e768ff13c54771bbb57703326e2b76d304ec899e4c8df2c88b3af3850faa62898c98e666fb57501aee021b53eecfc432a129bfb457bf4e2a702f507cc3a3e88cb805a5cd473a3ceb886b4f140b395daa"}}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x7, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@unspec=@helper={{0x44}}]}, @common=@unspec=@NFQUEUE0={0x24}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x254, 0x284, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x4b4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) unshare(0x4000400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2c}, 0x20) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0x9, 0x9c, &(0x7f0000000040)=""/156) 6.980920271s ago: executing program 4 (id=419): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 6.592065675s ago: executing program 4 (id=421): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0x1300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) (async) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0x0) 6.462144894s ago: executing program 1 (id=422): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0 P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce\xff\a\x00\x00\x00\x00\x00\x00j+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) close(0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x229) write$cgroup_int(r1, &(0x7f00000000c0)=0x800000ffffffff, 0xf) r5 = socket(0x22, 0x2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}]}) 5.911998921s ago: executing program 1 (id=424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x38, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2e, 0x9, 0x7fff, {0xe, @esp_ip4_spec={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2fe, 0x8}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10, 0x8f75, [0x6, 0x3]}, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x30}, @empty, 0x2, 0x34}, {0x0, @empty, 0x8, 0xd, [0x7ff, 0x6f8]}, 0xffffffff7fffffff, 0x5}}}) syz_open_dev$dri(0x0, 0xffffffff, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, 0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket(0xf, 0x6, 0xa0b) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40008c0}, 0xc0014) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendto$inet6(r7, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9ea685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902060f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa415ac4d31c4f7a1", 0x8b, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 4.250996991s ago: executing program 3 (id=426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffd}}, [@tmpl={0x84, 0x5, [{{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x9dd60b240e04ce1f, @in6=@mcast2, 0x0, 0x4, 0x2}]}]}, 0x13c}}, 0x50) 4.179865454s ago: executing program 4 (id=427): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000300)) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xffffffff, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b00)=@newtfilter={0x1a0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x170, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x124, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffd4c, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0x800) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@getsadinfo={0x288, 0x23, 0x100, 0x70bd29, 0x25dfdbfe, 0x0, [@policy={0xa8, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@empty, 0x4e21, 0x3, 0x1, 0x0, 0xa, 0xa0, 0x80, 0x73, r4, r6}, {0x9, 0x8000000000000000, 0x4, 0x1, 0x5587, 0x2, 0x2, 0x5}, {0xbc9, 0x7, 0x622, 0x80}, 0x401, 0x6e6bb5, 0x2, 0x0, 0x2, 0x3}}, @replay_thresh={0x8, 0xb, 0x6}, @address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0xa, 0x40, 0x51}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd27, 0x70bd26, 0x70bd29, 0x3, [0x80000000, 0x4, 0xf4, 0xfffffe00, 0x7]}}, @algo_comp={0x13d, 0x3, {{'deflate\x00'}, 0x7a8, "8ba54aa2b751241adf38b172397536a06082b3a6ae0b6264f49f30793fa92577d05ae3028ca7f1a5f2a0773873c8c44518f5007160a1badded61b715957604dd7adb93c9a12a0538e6c08d0cd9839b1927c66b119bde99d923d7275baaf9af3c32ae392f8ded80d91015a8fd144ae16b5358a5cd668134776ba80863b3f1a02f96d332102360251a36a8b9e439594c57d6fac230ab27e70569cd27ac4ec9c8e2192dfdaea2939dfa7690fdf486bea367957ceae54ad494404f9fd4365ed5c9e467f8e64d933278c05dfea761dbf6d3dad51eedacbfeff32e51ffd496ef50e2db28dcb41d886c7c5a19ef8a4fd36959d7d2d1b0107d"}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd28, 0x70bd27, 0x70bd2d, 0x70bd29, 0x8, [0x200, 0x7f, 0xb, 0x1]}}]}, 0x288}}, 0x50) 3.997468264s ago: executing program 3 (id=428): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) 3.896745642s ago: executing program 4 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0xfe, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf17b90f39e40a0389b9fc3644415bb6861be988e7af22fb4d27f3eb4a7c82698fd23a2015f954fb3e9c2b4629ec47b845de19989a6b38b0b6e26c74a680d6f04222f7fd8b490d59e132d5a52c398ff819b237f4a684bd42527f0694996bc7112497cdc9f33fdf2130a7d31f2da822d3ca832ba3100"/254, 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) lseek(r5, 0xc6c3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r7, &(0x7f0000000000)=""/83, 0x53) open_by_handle_at(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="e400000001000000714534cd16879b0bc30049643d5e5751c07d97c6223f7c9bd95fb3d0c909bb717abb32e8dcd14f6a69f00b1c5c5b862fa13af2ffcaa320d59603589515d8eeb911feeb8bd4a50087915a1e6d76916df5a06678e61f6500010000000000003f6d48b6d1d75df2613d202c91bdfca21615f85e91bf9c3c09615b09755d696ec5d98e2b956a06b47041544b8d112d53bb1938a727671b9c171f734381d910ca7b40e4bef1bcf0a32217922a917121185c39d67ded6714f6580c2929ae80b552c512ee5fd1dc424b43a8b9bce74d45c1ba88fff72afc265dd9d96a2d0e4744e7dab550080000"], 0x0) pwritev(r6, &(0x7f0000000240)=[{&(0x7f0000000140)="f9", 0xca800}], 0x1, 0x3, 0xd4bd) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsmount(0xffffffffffffffff, 0x0, 0xab) 3.857845894s ago: executing program 2 (id=430): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00030300ffffffff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.501368813s ago: executing program 2 (id=431): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00030300ffffffff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) 3.268541497s ago: executing program 2 (id=432): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.967487332s ago: executing program 2 (id=433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0xfffffffe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000600)="efbfb31d5ea1", 0x6}], 0x2}, 0x0) 2.832199143s ago: executing program 3 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) process_madvise(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000640)}], 0x2, 0x15, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00004b5000/0x1000)=nil, 0x1000, 0x64) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109101) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x0, 0x5, 0x1, 0x6, 0x0, 0x7, 0x0}) 2.659906156s ago: executing program 2 (id=435): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.482141673s ago: executing program 3 (id=436): unshare(0x20060400) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 564.023044ms ago: executing program 3 (id=437): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) socket$alg(0x26, 0x5, 0x0) (async) openat$cgroup_devices(r0, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400001, 0x0, 0x3, 0x4, 0x310, 0x1000}, 0x20) (rerun: 32) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000400)=ANY=[@ANYBLOB="b5734a6f5bc82c4bf13c2ae1667da3a3617aed8f07755a3afbd81a2bfd993890485546f6a33fa782a833363e476bd35855097310449cd4a34cef870ae899078528636867b10340bd4d44d749c3fe3244113225beebaa7b5e9327366f1fbc9c8ef58229a001eb48b51bba107e15165fb1150a48c9358c10ed3deb4c825c9c51e59abf836d719831bcb430b88e1a46f6e8abcc59a13625c929697d78ff08e12c26cd4b65ef", @ANYRES32=r1, @ANYRES16, @ANYRESOCT=r0], 0x0) (async, rerun: 32) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x7, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x58, 0x7}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0x8, 0x8, 0xc}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "d2a13b140ab60d020789e767d638e87a"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8d, 0x2, 0x2, 0x0, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x81}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3401}}, {0xc8, &(0x7f0000000180)=@string={0xc8, 0x3, "d52b024f00fb4cdcba423109b3bc23fbd07406fdb2f6190fc7bd30516f341a71a3f67bc18cc273b2c6b3b91c3bc54cd5119767ac91197b8f45aba771f4abdc67b407df3fa752cdec84e81d37b130c046a407beb5c691a3883796051024c558017895c34d71c155e447f39ba412be6079fd9c2a1ae0b9fa5c0d484bdbd34962d6b7953f9b0d08be78bd6ff7c56b7af903d04bd6dea60238225e31d14d008f3f024e8f9559d1a158117de6456b884c01c79be3ad21e875fb10ef37b83ec52af55fb6ee7ad823ee"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x439}}, {0x86, &(0x7f00000002c0)=@string={0x86, 0x3, "3b220dd6bcc7b2bdf50a1354a31ea0c24bbdfd5bc81a40a849d36772ca66132aeec6fe2dd7457aa2865ab81023ffe766ccc08b670c2737079908c3b864868d3b8786df5418453ada68666f30d214635c9b2e1b9a40740b0aa022a8fbc55644959936361dd35ffdf198f9ad2a5d66e6bf25d19d185584285c7e9cc14b42801bf3533eac35"}}]}) 63.903379ms ago: executing program 3 (id=438): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000001c0)={0x5, "f2bc907be6023111a93b2adbc56cb306e21e9dd796c2a5daf352df85fbfdd651", 0x0, 0x6, 0x5, 0x350c102, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_RMID(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88e, &(0x7f0000000440)={0x0, 0xaee2, 0x0, 0x2, 0x1b4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xb) copy_file_range(r8, &(0x7f00000008c0)=0x4, r7, &(0x7f0000000100), 0x8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r11 = getpid() kcmp(r11, r11, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 0s ago: executing program 4 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x40080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 83.226368][ T5815] cgroup: Unknown subsys name 'net' [ 83.397276][ T5815] cgroup: Unknown subsys name 'cpuset' [ 83.406480][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.042509][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.893671][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.905510][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.915834][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.923668][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.931863][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.940457][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.948404][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.963509][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.982807][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.983649][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.985282][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.003243][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.007497][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.019343][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.027640][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.029934][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.042106][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.044268][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.055055][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.066403][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.074185][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.076050][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.095405][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.103210][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.113027][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.745743][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 88.868266][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.959434][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.092503][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.188991][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.206366][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.213774][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.221206][ T5842] bridge_slave_0: entered allmulticast mode [ 89.229383][ T5842] bridge_slave_0: entered promiscuous mode [ 89.296847][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.304159][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.311353][ T5842] bridge_slave_1: entered allmulticast mode [ 89.319048][ T5842] bridge_slave_1: entered promiscuous mode [ 89.356180][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.363451][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.370633][ T5846] bridge_slave_0: entered allmulticast mode [ 89.378212][ T5846] bridge_slave_0: entered promiscuous mode [ 89.399664][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.407088][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.415092][ T5841] bridge_slave_0: entered allmulticast mode [ 89.422465][ T5841] bridge_slave_0: entered promiscuous mode [ 89.449526][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.457002][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.464500][ T5846] bridge_slave_1: entered allmulticast mode [ 89.472136][ T5846] bridge_slave_1: entered promiscuous mode [ 89.504710][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.511926][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.519294][ T5841] bridge_slave_1: entered allmulticast mode [ 89.527409][ T5841] bridge_slave_1: entered promiscuous mode [ 89.562283][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.574563][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.635585][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.695562][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.707554][ T5842] team0: Port device team_slave_0 added [ 89.716493][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.729449][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.736837][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.744084][ T5840] bridge_slave_0: entered allmulticast mode [ 89.751388][ T5840] bridge_slave_0: entered promiscuous mode [ 89.784917][ T5842] team0: Port device team_slave_1 added [ 89.793522][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.803330][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.810518][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.818240][ T5840] bridge_slave_1: entered allmulticast mode [ 89.825783][ T5840] bridge_slave_1: entered promiscuous mode [ 89.899547][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.906843][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.914147][ T5843] bridge_slave_0: entered allmulticast mode [ 89.921426][ T5843] bridge_slave_0: entered promiscuous mode [ 89.930816][ T5846] team0: Port device team_slave_0 added [ 89.977125][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.984533][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.991721][ T5843] bridge_slave_1: entered allmulticast mode [ 89.999767][ T5843] bridge_slave_1: entered promiscuous mode [ 90.008515][ T5846] team0: Port device team_slave_1 added [ 90.032302][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.039442][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.065642][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.079419][ T5841] team0: Port device team_slave_0 added [ 90.088479][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.125793][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.132779][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.159426][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.164505][ T5828] Bluetooth: hci2: command tx timeout [ 90.170706][ T5838] Bluetooth: hci1: command tx timeout [ 90.176460][ T53] Bluetooth: hci0: command tx timeout [ 90.181339][ T5838] Bluetooth: hci4: command tx timeout [ 90.186998][ T53] Bluetooth: hci3: command tx timeout [ 90.204049][ T5841] team0: Port device team_slave_1 added [ 90.212325][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.234608][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.241612][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.267937][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.309026][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.319603][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.326925][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.352901][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.392976][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.421782][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.428876][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.455180][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.468147][ T5840] team0: Port device team_slave_0 added [ 90.516304][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.523837][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.550055][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.563333][ T5840] team0: Port device team_slave_1 added [ 90.585232][ T5843] team0: Port device team_slave_0 added [ 90.608945][ T5842] hsr_slave_0: entered promiscuous mode [ 90.615740][ T5842] hsr_slave_1: entered promiscuous mode [ 90.623766][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.630754][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.657327][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.689618][ T5843] team0: Port device team_slave_1 added [ 90.710051][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.717632][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.744097][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.807857][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.815691][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.842142][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.871725][ T5846] hsr_slave_0: entered promiscuous mode [ 90.878758][ T5846] hsr_slave_1: entered promiscuous mode [ 90.885409][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 90.891269][ T5846] Cannot create hsr debugfs directory [ 90.927280][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.934588][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.960574][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.990447][ T5841] hsr_slave_0: entered promiscuous mode [ 90.997100][ T5841] hsr_slave_1: entered promiscuous mode [ 91.003614][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 91.009388][ T5841] Cannot create hsr debugfs directory [ 91.096416][ T5840] hsr_slave_0: entered promiscuous mode [ 91.103338][ T5840] hsr_slave_1: entered promiscuous mode [ 91.109537][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 91.116377][ T5840] Cannot create hsr debugfs directory [ 91.254033][ T5843] hsr_slave_0: entered promiscuous mode [ 91.260488][ T5843] hsr_slave_1: entered promiscuous mode [ 91.266929][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 91.272678][ T5843] Cannot create hsr debugfs directory [ 91.754485][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.767850][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.785595][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.807303][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.875888][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.888186][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.904091][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.927117][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.009384][ T1212] cfg80211: failed to load regulatory.db [ 92.025596][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.038266][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.052411][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.086953][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.187581][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.198943][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.220999][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.231848][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.243935][ T53] Bluetooth: hci4: command tx timeout [ 92.243973][ T5149] Bluetooth: hci3: command tx timeout [ 92.249369][ T53] Bluetooth: hci0: command tx timeout [ 92.254816][ T5838] Bluetooth: hci1: command tx timeout [ 92.260650][ T5828] Bluetooth: hci2: command tx timeout [ 92.275751][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.395512][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.408081][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.419153][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.431262][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.455550][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.489773][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.497099][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.526946][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.534093][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.592102][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.608567][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.679234][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.697600][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.730526][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.737695][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.748001][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.755158][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.793568][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.800708][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.828041][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.835214][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.859290][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.905277][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.938173][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.964413][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.997633][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.004935][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.019987][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.027170][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.061010][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.137764][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.144947][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.181746][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.188922][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.205712][ T5842] veth0_vlan: entered promiscuous mode [ 93.260777][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.274252][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.293408][ T5842] veth1_vlan: entered promiscuous mode [ 93.359621][ T5842] veth0_macvtap: entered promiscuous mode [ 93.379259][ T5842] veth1_macvtap: entered promiscuous mode [ 93.427757][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.440681][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.464282][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.475547][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.508148][ T5846] veth0_vlan: entered promiscuous mode [ 93.522792][ T5846] veth1_vlan: entered promiscuous mode [ 93.531971][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.542498][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.569931][ T5840] veth0_vlan: entered promiscuous mode [ 93.582423][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.611571][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.632095][ T5840] veth1_vlan: entered promiscuous mode [ 93.696804][ T5841] veth0_vlan: entered promiscuous mode [ 93.715422][ T5846] veth0_macvtap: entered promiscuous mode [ 93.760756][ T5846] veth1_macvtap: entered promiscuous mode [ 93.779136][ T5843] veth0_vlan: entered promiscuous mode [ 93.790351][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.812312][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.844622][ T5841] veth1_vlan: entered promiscuous mode [ 93.861249][ T5843] veth1_vlan: entered promiscuous mode [ 93.870104][ T5840] veth0_macvtap: entered promiscuous mode [ 93.885306][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.894903][ T5840] veth1_macvtap: entered promiscuous mode [ 93.924496][ T581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.926357][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.932609][ T581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.970626][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.998406][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.011162][ T5841] veth0_macvtap: entered promiscuous mode [ 94.021807][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.038122][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.049320][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.074911][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.087197][ T5841] veth1_macvtap: entered promiscuous mode [ 94.101150][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.121901][ T5843] veth0_macvtap: entered promiscuous mode [ 94.137402][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.171896][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.199642][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.229025][ T5843] veth1_macvtap: entered promiscuous mode [ 94.263540][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.306040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.327344][ T53] Bluetooth: hci0: command tx timeout [ 94.332879][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.332947][ T5828] Bluetooth: hci3: command tx timeout [ 94.340235][ T5838] Bluetooth: hci1: command tx timeout [ 94.340276][ T5838] Bluetooth: hci4: command tx timeout [ 94.340415][ T5149] Bluetooth: hci2: command tx timeout [ 94.368848][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.422219][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.457128][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.472597][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.477250][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.501788][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.613549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.623429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.633393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.650256][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.673617][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.685509][ T581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.698127][ T581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.792446][ T581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.808564][ T581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.841201][ T581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.880318][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.883700][ T581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.888801][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.004691][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.018459][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.253288][ T813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.487354][ T813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.506686][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.526190][ T813] usb 1-1: config 0 has no interfaces? [ 95.533397][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.561960][ T813] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 95.571703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.614937][ T813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.623478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.631773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.640433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.667985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.789148][ T813] usb 1-1: Product: syz [ 95.872753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.952301][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.984278][ T813] usb 1-1: Manufacturer: syz [ 95.998890][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.012586][ T813] usb 1-1: SerialNumber: syz [ 96.103885][ T813] usb 1-1: config 0 descriptor?? [ 96.194719][ T5938] mmap: syz.2.3 (5938) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.254426][ T581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.262399][ T581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.279234][ T581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.295062][ T581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.404515][ T5828] Bluetooth: hci2: command tx timeout [ 96.410234][ T53] Bluetooth: hci4: command tx timeout [ 96.410296][ T5834] Bluetooth: hci3: command tx timeout [ 96.421157][ T5838] Bluetooth: hci0: command tx timeout [ 96.426992][ T5149] Bluetooth: hci1: command tx timeout [ 96.707811][ T1212] usb 1-1: USB disconnect, device number 2 [ 97.273694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.855514][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 98.067176][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 98.859407][ T5965] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 102.969043][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 103.458998][ T6062] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x4) [ 104.575428][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.836523][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.864060][ T10] usb 1-1: config 0 has no interfaces? [ 104.892320][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 104.926902][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.952964][ T10] usb 1-1: Product: syz [ 104.963274][ T10] usb 1-1: Manufacturer: syz [ 105.012660][ T10] usb 1-1: SerialNumber: syz [ 105.044315][ T10] usb 1-1: config 0 descriptor?? [ 105.362559][ T10] usb 1-1: USB disconnect, device number 3 [ 105.473455][ T1212] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.843327][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 105.862148][ T6094] syz_tun: entered allmulticast mode [ 105.944023][ T6093] syz_tun: left allmulticast mode [ 106.238466][ T1212] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 106.379642][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.402291][ T1212] usb 2-1: config 0 descriptor?? [ 106.654149][ T1212] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 106.881133][ T1212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.987254][ T1212] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 107.026067][ T1212] usb 2-1: media controller created [ 107.196651][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.302914][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.578765][ T1212] DVB: Unable to find symbol dib7000p_attach() [ 107.639490][ T1212] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 107.647127][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 107.691622][ T43] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 107.779623][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.849291][ T43] usb 3-1: config 0 descriptor?? [ 107.886938][ T6116] netlink: 'syz.4.30': attribute type 1 has an invalid length. [ 107.963622][ T1212] rc_core: IR keymap rc-dib0700-rc5 not found [ 108.031532][ T1212] Registered IR keymap rc-empty [ 108.050107][ T1212] dvb-usb: could not initialize remote control. [ 108.077671][ T1212] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 108.105344][ T6116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.328572][ T43] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 108.563971][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.608903][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 108.715955][ T43] usb 3-1: media controller created [ 108.812652][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.063339][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.252954][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 109.320575][ T43] DVB: Unable to find symbol dib7000p_attach() [ 109.343042][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 109.446153][ T1212] usb 2-1: USB disconnect, device number 2 [ 109.454400][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 109.475927][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.533687][ T6107] dib0700: tx buffer length is larger than 4. Not supported. [ 109.546700][ T24] usb 4-1: config 0 descriptor?? [ 110.053010][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 110.080644][ T43] Registered IR keymap rc-empty [ 110.096567][ T43] dvb-usb: could not initialize remote control. [ 110.119001][ T43] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 110.278272][ T6155] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x4) [ 111.570839][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 111.777245][ T1212] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 111.852496][ T43] usb 3-1: USB disconnect, device number 2 [ 112.086769][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 112.429631][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 112.444814][ T43] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 112.467770][ T24] dib0700: firmware download failed at 7 with -22 [ 112.542440][ T24] usb 4-1: USB disconnect, device number 2 [ 113.530614][ T6201] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.728627][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.1.48'. [ 114.103132][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.325878][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 114.450465][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 114.537256][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.673849][ T24] usb 3-1: config 0 descriptor?? [ 115.081786][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 115.309192][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.474941][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 115.508979][ T24] usb 3-1: media controller created [ 115.733447][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.260182][ T24] DVB: Unable to find symbol dib7000p_attach() [ 116.293034][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 116.592937][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 116.643061][ T24] Registered IR keymap rc-empty [ 116.648257][ T24] dvb-usb: could not initialize remote control. [ 116.734770][ T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 116.890715][ T6226] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x4) [ 117.258780][ T6228] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x4) [ 117.299555][ T24] usb 3-1: USB disconnect, device number 3 [ 117.340600][ T6230] Context (ID=0x10) not attached to queue pair (handle=0x4d3:0x4) [ 117.458047][ T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 117.574287][ T6236] netlink: 32 bytes leftover after parsing attributes in process `syz.3.55'. [ 117.975605][ T6245] netlink: 'syz.0.56': attribute type 1 has an invalid length. [ 118.226771][ T6255] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x4) [ 118.387481][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.729791][ T6301] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.272959][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.544856][ T10] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 120.597896][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.635964][ T10] usb 4-1: config 0 has no interfaces? [ 120.661878][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 120.713079][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.744125][ T10] usb 4-1: config 0 descriptor?? [ 120.985010][ T6308] netlink: 'syz.0.67': attribute type 4 has an invalid length. [ 121.631550][ T6313] input: syz1 as /devices/virtual/input/input8 [ 124.356780][ T6357] netlink: 19 bytes leftover after parsing attributes in process `syz.1.81'. [ 124.987342][ T1212] usb 4-1: USB disconnect, device number 3 [ 125.470986][ T6371] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x4) [ 126.073526][ T6375] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x4) [ 126.203066][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 126.212272][ T1212] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.393552][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 126.407708][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.423191][ T1212] usb 3-1: config 0 has no interfaces? [ 126.428932][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.449180][ T1212] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 126.458611][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.543397][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.551450][ T1212] usb 3-1: Product: syz [ 126.555765][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 126.584592][ T1212] usb 3-1: Manufacturer: syz [ 126.589335][ T1212] usb 3-1: SerialNumber: syz [ 126.647631][ T1212] usb 3-1: config 0 descriptor?? [ 126.655933][ T24] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 126.728127][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.784925][ T24] usb 1-1: config 0 descriptor?? [ 127.029851][ T1212] usb 3-1: USB disconnect, device number 4 [ 127.259262][ T6395] netlink: 52 bytes leftover after parsing attributes in process `syz.1.92'. [ 127.292130][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 127.535877][ T6402] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 127.679797][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.313927][ T6415] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 128.651397][ T6415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.021929][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 131.077309][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.153615][ T24] usb 1-1: USB disconnect, device number 4 [ 131.284936][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 131.355348][ T6459] vlan2: entered promiscuous mode [ 131.387809][ T6459] gretap0: entered promiscuous mode [ 131.949470][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 133.850270][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 133.979759][ T6495] vlan2: entered promiscuous mode [ 134.008920][ T6495] batadv0: entered promiscuous mode [ 134.252646][ T6509] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 134.334130][ T6509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.685473][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 137.898464][ T6562] fuse: Unknown parameter 'user_id00000000000000000000' [ 137.953516][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.087618][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.100319][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.175196][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 138.206639][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 138.228535][ T43] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.298222][ T43] usb 3-1: config 0 has no interface number 0 [ 138.334197][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.454362][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 138.482020][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.525546][ T43] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.618718][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.669449][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.714997][ T43] usb 3-1: config 0 descriptor?? [ 138.785154][ T43] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 139.042651][ T5933] usb 3-1: USB disconnect, device number 5 [ 139.082605][ T5933] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 140.855281][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 141.979091][ T6604] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 142.774637][ T6616] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 142.917178][ T6616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.211481][ T6630] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 143.418405][ T6630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.607375][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 144.834170][ T6668] netlink: 19 bytes leftover after parsing attributes in process `syz.0.147'. [ 145.896210][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 145.995778][ T6679] vlan2: entered promiscuous mode [ 146.027935][ T6679] gretap0: entered promiscuous mode [ 146.470261][ T6685] netlink: 19 bytes leftover after parsing attributes in process `syz.1.152'. [ 148.537189][ T6714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.159'. [ 148.569198][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 149.118787][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 150.552927][ T1212] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.766048][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.853021][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.957664][ T1212] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 151.002389][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.062250][ T1212] usb 5-1: config 0 descriptor?? [ 151.781189][ T1212] usbhid 5-1:0.0: can't add hid device: -32 [ 151.808312][ T1212] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 151.941321][ T1212] usb 5-1: USB disconnect, device number 2 [ 152.551226][ T6769] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 152.667029][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 152.718541][ T6771] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x4) [ 153.034230][ T6780] netlink: 52 bytes leftover after parsing attributes in process `syz.1.174'. [ 153.068967][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 153.109611][ T6785] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 153.646499][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.943884][ T43] usb 1-1: config 0 has no interfaces? [ 154.004827][ T43] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 154.034307][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.062642][ T43] usb 1-1: Product: syz [ 154.073695][ T43] usb 1-1: Manufacturer: syz [ 154.091512][ T43] usb 1-1: SerialNumber: syz [ 154.211640][ T43] usb 1-1: config 0 descriptor?? [ 154.445660][ T5933] usb 1-1: USB disconnect, device number 5 [ 155.088994][ T6800] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x4) [ 155.312565][ T6807] netlink: 52 bytes leftover after parsing attributes in process `syz.4.182'. [ 155.328116][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 155.393260][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.560174][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 155.591058][ T43] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 155.632115][ T43] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 155.664687][ T43] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 155.738998][ T43] usb 2-1: config 250 has no interface number 0 [ 155.762931][ T43] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 155.817474][ T43] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 155.884021][ T43] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.954119][ T43] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 156.012511][ T43] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 156.108774][ T43] usb 2-1: config 250 interface 228 has no altsetting 0 [ 156.179582][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 156.230580][ T43] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 156.291273][ T43] usb 2-1: Product: syz [ 156.319682][ T43] usb 2-1: SerialNumber: syz [ 156.448364][ T43] hub 2-1:250.228: bad descriptor, ignoring hub [ 156.480821][ T43] hub 2-1:250.228: probe with driver hub failed with error -5 [ 156.871576][ T43] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 157.326321][ T43] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 157.966410][ T43] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71) [ 158.137677][ T43] usb 2-1: USB disconnect, device number 3 [ 158.141946][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 158.244723][ T43] usblp0: removed [ 160.111499][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 161.200738][ T6881] netlink: 52 bytes leftover after parsing attributes in process `syz.4.196'. [ 162.002642][ T6899] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 162.062419][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 162.098001][ T6899] bond1: entered promiscuous mode [ 162.148926][ T6899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.599913][ T6910] Zero length message leads to an empty skb [ 163.081678][ T6916] netlink: 52 bytes leftover after parsing attributes in process `syz.2.206'. [ 163.116423][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 164.314672][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.210'. [ 164.548137][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.0.211'. [ 164.564269][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 165.702920][ T5933] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.877045][ T5933] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 165.887081][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.907816][ T5933] usb 2-1: config 0 has no interfaces? [ 165.926027][ T5933] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 165.949323][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.014043][ T5933] usb 2-1: config 0 descriptor?? [ 167.091975][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 168.780058][ T24] usb 2-1: USB disconnect, device number 4 [ 169.053405][ T6986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.222'. [ 169.116207][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 169.330754][ T6996] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[6996] [ 169.448579][ T6998] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 169.735359][ T6998] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.826547][ T7001] bond2: (slave ip6erspan0): making interface the new active one [ 169.859515][ T7001] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 170.684897][ T813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.844728][ T813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.862015][ T813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.911768][ T813] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 170.949801][ T813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.025893][ T813] usb 5-1: config 0 descriptor?? [ 171.558258][ T813] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 171.568522][ T813] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 171.576608][ T813] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 171.587971][ T813] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 171.605649][ T813] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 171.632361][ T813] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 171.862705][ T813] usb 5-1: USB disconnect, device number 3 [ 172.130375][ T7019] fido_id[7019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 172.361107][ T7025] netlink: 52 bytes leftover after parsing attributes in process `syz.1.231'. [ 172.377980][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 172.402365][ T7026] netlink: 52 bytes leftover after parsing attributes in process `syz.0.232'. [ 173.091221][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 173.239211][ T7037] vlan2: entered promiscuous mode [ 173.245740][ T7037] gretap0: entered promiscuous mode [ 173.257886][ T7040] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[7040] [ 173.685654][ T7048] netlink: 52 bytes leftover after parsing attributes in process `syz.4.238'. [ 173.699207][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 175.009966][ T7058] syz_tun: entered allmulticast mode [ 175.149389][ T7060] netlink: 52 bytes leftover after parsing attributes in process `syz.3.242'. [ 175.165013][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 175.343680][ T7064] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7064] [ 176.150117][ T7072] netlink: 52 bytes leftover after parsing attributes in process `syz.0.246'. [ 176.210324][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 176.648500][ T7077] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[7077] [ 178.560449][ T7099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.255'. [ 178.574988][ T7100] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[7100] [ 178.587954][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 179.953617][ T7107] syz_tun: entered allmulticast mode [ 181.429170][ T7126] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[7126] [ 181.677116][ T7131] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[7131] [ 181.956271][ T7138] netlink: 52 bytes leftover after parsing attributes in process `syz.3.271'. [ 182.003844][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 182.474649][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 182.780288][ T7153] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[7153] [ 182.967190][ T7155] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7155] [ 183.497173][ T7161] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.508691][ T7172] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[7172] [ 184.715682][ T7178] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7178] [ 185.052997][ T5942] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.313919][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 185.344583][ T5942] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 185.362585][ T5942] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 185.430355][ T5942] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.496803][ T7183] netlink: 1684 bytes leftover after parsing attributes in process `syz.0.288'. [ 185.526474][ T5942] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 185.547087][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 185.615401][ T5942] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 185.625352][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.655790][ T5942] usb 5-1: Product: syz [ 185.660017][ T5942] usb 5-1: Manufacturer: syz [ 185.714881][ T5942] usb 5-1: SerialNumber: syz [ 185.791539][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 185.873118][ T5942] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input9 [ 185.894766][ T7192] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[7192] [ 186.033017][ T5942] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 186.089948][ T5942] (id 0x00) [ 186.090111][ T813] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 186.322969][ T5942] rc_core: IR keymap rc-imon-pad not found [ 186.333403][ T5942] Registered IR keymap rc-empty [ 186.359433][ T5942] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 186.417577][ T813] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 186.442931][ T5942] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 186.497635][ T5942] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 186.501574][ T813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.551649][ T813] usb 4-1: config 0 has no interfaces? [ 186.557463][ T813] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 186.565311][ T5942] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input10 [ 186.584697][ T813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.649700][ T813] usb 4-1: config 0 descriptor?? [ 186.695740][ T5942] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:4> initialized [ 187.540796][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 187.833315][ T7208] imon:send_packet: packet tx failed (-71) [ 187.839677][ T813] usb 5-1: USB disconnect, device number 4 [ 187.873218][ T7208] imon:vfd_write: send packet #3 failed [ 188.254322][ T7222] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7222] [ 188.496596][ T7228] netlink: 52 bytes leftover after parsing attributes in process `syz.0.297'. [ 188.518021][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 188.629795][ T5942] usb 4-1: USB disconnect, device number 4 [ 190.272266][ T7257] netlink: 56 bytes leftover after parsing attributes in process `syz.4.309'. [ 191.314745][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 194.355812][ T7296] netlink: 68 bytes leftover after parsing attributes in process `syz.4.320'. [ 195.954719][ T7316] netlink: 52 bytes leftover after parsing attributes in process `syz.2.324'. [ 196.003223][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 196.688963][ T5942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 196.741768][ T5942] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.526803][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.533312][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.127987][ T7341] netlink: 68 bytes leftover after parsing attributes in process `syz.2.332'. [ 201.002913][ T813] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 201.164926][ T813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.212913][ T813] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.234888][ T813] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 201.263234][ T813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.333579][ T813] usb 3-1: config 0 descriptor?? [ 201.473432][ T7360] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 201.645492][ T7360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.702874][ T1212] usb 3-1: USB disconnect, device number 6 [ 202.298112][ T813] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.465400][ T813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.483989][ T813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.525250][ T813] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 202.541152][ T7378] netlink: 52 bytes leftover after parsing attributes in process `syz.1.341'. [ 202.607482][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 202.632162][ T813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.708611][ T813] usb 1-1: config 0 descriptor?? [ 203.222978][ T813] usbhid 1-1:0.0: can't add hid device: -71 [ 203.293217][ T813] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 203.407482][ T813] usb 1-1: USB disconnect, device number 6 [ 204.221604][ T7394] netlink: 52 bytes leftover after parsing attributes in process `syz.2.346'. [ 204.266054][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 204.517678][ T7399] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 204.766585][ T7399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.852622][ T7420] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 206.224405][ T7420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.337060][ T7431] FAULT_INJECTION: forcing a failure. [ 206.337060][ T7431] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 206.407322][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.1.352 Not tainted syzkaller #0 PREEMPT(full) [ 206.407344][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.407360][ T7431] Call Trace: [ 206.407366][ T7431] [ 206.407373][ T7431] dump_stack_lvl+0x189/0x250 [ 206.407403][ T7431] ? irqentry_exit+0x74/0x90 [ 206.407427][ T7431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.407461][ T7431] should_fail_ex+0x414/0x560 [ 206.407481][ T7431] _copy_from_user+0x2d/0xb0 [ 206.407504][ T7431] io_register_rsrc+0xc2/0x260 [ 206.407518][ T7431] ? __fget_files+0x2a/0x420 [ 206.407539][ T7431] ? __pfx_io_register_rsrc+0x10/0x10 [ 206.407555][ T7431] ? __fget_files+0x2a/0x420 [ 206.407576][ T7431] ? io_is_uring_fops+0xd/0x50 [ 206.407594][ T7431] __se_sys_io_uring_register+0x60d/0x1220 [ 206.407620][ T7431] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 206.407640][ T7431] ? ksys_write+0x22a/0x250 [ 206.407655][ T7431] ? exc_page_fault+0x82/0x100 [ 206.407677][ T7431] ? __pfx_ksys_write+0x10/0x10 [ 206.407696][ T7431] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 206.407719][ T7431] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.407743][ T7431] __do_fast_syscall_32+0xb6/0x2b0 [ 206.407767][ T7431] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.407791][ T7431] do_fast_syscall_32+0x34/0x80 [ 206.407814][ T7431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.407833][ T7431] RIP: 0023:0xf7fe3539 [ 206.407853][ T7431] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 206.407865][ T7431] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 206.407881][ T7431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000000f [ 206.407891][ T7431] RDX: 0000000080000140 RSI: 0000000000000020 RDI: 0000000000000000 [ 206.407900][ T7431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.407908][ T7431] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.407919][ T7431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.407942][ T7431] [ 208.077652][ T7456] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 208.264429][ T7458] bond3: (slave geneve2): making interface the new active one [ 208.311134][ T7458] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 208.361079][ T5990] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.390498][ T7456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.359'. [ 208.432496][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.456500][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.476851][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.653515][ T7478] FAULT_INJECTION: forcing a failure. [ 208.653515][ T7478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.679188][ T7478] CPU: 1 UID: 0 PID: 7478 Comm: syz.4.365 Not tainted syzkaller #0 PREEMPT(full) [ 208.679217][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.679229][ T7478] Call Trace: [ 208.679237][ T7478] [ 208.679245][ T7478] dump_stack_lvl+0x189/0x250 [ 208.679272][ T7478] ? __pfx____ratelimit+0x10/0x10 [ 208.679299][ T7478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.679321][ T7478] ? __pfx__printk+0x10/0x10 [ 208.679354][ T7478] should_fail_ex+0x414/0x560 [ 208.679379][ T7478] _copy_to_user+0x31/0xb0 [ 208.679409][ T7478] simple_read_from_buffer+0xe1/0x170 [ 208.679437][ T7478] proc_fail_nth_read+0x1b3/0x220 [ 208.679459][ T7478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.679480][ T7478] ? rw_verify_area+0x2a6/0x4d0 [ 208.679499][ T7478] ? __lock_acquire+0xab9/0xd20 [ 208.679522][ T7478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.679542][ T7478] vfs_read+0x200/0xa30 [ 208.679561][ T7478] ? fdget_pos+0x247/0x320 [ 208.679588][ T7478] ? __pfx___mutex_lock+0x10/0x10 [ 208.679618][ T7478] ? __pfx_vfs_read+0x10/0x10 [ 208.679642][ T7478] ? __fget_files+0x2a/0x420 [ 208.679671][ T7478] ? __fget_files+0x3a0/0x420 [ 208.679695][ T7478] ? __fget_files+0x2a/0x420 [ 208.679739][ T7478] ksys_read+0x145/0x250 [ 208.679757][ T7478] ? __pfx_compat_filldir+0x10/0x10 [ 208.679780][ T7478] ? __pfx_ksys_read+0x10/0x10 [ 208.679803][ T7478] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 208.679833][ T7478] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.679861][ T7478] __do_fast_syscall_32+0xb6/0x2b0 [ 208.679890][ T7478] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.679920][ T7478] do_fast_syscall_32+0x34/0x80 [ 208.679949][ T7478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.679971][ T7478] RIP: 0023:0xf708d539 [ 208.679989][ T7478] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 208.680003][ T7478] RSP: 002b:00000000f547d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 208.680024][ T7478] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d620 [ 208.680037][ T7478] RDX: 000000000000000f RSI: 00000000f7425ff4 RDI: 0000000000000000 [ 208.680049][ T7478] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 208.680059][ T7478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 208.680070][ T7478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.680100][ T7478] [ 209.154283][ T7470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.263119][ T7470] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 209.334922][ T7470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.361329][ T7470] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 209.479982][ T7470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.527343][ T7470] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 209.594994][ T7470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.612492][ T7470] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 209.650256][ T7470] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.672952][ T7470] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 209.953426][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 210.040279][ T7503] FAULT_INJECTION: forcing a failure. [ 210.040279][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.074216][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.4.374 Not tainted syzkaller #0 PREEMPT(full) [ 210.074238][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.074251][ T7503] Call Trace: [ 210.074257][ T7503] [ 210.074264][ T7503] dump_stack_lvl+0x189/0x250 [ 210.074285][ T7503] ? __pfx____ratelimit+0x10/0x10 [ 210.074306][ T7503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.074321][ T7503] ? __pfx__printk+0x10/0x10 [ 210.074345][ T7503] should_fail_ex+0x414/0x560 [ 210.074364][ T7503] _copy_to_user+0x31/0xb0 [ 210.074386][ T7503] simple_read_from_buffer+0xe1/0x170 [ 210.074408][ T7503] proc_fail_nth_read+0x1b3/0x220 [ 210.074424][ T7503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.074440][ T7503] ? rw_verify_area+0x2a6/0x4d0 [ 210.074455][ T7503] ? __lock_acquire+0xab9/0xd20 [ 210.074473][ T7503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.074487][ T7503] vfs_read+0x200/0xa30 [ 210.074515][ T7503] ? fdget_pos+0x247/0x320 [ 210.074541][ T7503] ? __pfx___mutex_lock+0x10/0x10 [ 210.074563][ T7503] ? __pfx_vfs_read+0x10/0x10 [ 210.074579][ T7503] ? __fget_files+0x2a/0x420 [ 210.074601][ T7503] ? __fget_files+0x3a0/0x420 [ 210.074618][ T7503] ? __fget_files+0x2a/0x420 [ 210.074642][ T7503] ksys_read+0x145/0x250 [ 210.074660][ T7503] ? __pfx_ksys_read+0x10/0x10 [ 210.074677][ T7503] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 210.074700][ T7503] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.074722][ T7503] __do_fast_syscall_32+0xb6/0x2b0 [ 210.074745][ T7503] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.074768][ T7503] do_fast_syscall_32+0x34/0x80 [ 210.074792][ T7503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.074810][ T7503] RIP: 0023:0xf708d539 [ 210.074822][ T7503] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 210.074833][ T7503] RSP: 002b:00000000f545c590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 210.074848][ T7503] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545c620 [ 210.074858][ T7503] RDX: 000000000000000f RSI: 00000000f7425ff4 RDI: 0000000000000000 [ 210.074866][ T7503] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 210.074874][ T7503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.074882][ T7503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.074903][ T7503] [ 210.908619][ T7523] netlink: 'syz.2.379': attribute type 8 has an invalid length. [ 210.922348][ T7518] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 210.929147][ T7518] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 210.987886][ T7518] vhci_hcd vhci_hcd.0: Device attached [ 211.054228][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.380'. [ 211.216756][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 211.253089][ T5933] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 211.326395][ T7524] vhci_hcd: connection reset by peer [ 211.378438][ T6006] vhci_hcd: stop threads [ 211.412999][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 211.519668][ T6006] vhci_hcd: release socket [ 211.526048][ T6006] vhci_hcd: disconnect device [ 211.569790][ T30] audit: type=1326 audit(1761017473.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.573734][ T7539] @0Ùeà: renamed from bond_slave_1 (while UP) [ 211.613145][ T30] audit: type=1326 audit(1761017473.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.642015][ T30] audit: type=1326 audit(1761017473.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.669393][ T30] audit: type=1326 audit(1761017473.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.693858][ T7541] loop8: detected capacity change from 0 to 8 [ 211.695049][ T30] audit: type=1326 audit(1761017473.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.725914][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 211.733215][ T30] audit: type=1326 audit(1761017473.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.761268][ T30] audit: type=1326 audit(1761017473.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.762298][ T7541] Dev loop8: unable to read RDB block 8 [ 211.786302][ T30] audit: type=1326 audit(1761017473.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.790817][ T7542] process 'syz.4.385' launched '/dev/fd/3' with NULL argv: empty string added [ 211.816606][ T30] audit: type=1326 audit(1761017473.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.845770][ T30] audit: type=1326 audit(1761017473.510:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7fc00000 [ 211.875689][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 211.903133][ T7541] loop8: unable to read partition table [ 211.909354][ T7541] loop8: partition table beyond EOD, truncated [ 211.936364][ T7541] loop_reread_partitions: partition scan of loop8 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 211.965650][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.005576][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.030209][ T10] usb 4-1: SerialNumber: syz [ 212.269380][ T7547] FAULT_INJECTION: forcing a failure. [ 212.269380][ T7547] name failslab, interval 1, probability 0, space 0, times 1 [ 212.288037][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.0.387 Not tainted syzkaller #0 PREEMPT(full) [ 212.288068][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.288081][ T7547] Call Trace: [ 212.288090][ T7547] [ 212.288099][ T7547] dump_stack_lvl+0x189/0x250 [ 212.288128][ T7547] ? __pfx____ratelimit+0x10/0x10 [ 212.288157][ T7547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.288179][ T7547] ? __pfx__printk+0x10/0x10 [ 212.288204][ T7547] ? __pfx___might_resched+0x10/0x10 [ 212.288234][ T7547] ? fs_reclaim_acquire+0x7d/0x100 [ 212.288266][ T7547] should_fail_ex+0x414/0x560 [ 212.288293][ T7547] should_failslab+0xa8/0x100 [ 212.288323][ T7547] kmem_cache_alloc_noprof+0x74/0x6e0 [ 212.288346][ T7547] ? getname_flags+0xb8/0x540 [ 212.288389][ T7547] getname_flags+0xb8/0x540 [ 212.288423][ T7547] __ia32_sys_mkdirat+0x7a/0xa0 [ 212.288447][ T7547] __do_fast_syscall_32+0xb6/0x2b0 [ 212.288478][ T7547] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.288511][ T7547] do_fast_syscall_32+0x34/0x80 [ 212.288542][ T7547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.288568][ T7547] RIP: 0023:0xf7fd6539 [ 212.288585][ T7547] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 212.288602][ T7547] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 212.288624][ T7547] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 212.288637][ T7547] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 212.288649][ T7547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.288659][ T7547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 212.288670][ T7547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.288701][ T7547] [ 212.474780][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.741304][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.751446][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.041070][ T7556] FAULT_INJECTION: forcing a failure. [ 213.041070][ T7556] name failslab, interval 1, probability 0, space 0, times 0 [ 213.075877][ T7556] CPU: 1 UID: 0 PID: 7556 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT(full) [ 213.075905][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.075917][ T7556] Call Trace: [ 213.075925][ T7556] [ 213.075933][ T7556] dump_stack_lvl+0x189/0x250 [ 213.075960][ T7556] ? __pfx____ratelimit+0x10/0x10 [ 213.075987][ T7556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.076008][ T7556] ? __pfx__printk+0x10/0x10 [ 213.076035][ T7556] ? __pfx___might_resched+0x10/0x10 [ 213.076069][ T7556] should_fail_ex+0x414/0x560 [ 213.076094][ T7556] should_failslab+0xa8/0x100 [ 213.076123][ T7556] __kmalloc_noprof+0xcb/0x7f0 [ 213.076144][ T7556] ? rcu_read_lock_any_held+0xb3/0x120 [ 213.076162][ T7556] ? kernfs_fop_write_iter+0x158/0x540 [ 213.076188][ T7556] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 213.076211][ T7556] kernfs_fop_write_iter+0x158/0x540 [ 213.076245][ T7556] vfs_write+0x5c9/0xb30 [ 213.076273][ T7556] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 213.076301][ T7556] ? __pfx_vfs_write+0x10/0x10 [ 213.076336][ T7556] ? __fget_files+0x2a/0x420 [ 213.076372][ T7556] ksys_write+0x145/0x250 [ 213.076393][ T7556] ? exc_page_fault+0x82/0x100 [ 213.076422][ T7556] ? __pfx_ksys_write+0x10/0x10 [ 213.076459][ T7556] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 213.076491][ T7556] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.076531][ T7556] __do_fast_syscall_32+0xb6/0x2b0 [ 213.076564][ T7556] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.076597][ T7556] do_fast_syscall_32+0x34/0x80 [ 213.076628][ T7556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.076653][ T7556] RIP: 0023:0xf7fd6539 [ 213.076670][ T7556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 213.076686][ T7556] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 213.076707][ T7556] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 213.076721][ T7556] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.076732][ T7556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.076743][ T7556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.076753][ T7556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.076789][ T7556] [ 213.311154][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.322250][ T10] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 213.452727][ T7564] FAULT_INJECTION: forcing a failure. [ 213.452727][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 213.592458][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.4.393 Not tainted syzkaller #0 PREEMPT(full) [ 213.592495][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.592507][ T7564] Call Trace: [ 213.592516][ T7564] [ 213.592525][ T7564] dump_stack_lvl+0x189/0x250 [ 213.592554][ T7564] ? __pfx____ratelimit+0x10/0x10 [ 213.592583][ T7564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.592605][ T7564] ? __pfx__printk+0x10/0x10 [ 213.592634][ T7564] ? __pfx___might_resched+0x10/0x10 [ 213.592669][ T7564] should_fail_ex+0x414/0x560 [ 213.592695][ T7564] should_failslab+0xa8/0x100 [ 213.592726][ T7564] __kmalloc_noprof+0xcb/0x7f0 [ 213.592748][ T7564] ? rcu_read_lock_any_held+0xb3/0x120 [ 213.592781][ T7564] ? kernfs_fop_write_iter+0x158/0x540 [ 213.592806][ T7564] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 213.592829][ T7564] kernfs_fop_write_iter+0x158/0x540 [ 213.592869][ T7564] vfs_write+0x5c9/0xb30 [ 213.592898][ T7564] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 213.592926][ T7564] ? __pfx_vfs_write+0x10/0x10 [ 213.592960][ T7564] ? __fget_files+0x2a/0x420 [ 213.592997][ T7564] ksys_write+0x145/0x250 [ 213.593018][ T7564] ? exc_page_fault+0x82/0x100 [ 213.593047][ T7564] ? __pfx_ksys_write+0x10/0x10 [ 213.593073][ T7564] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 213.593104][ T7564] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.593137][ T7564] __do_fast_syscall_32+0xb6/0x2b0 [ 213.593168][ T7564] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.593200][ T7564] do_fast_syscall_32+0x34/0x80 [ 213.593231][ T7564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.593256][ T7564] RIP: 0023:0xf708d539 [ 213.593273][ T7564] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 213.593289][ T7564] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 213.593310][ T7564] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000c40 [ 213.593324][ T7564] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.593335][ T7564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.593345][ T7564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.593356][ T7564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.593387][ T7564] [ 213.893284][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'. [ 213.902511][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 214.171674][ T7573] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 214.353280][ T7573] bond3: entered promiscuous mode [ 214.483778][ T7573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.642880][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.810200][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 214.850882][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 214.901834][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.936553][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.020708][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.026842][ T5942] usb 4-1: USB disconnect, device number 5 [ 215.049274][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.114050][ T10] usb 5-1: Product: syz [ 215.125023][ T5942] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 215.145884][ T10] usb 5-1: Manufacturer: syz [ 215.181771][ T10] usb 5-1: SerialNumber: syz [ 215.423084][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 215.513271][ T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 215.552982][ T7597] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 215.780357][ T10] usb 5-1: USB disconnect, device number 5 [ 215.894389][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.203279][ T7615] FAULT_INJECTION: forcing a failure. [ 216.203279][ T7615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.312874][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.3.403 Not tainted syzkaller #0 PREEMPT(full) [ 216.312904][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.312916][ T7615] Call Trace: [ 216.312924][ T7615] [ 216.312932][ T7615] dump_stack_lvl+0x189/0x250 [ 216.312961][ T7615] ? __pfx____ratelimit+0x10/0x10 [ 216.312989][ T7615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.313010][ T7615] ? __pfx__printk+0x10/0x10 [ 216.313040][ T7615] ? __might_fault+0xb0/0x130 [ 216.313073][ T7615] should_fail_ex+0x414/0x560 [ 216.313099][ T7615] _copy_from_user+0x2d/0xb0 [ 216.313128][ T7615] get_compat_msghdr+0xad/0x4a0 [ 216.313159][ T7615] ? __pfx_get_compat_msghdr+0x10/0x10 [ 216.313195][ T7615] ___sys_sendmsg+0x193/0x2a0 [ 216.313222][ T7615] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.313283][ T7615] ? __fget_files+0x2a/0x420 [ 216.313309][ T7615] ? __fget_files+0x3a0/0x420 [ 216.313345][ T7615] __sys_sendmsg+0x164/0x220 [ 216.313370][ T7615] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.313403][ T7615] ? __pfx_ksys_write+0x10/0x10 [ 216.313428][ T7615] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 216.313465][ T7615] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.313497][ T7615] __do_fast_syscall_32+0xb6/0x2b0 [ 216.313528][ T7615] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.313560][ T7615] do_fast_syscall_32+0x34/0x80 [ 216.313590][ T7615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.313615][ T7615] RIP: 0023:0xf6ffd539 [ 216.313632][ T7615] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 216.313648][ T7615] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 216.313669][ T7615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 216.313682][ T7615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.313692][ T7615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.313703][ T7615] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 216.313714][ T7615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.313743][ T7615] [ 216.438947][ T5933] vhci_hcd: vhci_device speed not set [ 216.443460][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.546593][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.952919][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.112866][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 217.130592][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.175971][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.215236][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 217.267170][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.378457][ T43] usb 3-1: config 0 descriptor?? [ 217.969509][ T43] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 218.099427][ T7618] FAULT_INJECTION: forcing a failure. [ 218.099427][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 218.099473][ T7618] CPU: 1 UID: 0 PID: 7618 Comm: syz.2.405 Not tainted syzkaller #0 PREEMPT(full) [ 218.099500][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.099512][ T7618] Call Trace: [ 218.099520][ T7618] [ 218.099527][ T7618] dump_stack_lvl+0x189/0x250 [ 218.099570][ T7618] ? __pfx____ratelimit+0x10/0x10 [ 218.099607][ T7618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.099632][ T7618] ? __pfx__printk+0x10/0x10 [ 218.099666][ T7618] ? __pfx___might_resched+0x10/0x10 [ 218.099700][ T7618] should_fail_ex+0x414/0x560 [ 218.099726][ T7618] should_failslab+0xa8/0x100 [ 218.099756][ T7618] __kmalloc_noprof+0xcb/0x7f0 [ 218.099777][ T7618] ? kfree+0x4d/0x6d0 [ 218.099801][ T7618] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 218.099834][ T7618] tomoyo_realpath_from_path+0xe3/0x5d0 [ 218.099860][ T7618] ? tomoyo_domain+0xd9/0x130 [ 218.099897][ T7618] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 218.099929][ T7618] tomoyo_path_number_perm+0x1e8/0x5a0 [ 218.099963][ T7618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 218.100023][ T7618] ? __lock_acquire+0xab9/0xd20 [ 218.100070][ T7618] ? __fget_files+0x2a/0x420 [ 218.100107][ T7618] ? __fget_files+0x3a0/0x420 [ 218.100132][ T7618] ? __fget_files+0x2a/0x420 [ 218.100162][ T7618] security_file_ioctl_compat+0xcb/0x2d0 [ 218.100197][ T7618] __ia32_compat_sys_ioctl+0x128/0x840 [ 218.100220][ T7618] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 218.100242][ T7618] ? __fget_files+0x3a0/0x420 [ 218.100272][ T7618] ? fput+0xa0/0xd0 [ 218.100301][ T7618] ? ksys_write+0x22a/0x250 [ 218.100324][ T7618] ? __pfx_ksys_write+0x10/0x10 [ 218.100350][ T7618] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 218.100381][ T7618] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.100413][ T7618] __do_fast_syscall_32+0xb6/0x2b0 [ 218.100452][ T7618] do_fast_syscall_32+0x34/0x80 [ 218.100482][ T7618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.100513][ T7618] RIP: 0023:0xf701d539 [ 218.100531][ T7618] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 218.100545][ T7618] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 218.100565][ T7618] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004802 [ 218.100578][ T7618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.100589][ T7618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.100600][ T7618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.100610][ T7618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.100642][ T7618] [ 218.100650][ T7618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 218.109472][ T5942] usb 3-1: USB disconnect, device number 7 [ 218.272516][ T30] kauditd_printk_skb: 287 callbacks suppressed [ 218.272538][ T30] audit: type=1326 audit(1761017480.160:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 218.272591][ T30] audit: type=1326 audit(1761017480.170:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 218.272635][ T30] audit: type=1326 audit(1761017480.180:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 218.272679][ T30] audit: type=1326 audit(1761017480.180:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 218.272724][ T30] audit: type=1326 audit(1761017480.180:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 218.272877][ T30] audit: type=1326 audit(1761017480.200:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 218.272925][ T30] audit: type=1326 audit(1761017480.200:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 218.272968][ T30] audit: type=1326 audit(1761017480.200:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 218.621046][ T7649] fido_id[7649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 218.756951][ T7657] FAULT_INJECTION: forcing a failure. [ 218.756951][ T7657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.756988][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: syz.4.414 Not tainted syzkaller #0 PREEMPT(full) [ 218.757011][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.757024][ T7657] Call Trace: [ 218.757032][ T7657] [ 218.757041][ T7657] dump_stack_lvl+0x189/0x250 [ 218.757068][ T7657] ? __pfx____ratelimit+0x10/0x10 [ 218.757096][ T7657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.757119][ T7657] ? __pfx__printk+0x10/0x10 [ 218.757141][ T7657] ? __might_fault+0xb0/0x130 [ 218.757176][ T7657] should_fail_ex+0x414/0x560 [ 218.757203][ T7657] _copy_from_user+0x2d/0xb0 [ 218.757233][ T7657] get_compat_msghdr+0xad/0x4a0 [ 218.757263][ T7657] ? __pfx_get_compat_msghdr+0x10/0x10 [ 218.757300][ T7657] ___sys_sendmsg+0x193/0x2a0 [ 218.757328][ T7657] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.757390][ T7657] ? __fget_files+0x2a/0x420 [ 218.757415][ T7657] ? __fget_files+0x3a0/0x420 [ 218.757453][ T7657] __sys_sendmsg+0x164/0x220 [ 218.757479][ T7657] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.757512][ T7657] ? __pfx_ksys_write+0x10/0x10 [ 218.757539][ T7657] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 218.757571][ T7657] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.757602][ T7657] __do_fast_syscall_32+0xb6/0x2b0 [ 218.757634][ T7657] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.757667][ T7657] do_fast_syscall_32+0x34/0x80 [ 218.757697][ T7657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.757721][ T7657] RIP: 0023:0xf708d539 [ 218.757739][ T7657] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 218.757755][ T7657] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 218.757776][ T7657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 218.757789][ T7657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.757807][ T7657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.757819][ T7657] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.757831][ T7657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.757861][ T7657] [ 219.803414][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 219.963288][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 219.965795][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.967136][ T10] usb 3-1: config 7 has an invalid interface number: 204 but max is 0 [ 219.967166][ T10] usb 3-1: config 7 has no interface number 0 [ 219.969490][ T10] usb 3-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 219.969534][ T10] usb 3-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 219.969562][ T10] usb 3-1: config 7 interface 204 has no altsetting 0 [ 219.974501][ T10] usb 3-1: string descriptor 0 read error: -22 [ 219.974651][ T10] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 219.974676][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.057192][ T10] hub 3-1:7.204: bad descriptor, ignoring hub [ 220.057240][ T10] hub 3-1:7.204: probe with driver hub failed with error -5 [ 220.233820][ T10] asix 3-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 220.646866][ T10] asix 3-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.646894][ T10] asix 3-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 220.776919][ T7691] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 220.803516][ T10] asix 3-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.803568][ T10] asix 3-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 221.070702][ T10] asix 3-1:7.204 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, be:72:69:03:0b:03 [ 221.311560][ T10] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 221.499272][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.813433][ T7695] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 222.471776][ T7707] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 222.694348][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 224.485442][ T7748] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 225.186985][ T30] audit: type=1326 audit(1761017487.130:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7fc00000 [ 226.735712][ T5494] asix 3-1:7.204 eth1: Failed to read reg index 0x0000: -71 [ 226.775777][ T1212] usb 3-1: USB disconnect, device number 8 [ 226.776431][ T1212] asix 3-1:7.204 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 226.813984][ T1212] ------------[ cut here ]------------ [ 226.814049][ T1212] WARNING: CPU: 1 PID: 1212 at net/sched/sch_generic.c:1500 dev_shutdown+0x3e1/0x440 [ 226.814093][ T1212] Modules linked in: [ 226.814137][ T1212] CPU: 1 UID: 0 PID: 1212 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 226.814163][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.814180][ T1212] Workqueue: usb_hub_wq hub_event [ 226.814208][ T1212] RIP: 0010:dev_shutdown+0x3e1/0x440 [ 226.814232][ T1212] Code: 35 49 d5 f8 49 83 7d 00 00 75 19 e8 19 94 6f f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 f4 ff 01 cc e8 00 94 6f f8 90 <0f> 0b 90 eb e1 e8 f5 93 6f f8 4c 89 e7 be 03 00 00 00 e8 38 6a 40 [ 226.814252][ T1212] RSP: 0018:ffffc9000402f160 EFLAGS: 00010287 [ 226.814274][ T1212] RAX: ffffffff8950afd0 RBX: ffff8880529704d0 RCX: 0000000000100000 [ 226.814292][ T1212] RDX: ffffc90018c85000 RSI: 0000000000001738 RDI: 0000000000001739 [ 226.814309][ T1212] RBP: 0000000000000001 R08: ffffc9000402ef47 R09: 1ffff92000805de8 [ 226.814325][ T1212] R10: dffffc0000000000 R11: fffff52000805de9 R12: ffffffff8f5267d0 [ 226.814343][ T1212] R13: ffff8880529705b0 R14: 1ffff1100a52e09a R15: ffffffff8f5267c0 [ 226.814361][ T1212] FS: 0000000000000000(0000) GS:ffff888125e06000(0000) knlGS:0000000000000000 [ 226.814379][ T1212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.814395][ T1212] CR2: 0000000057cec99c CR3: 000000007b896000 CR4: 00000000003526f0 [ 226.814415][ T1212] Call Trace: [ 226.814425][ T1212] [ 226.814443][ T1212] unregister_netdevice_many_notify+0x118c/0x2390 [ 226.814494][ T1212] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 226.814531][ T1212] ? __lock_acquire+0xab9/0xd20 [ 226.814559][ T1212] ? rtnl_net_dev_lock+0x257/0x2f0 [ 226.814586][ T1212] ? __pfx___mutex_lock+0x10/0x10 [ 226.814630][ T1212] unregister_netdevice_queue+0x33c/0x380 [ 226.814664][ T1212] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 226.814712][ T1212] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 226.814739][ T1212] unregister_netdev+0x1f/0x60 [ 226.814769][ T1212] usbnet_disconnect+0xcd/0x380 [ 226.814811][ T1212] usb_unbind_interface+0x26e/0x910 [ 226.814849][ T1212] ? __pfx_usb_unbind_interface+0x10/0x10 [ 226.814879][ T1212] device_release_driver_internal+0x4d9/0x800 [ 226.814924][ T1212] bus_remove_device+0x34d/0x410 [ 226.814957][ T1212] device_del+0x511/0x8e0 [ 226.815012][ T1212] ? __pm_runtime_barrier+0x212/0x460 [ 226.815049][ T1212] ? __pfx_device_del+0x10/0x10 [ 226.815079][ T1212] ? __pfx___mutex_lock+0x10/0x10 [ 226.815131][ T1212] usb_disable_device+0x3e9/0x8a0 [ 226.815169][ T1212] usb_disconnect+0x330/0x950 [ 226.815215][ T1212] hub_event+0x1cf5/0x4a20 [ 226.815273][ T1212] ? do_raw_spin_lock+0x121/0x290 [ 226.815304][ T1212] ? register_lock_class+0x51/0x320 [ 226.815356][ T1212] ? __pfx_hub_event+0x10/0x10 [ 226.815381][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 226.815422][ T1212] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.815451][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 226.815482][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 226.815517][ T1212] process_scheduled_works+0xae1/0x17b0 [ 226.815587][ T1212] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.815642][ T1212] worker_thread+0x8a0/0xda0 [ 226.815680][ T1212] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.815720][ T1212] ? __kthread_parkme+0x7b/0x200 [ 226.815785][ T1212] kthread+0x711/0x8a0 [ 226.815817][ T1212] ? __pfx_worker_thread+0x10/0x10 [ 226.815851][ T1212] ? __pfx_kthread+0x10/0x10 [ 226.815880][ T1212] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.815910][ T1212] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.815942][ T1212] ? __pfx_kthread+0x10/0x10 [ 226.815970][ T1212] ret_from_fork+0x4bc/0x870 [ 226.816007][ T1212] ? __pfx_ret_from_fork+0x10/0x10 [ 226.816045][ T1212] ? __switch_to_asm+0x39/0x70 [ 226.816073][ T1212] ? __switch_to_asm+0x33/0x70 [ 226.816097][ T1212] ? __pfx_kthread+0x10/0x10 [ 226.816212][ T1212] ret_from_fork_asm+0x1a/0x30 [ 226.816267][ T1212] [ 226.816280][ T1212] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 226.816297][ T1212] CPU: 1 UID: 0 PID: 1212 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 226.816324][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.816339][ T1212] Workqueue: usb_hub_wq hub_event [ 226.816365][ T1212] Call Trace: [ 226.816374][ T1212] [ 226.816385][ T1212] dump_stack_lvl+0x99/0x250 [ 226.816412][ T1212] ? __asan_memcpy+0x40/0x70 [ 226.816437][ T1212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.816463][ T1212] ? __pfx__printk+0x10/0x10 [ 226.816506][ T1212] vpanic+0x237/0x6d0 [ 226.816540][ T1212] ? __pfx_vpanic+0x10/0x10 [ 226.816587][ T1212] panic+0xb9/0xc0 [ 226.816619][ T1212] ? __pfx_panic+0x10/0x10 [ 226.816673][ T1212] __warn+0x31b/0x4b0 [ 226.816704][ T1212] ? dev_shutdown+0x3e1/0x440 [ 226.816732][ T1212] ? dev_shutdown+0x3e1/0x440 [ 226.816756][ T1212] report_bug+0x2be/0x4f0 [ 226.816786][ T1212] ? dev_shutdown+0x3e1/0x440 [ 226.816811][ T1212] ? dev_shutdown+0x3e1/0x440 [ 226.816835][ T1212] ? dev_shutdown+0x3e3/0x440 [ 226.816859][ T1212] handle_bug+0x84/0x160 [ 226.816882][ T1212] exc_invalid_op+0x1a/0x50 [ 226.816905][ T1212] asm_exc_invalid_op+0x1a/0x20 [ 226.816927][ T1212] RIP: 0010:dev_shutdown+0x3e1/0x440 [ 226.816951][ T1212] Code: 35 49 d5 f8 49 83 7d 00 00 75 19 e8 19 94 6f f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 f4 ff 01 cc e8 00 94 6f f8 90 <0f> 0b 90 eb e1 e8 f5 93 6f f8 4c 89 e7 be 03 00 00 00 e8 38 6a 40 [ 226.816971][ T1212] RSP: 0018:ffffc9000402f160 EFLAGS: 00010287 [ 226.816992][ T1212] RAX: ffffffff8950afd0 RBX: ffff8880529704d0 RCX: 0000000000100000 [ 226.817010][ T1212] RDX: ffffc90018c85000 RSI: 0000000000001738 RDI: 0000000000001739 [ 226.817026][ T1212] RBP: 0000000000000001 R08: ffffc9000402ef47 R09: 1ffff92000805de8 [ 226.817042][ T1212] R10: dffffc0000000000 R11: fffff52000805de9 R12: ffffffff8f5267d0 [ 226.817059][ T1212] R13: ffff8880529705b0 R14: 1ffff1100a52e09a R15: ffffffff8f5267c0 [ 226.817087][ T1212] ? dev_shutdown+0x3e0/0x440 [ 226.817137][ T1212] unregister_netdevice_many_notify+0x118c/0x2390 [ 226.817189][ T1212] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 226.817226][ T1212] ? __lock_acquire+0xab9/0xd20 [ 226.817254][ T1212] ? rtnl_net_dev_lock+0x257/0x2f0 [ 226.817282][ T1212] ? __pfx___mutex_lock+0x10/0x10 [ 226.817326][ T1212] unregister_netdevice_queue+0x33c/0x380 [ 226.817361][ T1212] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 226.817398][ T1212] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 226.817424][ T1212] unregister_netdev+0x1f/0x60 [ 226.817454][ T1212] usbnet_disconnect+0xcd/0x380 [ 226.817495][ T1212] usb_unbind_interface+0x26e/0x910 [ 226.817534][ T1212] ? __pfx_usb_unbind_interface+0x10/0x10 [ 226.817564][ T1212] device_release_driver_internal+0x4d9/0x800 [ 226.817607][ T1212] bus_remove_device+0x34d/0x410 [ 226.817641][ T1212] device_del+0x511/0x8e0 [ 226.817676][ T1212] ? __pm_runtime_barrier+0x212/0x460 [ 226.817712][ T1212] ? __pfx_device_del+0x10/0x10 [ 226.817741][ T1212] ? __pfx___mutex_lock+0x10/0x10 [ 226.817788][ T1212] usb_disable_device+0x3e9/0x8a0 [ 226.817824][ T1212] usb_disconnect+0x330/0x950 [ 226.817883][ T1212] hub_event+0x1cf5/0x4a20 [ 226.817943][ T1212] ? do_raw_spin_lock+0x121/0x290 [ 226.817973][ T1212] ? register_lock_class+0x51/0x320 [ 226.818026][ T1212] ? __pfx_hub_event+0x10/0x10 [ 226.818051][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 226.818093][ T1212] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.818129][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 226.818161][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 226.818198][ T1212] process_scheduled_works+0xae1/0x17b0 [ 226.818270][ T1212] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.818327][ T1212] worker_thread+0x8a0/0xda0 [ 226.818365][ T1212] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.818408][ T1212] ? __kthread_parkme+0x7b/0x200 [ 226.818456][ T1212] kthread+0x711/0x8a0 [ 226.818485][ T1212] ? __pfx_worker_thread+0x10/0x10 [ 226.818518][ T1212] ? __pfx_kthread+0x10/0x10 [ 226.818546][ T1212] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.818574][ T1212] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.818605][ T1212] ? __pfx_kthread+0x10/0x10 [ 226.818632][ T1212] ret_from_fork+0x4bc/0x870 [ 226.818668][ T1212] ? __pfx_ret_from_fork+0x10/0x10 [ 226.818710][ T1212] ? __switch_to_asm+0x39/0x70 [ 226.818736][ T1212] ? __switch_to_asm+0x33/0x70 [ 226.818762][ T1212] ? __pfx_kthread+0x10/0x10 [ 226.818788][ T1212] ret_from_fork_asm+0x1a/0x30 [ 226.818840][ T1212] [ 226.819165][ T1212] Kernel Offset: disabled