last executing test programs: 8m38.679497389s ago: executing program 32 (id=1487): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 8m31.021869387s ago: executing program 33 (id=1496): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72ffffffff08000000000000000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 7m23.110253254s ago: executing program 34 (id=1571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000005) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) 4m41.020368698s ago: executing program 6 (id=2976): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000002d00)={0x0, 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000140)="34098164beb9ff772387fb79faa04dc97048c893836f84c6f3a42967ac76e5e64bc48d4149b570a20d0c5d6ed44543bed7ad6c1e51e5f135cfcf7afe5b920b961cdcca2563e618fa26192a905c06e68cfc96e452e4423456fc8f340b13a3ac9a713829094db2d955c6b436ecec18cf10c97f46ab5c48af7bb3fcd33eb598f7486c735d1a3cc9cb661c3aa8f6dbc5168dd7fbdc8eb2ef51a364572bdc762e9f34e7dcaf7bf1a6d3f0b54c5b581a33ad328c18880995a75ef5331fa13136480bde56b626a202424ca4b71e5b39719468dd", 0xd0}, {&(0x7f0000000540)="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", 0x1000}], 0x2, &(0x7f0000001580)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0xe, "d44532379133a98973b5427d"}, @ssrr={0x89, 0x17, 0xbc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @timestamp_addr={0x44, 0x24, 0xa5, 0x1, 0xb, [{@local, 0x4}, {@empty, 0xf}, {@local}, {@empty, 0x26f}]}, @ssrr={0x89, 0xb, 0x33, [@local, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff9}}], 0xc8}}], 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m40.421530059s ago: executing program 6 (id=2979): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0xb, {{0xa, 0x4e21, 0x100003, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x1, @mcast1}}}, 0x88) 4m40.292340293s ago: executing program 6 (id=2982): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) preadv(r0, 0x0, 0x0, 0x5fae, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000003c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m38.855479458s ago: executing program 6 (id=2991): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6f8, 0x48a21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x203}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) (async) r3 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r8 = socket$netlink(0x10, 0x3, 0x12) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x294, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x36}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x67f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3dc040bb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8cdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfd39}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x400c4}, 0x4005) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 4m37.288750161s ago: executing program 6 (id=3007): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50}}, 0xffffff7f00000000) 4m37.044735894s ago: executing program 6 (id=3010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab408090507", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) 4m21.791963754s ago: executing program 35 (id=3010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab408090507", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) 4m5.128977388s ago: executing program 4 (id=3133): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) 4m5.090075335s ago: executing program 4 (id=3134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x5, 0x9eff5a12a2dde60, 0x7ff, 0x1, 0xfffffffe, 0x2000008}]}) 4m4.904645318s ago: executing program 4 (id=3135): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 4m4.874259955s ago: executing program 4 (id=3136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m3.718620175s ago: executing program 4 (id=3140): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0xf644, 0x40, 0x4000, 0x6}, 0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) io_setup(0x8, &(0x7f0000000600)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000280)={0x4, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x0, 0x0, {0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000180)=[{0x0}], 0x1) creat(0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) poll(0x0, 0x0, 0x8) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x5, 0x5, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}]}, 0x28}}, 0x40000) 4m2.676339977s ago: executing program 4 (id=3145): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) 3m47.215857544s ago: executing program 36 (id=3145): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) 3m28.916841152s ago: executing program 8 (id=3250): getrusage(0xffffffffffffffff, &(0x7f0000000640)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x300, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 3m27.529128772s ago: executing program 7 (id=3256): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 3m27.420844723s ago: executing program 8 (id=3257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100fcffffff0000000000000000000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000fefffffaffffffffffffff000000000005000000000000a47000000000000000ff7f0000000000000800000000000000010103"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 3m27.419620184s ago: executing program 7 (id=3259): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x15, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 3m27.310665655s ago: executing program 7 (id=3260): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000100)) 3m27.308649321s ago: executing program 8 (id=3261): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 3m27.20345718s ago: executing program 7 (id=3262): r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x64, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 3m27.128402605s ago: executing program 7 (id=3263): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 3m27.121256402s ago: executing program 7 (id=3264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x7, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 3m26.57835182s ago: executing program 8 (id=3267): getrusage(0xffffffffffffffff, &(0x7f0000000640)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x300, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 3m25.206895045s ago: executing program 8 (id=3275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) 3m25.125341528s ago: executing program 8 (id=3276): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000400008800c000780080006001572c6"], 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 3m11.6616932s ago: executing program 37 (id=3264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x7, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 3m9.663279884s ago: executing program 38 (id=3276): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000400008800c000780080006001572c6"], 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1m38.0896539s ago: executing program 0 (id=4053): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 1m37.967889386s ago: executing program 0 (id=4054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xac1e0100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 1m37.867635187s ago: executing program 0 (id=4057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 1m36.907705981s ago: executing program 0 (id=4064): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m36.752654786s ago: executing program 0 (id=4066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0xde5f1afd190b4725, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x4048084) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf2502000000140006006970766c616e300000000000000000002f00070073797374656d5f753a6f626a6563cf79d5aca3979d6a9531745f723a73656d616e6167655f7472616e735f6c6f636b5f743a73300000050001000000000008000500ffffffff080004006401010214000200fe88000000000000000000000000000108"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040040) unshare(0x400) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x2, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}, {{0x4, 0x1, 0x0, 0x1}, {0x4}}], 0x18) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1m36.591620357s ago: executing program 0 (id=4070): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa000000}, 0x48) 1m21.446377706s ago: executing program 39 (id=4070): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa000000}, 0x48) 3.735505845s ago: executing program 1 (id=4657): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.424395679s ago: executing program 1 (id=4662): syz_emit_ethernet(0x32, &(0x7f0000000340)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) 3.398093831s ago: executing program 1 (id=4663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf0, 0x0, 0x3, 0x3, 0x3, 0x4}, {0xd0, 0x2, 0x9, 0x100, 0x7f, 0xd1a7}, 0x1c000, 0x80000001, 0x2bf}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x968378ce08bc2429}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 2.173287705s ago: executing program 2 (id=4675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1.842545917s ago: executing program 1 (id=4679): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 1.533067333s ago: executing program 3 (id=4685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 1.373947793s ago: executing program 2 (id=4686): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.303981811s ago: executing program 3 (id=4687): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000c21000/0x1000)=nil, &(0x7f0000ec5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d25000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20048040) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r1) 1.261092418s ago: executing program 3 (id=4688): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) write$tun(r0, &(0x7f0000001400)=ANY=[], 0x152) 1.119735934s ago: executing program 3 (id=4689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf0, 0x0, 0x3, 0x3, 0x3, 0x4}, {0xd0, 0x2, 0x9, 0x100, 0x7f, 0xd1a7}, 0x1c000, 0x80000001, 0x2bf}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x968378ce08bc2429}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1.117561879s ago: executing program 2 (id=4690): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000200000000000000000850000006100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(0x0, 0x2a4c2, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fanotify_init(0x10, 0x80000) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @empty}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x11b, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x800, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.087201721s ago: executing program 5 (id=4691): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 984.468483ms ago: executing program 5 (id=4692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 984.123326ms ago: executing program 5 (id=4693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf0, 0x0, 0x3, 0x3, 0x3, 0x4}, {0xd0, 0x2, 0x9, 0x100, 0x7f, 0xd1a7}, 0x1c000, 0x80000001, 0x2bf}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x968378ce08bc2429}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) 973.213125ms ago: executing program 1 (id=4694): socket(0x1d, 0x2, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 655.043941ms ago: executing program 2 (id=4695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 627.099721ms ago: executing program 1 (id=4696): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x3, 0x7, 0x2, 0x2}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf5"}}}}, 0x36) 502.14075ms ago: executing program 3 (id=4697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 423.675955ms ago: executing program 9 (id=4699): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd", 0x4}, {&(0x7f00000002c0)="c5feaad002b474cb445c105793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d5a4865683f38e37fa4e4a73ae8987df1fd506f637df8e2347b7639f0aada640e8b719fb9c14ad514ed72a31b902c381727c4678ff674c54f44c0480afff63af04314340ecaabd6d77de9d90ed937033c437f9445b9c1fa27e63ac28ca38cff1af01aebe7cf1be1a6562ac1a1c75a048f65507f96e9cf2c22656b4a0508520062433fac", 0xbe}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="7350aa0f0648e34ae75b1ef5919f578796792e8ec84b396ec9d00237af3097d2", 0x20}, {&(0x7f00000003c0)="61681f7d04b54ad4180938c4d794e7561783440d3df171fa73e095296852010ca15871bad7324adabb057bcd140eaa45d934d94e9cb60bea7046a63427d58daacfdf23d21a7f0c48e49c638cebb25b45111f3aac186e6d8133b17f5aba5ee62393949340dc49923f7281e30d08bd0474b2e44c0adcc003255391b425345779764cd47fdc6e9d79074d895a19be86724bf70d582cd8108deb988aaa48c1f5ade5a88564a6066019acc618be3e60c6ee9c2718a4fba664", 0xb6}], 0x2}}], 0x2, 0x4000810) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x28f}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 422.128611ms ago: executing program 5 (id=4700): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) write$tun(r0, &(0x7f0000001400)=ANY=[], 0x152) 408.340494ms ago: executing program 9 (id=4701): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_io_uring_setup(0x3438, &(0x7f0000000540)={0x0, 0x595f, 0x800, 0x0, 0x800e8, 0x0, r0}, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 307.58479ms ago: executing program 9 (id=4702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000002100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="ea", 0x1, 0x4000000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 306.021066ms ago: executing program 9 (id=4703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ff"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x4000}, 0x38) 259.747546ms ago: executing program 2 (id=4704): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) write$nbd(0xffffffffffffffff, &(0x7f0000000240)={0x67446698, 0x1, 0x3, 0x2, 0x2, "dc9678f7d6a42c22d13a152deef083702456d9c782773f4c5e75dcc4e58ae4d5b687b533"}, 0x34) 216.5961ms ago: executing program 9 (id=4705): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000200000000000000000850000006100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(0x0, 0x2a4c2, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fanotify_init(0x10, 0x80000) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @empty}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x11b, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x800, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 216.282552ms ago: executing program 5 (id=4706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000304"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) 161.465848ms ago: executing program 2 (id=4707): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x0, {0x2, 0xf0, 0x4}, {0x0, 0x1, 0x6}, 0x2}, {0x3, 0x0, {0x0, 0x0, 0x3}, {0x1, 0x1, 0x2}, 0xfe, 0xfe}, {0x3, 0x0, {0x0, 0xd}, {0x0, 0xf0, 0x3}, 0x2, 0x2}], 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0xfffe) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 125.841949ms ago: executing program 5 (id=4708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf0, 0x0, 0x3, 0x3, 0x3, 0x4}, {0xd0, 0x2, 0x9, 0x100, 0x7f, 0xd1a7}, 0x1c000, 0x80000001, 0x2bf}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x968378ce08bc2429}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 80.842523ms ago: executing program 9 (id=4709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback, r1, 0x2f, 0x2030, 0x4, @void, @void, @value=r2}, 0x20) 0s ago: executing program 3 (id=4710): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000001"], 0x48) r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) kernel console output (not intermixed with test programs): ct, device number 28 [ 593.504748][T12524] udevd[12524]: setting mode of /dev/bus/usb/008/028 to 020664 failed: No such file or directory [ 593.505248][T12524] udevd[12524]: setting owner of /dev/bus/usb/008/028 to uid=0, gid=0 failed: No such file or directory [ 593.866640][T14631] gtp1: entered allmulticast mode [ 593.955495][ T5692] scsi host2: usb-storage 3-1:0.0 [ 593.982705][ T5692] usb 3-1: USB disconnect, device number 56 [ 594.023724][T14638] netlink: 'syz.1.2792': attribute type 2 has an invalid length. [ 594.023743][T14638] netlink: 'syz.1.2792': attribute type 1 has an invalid length. [ 594.130320][T14644] overlayfs: missing 'lowerdir' [ 594.382154][T10449] scsi host1: usb-storage 5-1:0.0 [ 594.388085][T10449] usb 5-1: USB disconnect, device number 46 [ 594.766490][T14658] xfrm0 speed is unknown, defaulting to 1000 [ 594.767746][T14658] xfrm0 speed is unknown, defaulting to 1000 [ 594.769804][T14658] xfrm0 speed is unknown, defaulting to 1000 [ 594.892484][T14658] infiniband syz0: set active [ 594.892522][ T5692] xfrm0 speed is unknown, defaulting to 1000 [ 594.892552][T14658] infiniband syz0: added xfrm0 [ 594.913294][T14658] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 594.913319][T14658] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 594.913337][T14658] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 594.927258][T14658] RDS/IB: syz0: added [ 594.927304][T14658] smc: adding ib device syz0 with port count 1 [ 594.927319][T14658] smc: ib device syz0 port 1 has no pnetid [ 594.927374][T10449] xfrm0 speed is unknown, defaulting to 1000 [ 594.928707][T14658] xfrm0 speed is unknown, defaulting to 1000 [ 595.067291][T14658] xfrm0 speed is unknown, defaulting to 1000 [ 595.179618][T14658] xfrm0 speed is unknown, defaulting to 1000 [ 595.330324][T14679] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2809'. [ 595.356417][T14681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.357050][T14681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.742116][T14684] gtp1: entered allmulticast mode [ 596.190625][T14658] xfrm0 speed is unknown, defaulting to 1000 [ 596.369649][T14658] xfrm0 speed is unknown, defaulting to 1000 [ 596.627519][T14708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.405528][T14720] Invalid argument reading file caps for ./file0 [ 599.488000][T14757] FAULT_INJECTION: forcing a failure. [ 599.488000][T14757] name failslab, interval 1, probability 0, space 0, times 0 [ 599.488035][T14757] CPU: 0 UID: 0 PID: 14757 Comm: syz.6.2837 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 599.488060][T14757] Tainted: [L]=SOFTLOCKUP [ 599.488066][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.488076][T14757] Call Trace: [ 599.488082][T14757] [ 599.488089][T14757] dump_stack_lvl+0xe8/0x150 [ 599.488114][T14757] should_fail_ex+0x467/0x600 [ 599.488140][T14757] should_failslab+0xa8/0x100 [ 599.488163][T14757] kmem_cache_alloc_noprof+0x87/0x680 [ 599.488182][T14757] ? vm_area_dup+0x28/0x670 [ 599.488315][T14757] vm_area_dup+0x28/0x670 [ 599.488335][T14757] ? __split_vma+0x1ce/0xa40 [ 599.488376][T14757] __split_vma+0x1e4/0xa40 [ 599.488400][T14757] ? unwind_get_return_address+0x4d/0x90 [ 599.488489][T14757] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 599.488540][T14757] ? mas_next_slot+0xc94/0xd70 [ 599.488622][T14757] ? __pfx___split_vma+0x10/0x10 [ 599.488642][T14757] ? mas_find+0xab1/0xcf0 [ 599.488663][T14757] vms_gather_munmap_vmas+0x4e3/0x1370 [ 599.488692][T14757] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 599.488715][T14757] ? mas_find+0xa23/0xcf0 [ 599.488738][T14757] mmap_region+0x914/0x2310 [ 599.488763][T14757] ? rcu_is_watching+0x15/0xb0 [ 599.488786][T14757] ? __pfx_mmap_region+0x10/0x10 [ 599.488809][T14757] ? smack_log+0xf5/0x3f0 [ 599.488888][T14757] ? __css_rstat_updated+0x235/0x540 [ 599.488934][T14757] ? __pfx___css_rstat_updated+0x10/0x10 [ 599.488950][T14757] ? unwind_next_frame+0x8f/0x2550 [ 599.488973][T14757] ? is_bpf_text_address+0x26/0x2b0 [ 599.488994][T14757] ? rcu_is_watching+0x15/0xb0 [ 599.489034][T14757] ? rcu_is_watching+0x15/0xb0 [ 599.489055][T14757] ? trace_irq_enable+0x3b/0x140 [ 599.489081][T14757] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 599.489139][T14757] ? cap_mmap_addr+0xaf/0x100 [ 599.489181][T14757] ? bpf_lsm_mmap_addr+0x9/0x50 [ 599.489228][T14757] ? security_mmap_addr+0x71/0x240 [ 599.489278][T14757] do_mmap+0xc1e/0x10b0 [ 599.489323][T14757] ? __pfx_do_mmap+0x10/0x10 [ 599.489340][T14757] ? rwbase_write_lock+0x550/0x720 [ 599.489360][T14757] vm_mmap_pgoff+0x275/0x4e0 [ 599.489414][T14757] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 599.489427][T14757] ? ksys_write+0x248/0x270 [ 599.489448][T14757] ? __pfx_ksys_write+0x10/0x10 [ 599.489469][T14757] ? rcu_is_watching+0x15/0xb0 [ 599.489489][T14757] ? __x64_sys_mmap+0x7f/0x140 [ 599.489508][T14757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.489526][T14757] do_syscall_64+0x174/0x580 [ 599.489551][T14757] ? clear_bhb_loop+0x40/0x90 [ 599.489569][T14757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.489585][T14757] RIP: 0033:0x7fadc51fce59 [ 599.489601][T14757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.489615][T14757] RSP: 002b:00007fadc344e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 599.489635][T14757] RAX: ffffffffffffffda RBX: 00007fadc5475fa0 RCX: 00007fadc51fce59 [ 599.489647][T14757] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 599.489659][T14757] RBP: 00007fadc344e090 R08: ffffffffffffffff R09: 0000000000000000 [ 599.489671][T14757] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 599.489682][T14757] R13: 00007fadc5476038 R14: 00007fadc5475fa0 R15: 00007ffc036ab738 [ 599.489701][T14757] [ 599.714952][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 599.874782][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 599.876202][ T9] usb 8-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 599.876228][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.885390][ T9] usb 8-1: config 0 descriptor?? [ 599.913912][ T9] gm12u320 8-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 599.914071][ T9] gm12u320 8-1:0.0: probe with driver gm12u320 failed with error -5 [ 599.928260][ T9] usb-storage 8-1:0.0: USB Mass Storage device detected [ 599.945884][ T9] usb-storage 8-1:0.0: device ignored [ 600.118629][ T9] usb 8-1: USB disconnect, device number 29 [ 600.136212][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.136503][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.335054][T10446] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 600.432483][T14796] gtp2: entered allmulticast mode [ 600.935176][T10446] usb 5-1: Using ep0 maxpacket: 8 [ 600.938809][T10446] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 600.938836][T10446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 600.938854][T10446] usb 5-1: Product: syz [ 600.938865][T10446] usb 5-1: Manufacturer: syz [ 600.938877][T10446] usb 5-1: SerialNumber: syz [ 600.940876][T10446] usb 5-1: config 0 descriptor?? [ 600.944294][T10446] usbtest 5-1:0.0: FX2 device [ 600.944311][T10446] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 601.201893][T10446] usb 5-1: USB disconnect, device number 47 [ 601.205143][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 601.205158][ T36] audit: type=1326 audit(1782123758.922:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.7.2851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8a68ece59 code=0x0 [ 601.584848][ T5781] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 601.737393][ T5781] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 601.737418][ T5781] usb 8-1: config 1 has no interface number 0 [ 601.737447][ T5781] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 601.737469][ T5781] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 601.737491][ T5781] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid maxpacket 1600, setting to 1024 [ 601.737512][ T5781] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 601.737531][ T5781] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.745350][ T5781] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 601.745378][ T5781] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.745394][ T5781] usb 8-1: Product: syz [ 601.745406][ T5781] usb 8-1: Manufacturer: syz [ 601.745418][ T5781] usb 8-1: SerialNumber: syz [ 601.754790][T14810] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 601.754954][T14810] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 601.959117][T14810] syz.7.2852: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 601.960132][T14810] CPU: 1 UID: 0 PID: 14810 Comm: syz.7.2852 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 601.960157][T14810] Tainted: [L]=SOFTLOCKUP [ 601.960163][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.960173][T14810] Call Trace: [ 601.960180][T14810] [ 601.960187][T14810] dump_stack_lvl+0xe8/0x150 [ 601.960215][T14810] warn_alloc+0x24c/0x270 [ 601.960234][T14810] ? __se_sys_ioctl+0x47/0x170 [ 601.960258][T14810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.960277][T14810] ? __pfx_warn_alloc+0x10/0x10 [ 601.960310][T14810] __vmalloc_node_range_noprof+0x12c/0x1730 [ 601.960335][T14810] ? rcu_is_watching+0x15/0xb0 [ 601.960357][T14810] ? trace_irq_enable+0x3b/0x140 [ 601.960377][T14810] ? rcu_is_watching+0x15/0xb0 [ 601.960398][T14810] ? lock_release+0x4b/0x3c0 [ 601.960418][T14810] ? kfree+0x1c5/0x6c0 [ 601.960434][T14810] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 601.960524][T14810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 601.960544][T14810] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.960568][T14810] ? rcu_is_watching+0x15/0xb0 [ 601.960590][T14810] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 601.960615][T14810] vmalloc_noprof+0xb2/0xe0 [ 601.960634][T14810] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 601.960657][T14810] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 601.960677][T14810] ? dvb_demux_do_ioctl+0x323/0x540 [ 601.960698][T14810] dvb_demux_do_ioctl+0x460/0x540 [ 601.960722][T14810] dvb_usercopy+0x199/0x2e0 [ 601.960743][T14810] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 601.960764][T14810] ? __pfx_dvb_usercopy+0x10/0x10 [ 601.960786][T14810] ? __fget_files+0x3a8/0x420 [ 601.960805][T14810] ? __fget_files+0x2a/0x420 [ 601.960824][T14810] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 601.960845][T14810] dvb_demux_ioctl+0x29/0x40 [ 601.960867][T14810] __se_sys_ioctl+0xff/0x170 [ 601.960889][T14810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.960906][T14810] do_syscall_64+0x174/0x580 [ 601.960929][T14810] ? trace_irq_disable+0x3b/0x140 [ 601.960947][T14810] ? clear_bhb_loop+0x40/0x90 [ 601.960966][T14810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.960983][T14810] RIP: 0033:0x7fa8a68ece59 [ 601.960999][T14810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.961013][T14810] RSP: 002b:00007fa8a4b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.961031][T14810] RAX: ffffffffffffffda RBX: 00007fa8a6b65fa0 RCX: 00007fa8a68ece59 [ 601.961044][T14810] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 601.961055][T14810] RBP: 00007fa8a6982e6f R08: 0000000000000000 R09: 0000000000000000 [ 601.961066][T14810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.961076][T14810] R13: 00007fa8a6b66038 R14: 00007fa8a6b65fa0 R15: 00007ffd43901008 [ 601.961096][T14810] [ 601.973951][T14810] Mem-Info: [ 601.973965][T14810] active_anon:3103 inactive_anon:13221 isolated_anon:0 [ 601.973965][T14810] active_file:25776 inactive_file:35142 isolated_file:0 [ 601.973965][T14810] unevictable:768 dirty:286 writeback:0 [ 601.973965][T14810] slab_reclaimable:12580 slab_unreclaimable:113841 [ 601.973965][T14810] mapped:33587 shmem:8087 pagetables:5185 [ 601.973965][T14810] sec_pagetables:0 bounce:0 [ 601.973965][T14810] kernel_misc_reclaimable:0 [ 601.973965][T14810] free:1271629 free_pcp:4067 free_cma:0 [ 601.974019][T14810] Node 0 active_anon:12412kB inactive_anon:50836kB active_file:102912kB inactive_file:140568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134348kB dirty:1144kB writeback:0kB shmem:28764kB kernel_stack:15508kB pagetables:20588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 601.974786][T14810] Node 1 active_anon:0kB inactive_anon:2048kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3584kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 601.974839][T14810] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 601.976560][T14810] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 601.976592][T14810] Node 0 DMA32 free:1138884kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12412kB inactive_anon:50840kB active_file:102912kB inactive_file:140568kB unevictable:1536kB writepending:1144kB zspages:0kB present:3129332kB managed:2565996kB mlocked:0kB bounce:0kB free_pcp:15152kB local_pcp:2108kB free_cma:0kB [ 601.976662][T14810] lowmem_reserve[]: 0 0 0 0 0 [ 601.977924][T14810] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 601.977975][T14810] lowmem_reserve[]: 0 0 0 0 0 [ 601.979080][T14810] Node 1 Normal free:3932288kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:2048kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1108kB local_pcp:1108kB free_cma:0kB [ 601.979137][T14810] lowmem_reserve[]: 0 0 0 0 0 [ 601.979164][T14810] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 601.980649][T14810] Node 0 DMA32: 224*4kB (ME) 753*8kB (UME) 884*16kB (UME) 1220*32kB (UME) 806*64kB (UME) 446*128kB (UME) 367*256kB (UME) 245*512kB (UME) 167*1024kB (UME) 3*2048kB (UE) 140*4096kB (UME) = 1138760kB [ 601.981567][T14810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 601.982428][T14810] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 4*16kB (UM) 5*32kB (UM) 8*64kB (UM) 5*128kB (UM) 1*256kB (U) 5*512kB (UM) 4*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3932288kB [ 601.983203][T14810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 601.983998][T14810] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 601.984014][T14810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 601.984029][T14810] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 601.984042][T14810] 68997 total pagecache pages [ 601.984056][T14810] 0 pages in swap cache [ 601.984062][T14810] Free swap = 124996kB [ 601.984068][T14810] Total swap = 124996kB [ 601.984075][T14810] 2097051 pages RAM [ 601.984081][T14810] 0 pages HighMem/MovableOnly [ 601.984087][T14810] 423889 pages reserved [ 601.984093][T14810] 0 pages cma reserved [ 602.156793][T14829] usb usb7: usbfs: process 14829 (syz.4.2860) did not claim interface 0 before use [ 602.680627][ T5781] usb 8-1: Error in usbnet_get_endpoints (-71) [ 602.714285][ T5781] usb 8-1: USB disconnect, device number 30 [ 603.574375][T14849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.583481][T14849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.115593][T14860] gtp3: entered allmulticast mode [ 605.033495][T14873] Invalid ELF header magic: != ELF [ 605.448609][ T4909] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 605.451260][ T4909] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 605.452278][ T4909] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 605.454324][ T4909] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 605.466745][ T4909] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 605.914754][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 606.077019][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 606.077048][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 606.078588][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 606.078602][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 606.082268][ T9] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 606.082284][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.082294][ T9] usb 8-1: Product: syz [ 606.082301][ T9] usb 8-1: Manufacturer: syz [ 606.082307][ T9] usb 8-1: SerialNumber: syz [ 606.090447][ T9] usb 8-1: config 0 descriptor?? [ 606.115888][ T9] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 606.284837][T10446] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 606.324886][T14879] xfrm0 speed is unknown, defaulting to 1000 [ 606.545255][T10446] usb 3-1: Using ep0 maxpacket: 32 [ 606.947171][T14902] gtp2: entered allmulticast mode [ 607.469295][T10446] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 607.469322][T10446] usb 3-1: config 0 has no interface number 0 [ 607.474956][ T4909] Bluetooth: hci5: command tx timeout [ 607.495750][T10446] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 607.495778][T10446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.495795][T10446] usb 3-1: Product: syz [ 607.495807][T10446] usb 3-1: Manufacturer: syz [ 607.495819][T10446] usb 3-1: SerialNumber: syz [ 607.541272][T10446] usb 3-1: config 0 descriptor?? [ 607.885061][ T5692] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 608.023642][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.023780][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.023998][T14879] bridge_slave_0: entered allmulticast mode [ 608.048784][T14879] bridge_slave_0: entered promiscuous mode [ 608.049301][ T5692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.049368][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 608.049435][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 608.049456][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 608.049472][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 608.052230][ T5692] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 608.052255][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 608.052272][ T5692] usb 5-1: Product: syz [ 608.052285][ T5692] usb 5-1: Manufacturer: syz [ 608.052297][ T5692] usb 5-1: SerialNumber: syz [ 608.053014][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.053293][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.053527][T14879] bridge_slave_1: entered allmulticast mode [ 608.069648][ T5692] usb 5-1: config 0 descriptor?? [ 608.174568][T14879] bridge_slave_1: entered promiscuous mode [ 608.205555][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.208586][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.250419][T14879] team0: Port device team_slave_0 added [ 608.252971][T14879] team0: Port device team_slave_1 added [ 608.289362][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.289377][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.289395][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.290759][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.290771][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.290834][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.361488][T10446] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 608.361554][T10446] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 608.361935][T10446] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 608.362189][T10446] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 608.372057][T10446] usb 3-1: USB disconnect, device number 57 [ 608.440412][ T5692] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 608.440569][ T5692] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 608.505553][T14879] hsr_slave_0: entered promiscuous mode [ 608.506834][T14879] hsr_slave_1: entered promiscuous mode [ 608.507527][T14879] debugfs: 'hsr0' already exists in 'hsr' [ 608.507581][T14879] Cannot create hsr debugfs directory [ 608.742145][ T9] scsi host1: usb-storage 8-1:0.0 [ 608.755127][ T9] usb 8-1: USB disconnect, device number 31 [ 608.897631][T14879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.002794][ T5692] usb 5-1: USB disconnect, device number 48 [ 609.356713][T14879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.554881][ T4909] Bluetooth: hci5: command tx timeout [ 609.626492][T14879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.866565][T14879] netdevsim netdevsim1 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.069561][T14879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 610.096706][T14879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.097313][T14879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 610.137718][T14879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.138343][T14879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 610.177051][T14879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.178347][T14879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 610.216671][T14879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.258731][T14879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.268359][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.281941][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.281986][ T7897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.283209][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.283267][ T7897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.496466][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.523812][T14879] veth0_vlan: entered promiscuous mode [ 610.529209][T14879] veth1_vlan: entered promiscuous mode [ 610.549714][T14879] veth0_macvtap: entered promiscuous mode [ 610.551995][T14879] veth1_macvtap: entered promiscuous mode [ 610.561578][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.581797][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.593375][ T7897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.593805][ T7897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.594132][ T7897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.594163][ T7897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.754527][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.754546][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.785105][ T7897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.785124][ T7897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.634937][ T4909] Bluetooth: hci5: command tx timeout [ 613.714920][ T4909] Bluetooth: hci5: command tx timeout [ 624.199969][T14958] FAULT_INJECTION: forcing a failure. [ 624.199969][T14958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.200012][T14958] CPU: 1 UID: 0 PID: 14958 Comm: syz.4.2893 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 624.200036][T14958] Tainted: [L]=SOFTLOCKUP [ 624.200042][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.200052][T14958] Call Trace: [ 624.200059][T14958] [ 624.200066][T14958] dump_stack_lvl+0xe8/0x150 [ 624.200089][T14958] should_fail_ex+0x467/0x600 [ 624.200114][T14958] _copy_from_user+0x2d/0xb0 [ 624.200132][T14958] ___sys_sendmsg+0x1c6/0x360 [ 624.200151][T14958] ? rcu_is_watching+0x15/0xb0 [ 624.200173][T14958] ? get_pid_task+0x20/0x1f0 [ 624.200191][T14958] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.200210][T14958] ? rcu_is_watching+0x15/0xb0 [ 624.200241][T14958] ? __fget_files+0x2a/0x420 [ 624.200258][T14958] ? __fget_files+0x3a8/0x420 [ 624.200277][T14958] __x64_sys_sendmsg+0x1b7/0x290 [ 624.200294][T14958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.200316][T14958] ? rcu_is_watching+0x15/0xb0 [ 624.200338][T14958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.200355][T14958] do_syscall_64+0x174/0x580 [ 624.200381][T14958] ? trace_irq_disable+0x3b/0x140 [ 624.200401][T14958] ? clear_bhb_loop+0x40/0x90 [ 624.200420][T14958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.200436][T14958] RIP: 0033:0x7fe04ae2ce59 [ 624.200451][T14958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.200465][T14958] RSP: 002b:00007fe04907e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.200484][T14958] RAX: ffffffffffffffda RBX: 00007fe04b0a5fa0 RCX: 00007fe04ae2ce59 [ 624.200496][T14958] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 624.200507][T14958] RBP: 00007fe04907e090 R08: 0000000000000000 R09: 0000000000000000 [ 624.200517][T14958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.200525][T14958] R13: 00007fe04b0a6038 R14: 00007fe04b0a5fa0 R15: 00007ffe824b3618 [ 624.200545][T14958] [ 624.327919][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 624.484768][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 624.489282][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 624.489310][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 624.489327][ T9] usb 3-1: Product: syz [ 624.489339][ T9] usb 3-1: Manufacturer: syz [ 624.489351][ T9] usb 3-1: SerialNumber: syz [ 624.520996][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.521045][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.547067][ T9] usb 3-1: config 0 descriptor?? [ 624.556946][ T9] usbtest 3-1:0.0: FX2 device [ 624.556965][ T9] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 625.158131][ T4909] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 625.165165][T14973] netlink: 'syz.6.2898': attribute type 2 has an invalid length. [ 625.165184][T14973] netlink: 'syz.6.2898': attribute type 1 has an invalid length. [ 625.223562][ T5692] usb 3-1: USB disconnect, device number 58 [ 625.321507][T14976] loop8: detected capacity change from 0 to 7 [ 625.326441][T14976] Dev loop8: unable to read RDB block 7 [ 625.326481][T14976] loop8: unable to read partition table [ 625.326607][T14976] loop8: partition table beyond EOD, truncated [ 625.328605][T14976] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 625.910950][T14992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.025069][T14990] macsec1: left promiscuous mode [ 626.025262][T14990] ip6gre1: left allmulticast mode [ 626.107972][T14990] gtp0: left allmulticast mode [ 626.109847][T14990] gtp1: left allmulticast mode [ 626.112297][T14990] gtp2: left allmulticast mode [ 626.307088][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.307317][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.310660][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.311026][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.425548][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.426084][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.428182][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.428967][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.429421][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.430322][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.432557][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.433045][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.433486][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.433896][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.266792][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2922'. [ 628.266919][T15050] nbd: must specify a device to reconfigure [ 628.667410][T15055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2923'. [ 630.099309][T15076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2932'. [ 630.263358][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2936'. [ 630.604843][T15101] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2942'. [ 630.667350][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.668624][T15105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.905004][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2947'. [ 630.974822][ T818] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 631.135464][ T818] usb 5-1: too many configurations: 126, using maximum allowed: 8 [ 631.145273][ T818] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 631.145301][ T818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.145318][ T818] usb 5-1: Product: syz [ 631.145329][ T818] usb 5-1: Manufacturer: syz [ 631.145341][ T818] usb 5-1: SerialNumber: syz [ 631.247188][ T5579] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 631.305247][T15123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.310068][T15123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.384030][ T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 631.384057][ T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 631.394804][ T5579] usb 8-1: Using ep0 maxpacket: 32 [ 631.399778][ T5579] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 631.399805][ T5579] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.399821][ T5579] usb 8-1: Product: syz [ 631.399833][ T5579] usb 8-1: Manufacturer: syz [ 631.399845][ T5579] usb 8-1: SerialNumber: syz [ 631.447616][ T5579] usb 8-1: config 0 descriptor?? [ 631.455197][ T5579] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 631.455232][ T5579] dvb-usb: bulk message failed: -22 (2/0) [ 631.469602][ T818] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 631.473400][ T5579] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 631.477955][ T5579] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 631.477998][ T5579] usb 8-1: media controller created [ 631.508672][ T818] usb 5-1: USB disconnect, device number 49 [ 631.518869][ T5579] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 631.542801][ T5579] usb 8-1: selecting invalid altsetting 7 [ 631.542869][ T5579] cxusb: set interface failed [ 631.542879][ T5579] dvb-usb: bulk message failed: -22 (1/0) [ 631.587540][ T5579] DVB: Unable to find symbol lgdt330x_attach() [ 631.587555][ T5579] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 631.654797][ T5579] rc_core: IR keymap rc-dvico-portable not found [ 631.654816][ T5579] Registered IR keymap rc-empty [ 631.655692][ T5579] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 631.661028][ T5579] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input21 [ 631.681096][ T5579] dvb-usb: schedule remote query interval to 100 msecs. [ 631.681116][ T5579] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 631.689312][ T5579] usb 8-1: USB disconnect, device number 32 [ 631.812156][ T5579] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 631.959119][T15133] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2954'. [ 632.366772][ T5692] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 632.549224][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 632.549389][ T5692] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 632.549715][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 632.549839][ T5692] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 632.623527][ T5692] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 632.623628][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.624075][ T5692] usb 5-1: Product: syz [ 632.624225][ T5692] usb 5-1: Manufacturer: syz [ 632.624463][ T5692] usb 5-1: SerialNumber: syz [ 632.685970][ T5692] usb 5-1: config 0 descriptor?? [ 632.737097][ T5692] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 633.390356][T15161] gtp3: entered allmulticast mode [ 633.614731][ T818] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 633.766245][ T818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.766287][ T818] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 633.766311][ T818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 633.766342][ T818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 633.766361][ T818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 633.769838][ T818] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 633.769864][ T818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 633.769881][ T818] usb 2-1: Product: syz [ 633.769893][ T818] usb 2-1: Manufacturer: syz [ 633.769904][ T818] usb 2-1: SerialNumber: syz [ 633.782506][ T818] usb 2-1: config 0 descriptor?? [ 633.798485][T15167] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2966'. [ 633.818312][T15168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2967'. [ 633.992907][ T818] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 633.993069][ T818] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 635.226519][T15192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.254410][ T5692] scsi host1: usb-storage 5-1:0.0 [ 635.270798][ T5692] usb 5-1: USB disconnect, device number 50 [ 635.635437][T15198] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2977'. [ 635.636651][T15198] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2977'. [ 635.885502][T15201] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2978'. [ 635.992833][ T818] usb 2-1: USB disconnect, device number 9 [ 636.026655][T15204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.590309][T15218] ÿ: renamed from dummy0 (while UP) [ 637.783007][T15238] vlan2: entered allmulticast mode [ 637.783022][T15238] veth0_vlan: entered allmulticast mode [ 637.789268][T15238] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.2991'. [ 637.934748][ T5692] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 638.094712][ T5692] usb 8-1: Using ep0 maxpacket: 16 [ 638.096493][ T5692] usb 8-1: unable to get BOS descriptor or descriptor too short [ 638.097867][ T5692] usb 8-1: config 161 has an invalid interface number: 170 but max is 0 [ 638.097891][ T5692] usb 8-1: config 161 has no interface number 0 [ 638.097922][ T5692] usb 8-1: config 161 interface 170 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.097945][ T5692] usb 8-1: config 161 interface 170 has no altsetting 0 [ 638.103294][ T5692] usb 8-1: New USB device found, idVendor=10c4, idProduct=81e8, bcdDevice=95.e7 [ 638.103320][ T5692] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.103337][ T5692] usb 8-1: Product: syz [ 638.103350][ T5692] usb 8-1: Manufacturer: syz [ 638.103361][ T5692] usb 8-1: SerialNumber: syz [ 638.234771][ T818] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 638.398061][ T818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.398100][ T818] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 638.398120][ T818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 638.398143][ T818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 638.398160][ T818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 638.400307][ T818] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 638.400332][ T818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 638.400349][ T818] usb 3-1: Product: syz [ 638.400361][ T818] usb 3-1: Manufacturer: syz [ 638.400372][ T818] usb 3-1: SerialNumber: syz [ 638.491865][ T818] usb 3-1: config 0 descriptor?? [ 639.001228][ T818] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 639.001382][ T818] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 639.118394][T15280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.354369][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.364930][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.452907][ T5692] cp210x 8-1:161.170: cp210x converter detected [ 639.453901][ T5692] cp210x 8-1:161.170: failed to get vendor val 0x370b size 1: -71 [ 639.453999][ T5692] cp210x 8-1:161.170: querying part number failed [ 639.457458][ T5692] usb 8-1: cp210x converter now attached to ttyUSB0 [ 639.459789][ T5692] usb 8-1: USB disconnect, device number 33 [ 639.464132][ T5692] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 639.464581][ T5692] cp210x 8-1:161.170: device disconnected [ 639.584793][T10446] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 639.738992][ T818] usb 3-1: USB disconnect, device number 59 [ 639.740626][T10446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 639.740652][T10446] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 639.740673][T10446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 639.740689][T10446] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 639.742934][T10446] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 639.742959][T10446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.742977][T10446] usb 5-1: Product: syz [ 639.742990][T10446] usb 5-1: Manufacturer: syz [ 639.743001][T10446] usb 5-1: SerialNumber: syz [ 639.824318][T10446] usb 5-1: config 0 descriptor?? [ 639.830869][T10446] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 640.305012][T15302] fuse: Bad value for 'fd' [ 640.309952][T15302] gtp4: entered allmulticast mode [ 642.509095][T10446] scsi host1: usb-storage 5-1:0.0 [ 642.646878][T10446] usb 5-1: USB disconnect, device number 51 [ 643.541301][T15332] fuse: Bad value for 'user_id' [ 643.541320][T15332] fuse: Bad value for 'user_id' [ 643.638622][T15339] 9p: Bad value for 'rfdno' [ 643.886224][T15344] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 643.886246][T15344] PKCS7: Only support pkcs7_signedData type [ 643.888006][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 643.888022][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 645.134779][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 645.346878][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 645.346905][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 645.346926][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 645.346943][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 645.349187][ T9] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 645.349215][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.349234][ T9] usb 3-1: Product: syz [ 645.349247][ T9] usb 3-1: Manufacturer: syz [ 645.349259][ T9] usb 3-1: SerialNumber: syz [ 645.351833][ T9] usb 3-1: config 0 descriptor?? [ 645.431779][ T9] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 645.432411][ T7905] bridge_slave_1: left allmulticast mode [ 645.432432][ T7905] bridge_slave_1: left promiscuous mode [ 645.444872][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.535907][ T36] audit: type=1326 audit(1782123803.252:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a68ece59 code=0x7ffc0000 [ 645.536163][ T36] audit: type=1326 audit(1782123803.252:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a68ece59 code=0x7ffc0000 [ 645.537383][ T36] audit: type=1326 audit(1782123803.252:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8a68ece59 code=0x7ffc0000 [ 645.539539][ T36] audit: type=1326 audit(1782123803.252:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a68ece59 code=0x7ffc0000 [ 645.539679][ T36] audit: type=1326 audit(1782123803.252:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a68ece59 code=0x7ffc0000 [ 645.540130][ T36] audit: type=1326 audit(1782123803.252:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8a68ece59 code=0x7ffc0000 [ 645.540332][ T36] audit: type=1326 audit(1782123803.252:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a68ece59 code=0x7ffc0000 [ 645.540491][ T36] audit: type=1326 audit(1782123803.252:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a68ece59 code=0x7ffc0000 [ 645.540596][ T36] audit: type=1326 audit(1782123803.252:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8a68ecaeb code=0x7ffc0000 [ 645.540749][ T36] audit: type=1326 audit(1782123803.252:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.7.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8a68ad68e code=0x7ffc0000 [ 646.343302][ T7905] bridge_slave_0: left allmulticast mode [ 646.343320][ T7905] bridge_slave_0: left promiscuous mode [ 646.343504][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.501714][T15392] 9p: Bad value for 'rfdno' [ 646.794823][T11059] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 646.944802][T11059] usb 2-1: Using ep0 maxpacket: 16 [ 646.948979][T11059] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 646.949006][T11059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.949023][T11059] usb 2-1: Product: syz [ 646.949035][T11059] usb 2-1: Manufacturer: syz [ 646.949047][T11059] usb 2-1: SerialNumber: syz [ 647.161924][T11059] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 647.161941][T11059] usb 2-1: 1:1 : unsupported sample bitwidth 8 in 128 bytes [ 647.162242][T11059] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 647.162566][T11059] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 647.195374][T11059] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 647.195396][T11059] usb 2-1: 1:1 : unsupported sample bitwidth 8 in 128 bytes [ 647.195680][T11059] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 647.195915][T11059] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 647.198924][T11059] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 647.198938][T11059] usb 2-1: 1:1 : unsupported sample bitwidth 8 in 128 bytes [ 647.199235][T11059] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 647.271516][T11059] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 647.273490][T11059] usb 2-1: USB disconnect, device number 10 [ 647.307185][T15126] udevd[15126]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.397201][ T7905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.455749][ T7905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.496151][ T7905] bond0 (unregistering): Released all slaves [ 647.499766][ T7905] bond1 (unregistering): Released all slaves [ 647.547374][T15382] gtp2: entered allmulticast mode [ 647.728883][ T7905] tipc: Disabling bearer [ 648.304902][ T7905] tipc: Left network mode [ 648.346136][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 648.624805][ T9] scsi host1: usb-storage 3-1:0.0 [ 648.646076][ T9] usb 3-1: USB disconnect, device number 60 [ 649.444744][T11059] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 649.558566][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.559155][T15463] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.596219][T11059] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 649.596252][T11059] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 649.596283][T11059] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 649.596301][T11059] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 58606, setting to 64 [ 649.598144][T11059] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.598207][T11059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.598224][T11059] usb 3-1: Product: syz [ 649.598237][T11059] usb 3-1: Manufacturer: syz [ 649.598248][T11059] usb 3-1: SerialNumber: syz [ 649.601856][T15457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 649.803963][T15457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 649.882004][T15463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.910592][T15463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.406005][T15457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 650.608827][T11059] cdc_ncm 3-1:1.0: bind() failure [ 650.623683][T11059] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 650.626635][T11059] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 650.629190][T11059] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 650.638428][T11059] usb 3-1: USB disconnect, device number 61 [ 652.281415][T11059] page_pool_release_retry() stalled pool shutdown: id 55, 31 inflight 182 sec [ 652.316331][ T7899] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.321622][T15470] tipc: Started in network mode [ 652.321660][T15470] tipc: Node identity d6fc8dd604b4, cluster identity 4711 [ 652.321826][T15470] tipc: Enabled bearer , priority 0 [ 652.353638][T15471] syzkaller0: entered promiscuous mode [ 652.353666][T15471] syzkaller0: entered allmulticast mode [ 652.354462][T15471] tipc: Resetting bearer [ 652.356700][ T7899] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.356774][ T7899] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.356803][ T7899] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.815223][T15467] tipc: Resetting bearer [ 652.920301][T12915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 652.920590][T12915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 652.920845][T12915] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 652.921559][T12915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 652.921986][T12915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.034773][ T5579] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 653.187706][ T5579] usb 5-1: Using ep0 maxpacket: 16 [ 653.190217][ T5579] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.190254][ T5579] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 653.190275][ T5579] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 653.190293][ T5579] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 653.192763][ T5579] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.192787][ T5579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.192805][ T5579] usb 5-1: Product: syz [ 653.192834][ T5579] usb 5-1: Manufacturer: syz [ 653.192846][ T5579] usb 5-1: SerialNumber: syz [ 653.628451][T15505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 654.242505][ T5579] cdc_ncm 5-1:1.0: bind() failure [ 654.252099][ T5579] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 654.252587][ T5579] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 654.253365][ T5579] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 654.279928][ T5579] usb 5-1: USB disconnect, device number 52 [ 654.666028][ T5579] usb 7-1: USB disconnect, device number 23 [ 654.676392][T12915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 654.676656][T12915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 654.676893][T12915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 654.677512][T12915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 654.677972][T12915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 654.994783][ T4909] Bluetooth: hci4: command tx timeout [ 655.309762][T15532] netlink: 'syz.4.3091': attribute type 1 has an invalid length. [ 657.110184][T12915] Bluetooth: hci4: command tx timeout [ 657.110244][ T4909] Bluetooth: hci2: command tx timeout [ 658.003862][T15545] binder: 15544:15545 ioctl c0306201 200000000080 returned -14 [ 658.006449][T15545] binder: 15544:15545 ioctl c0306201 2000000003c0 returned -14 [ 658.294757][T10449] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 658.444798][T10449] usb 5-1: Using ep0 maxpacket: 16 [ 658.446166][T10449] usb 5-1: config 10 has an invalid interface number: 80 but max is 0 [ 658.446188][T10449] usb 5-1: config 10 has no interface number 0 [ 658.446210][T10449] usb 5-1: config 10 interface 80 has no altsetting 0 [ 658.448005][T10449] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=21.6e [ 658.448028][T10449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.448045][T10449] usb 5-1: Product: syz [ 658.448057][T10449] usb 5-1: Manufacturer: syz [ 658.448068][T10449] usb 5-1: SerialNumber: syz [ 658.657640][T10449] net1080 5-1:10.80: probe with driver net1080 failed with error -22 [ 658.662468][T10449] usb 5-1: USB disconnect, device number 53 [ 658.854887][ T5579] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 659.004974][ T5579] usb 2-1: Using ep0 maxpacket: 16 [ 659.007291][ T5579] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 659.007315][ T5579] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 659.007331][ T5579] usb 2-1: config 0 has no interface number 0 [ 659.009109][ T5579] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 659.009134][ T5579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.009151][ T5579] usb 2-1: Product: syz [ 659.009164][ T5579] usb 2-1: Manufacturer: syz [ 659.009176][ T5579] usb 2-1: SerialNumber: syz [ 659.011490][ T5579] usb 2-1: config 0 descriptor?? [ 659.154911][T12915] Bluetooth: hci4: command tx timeout [ 659.154977][ T4909] Bluetooth: hci2: command tx timeout [ 659.213579][ T5579] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 659.213600][ T5579] uvcvideo 2-1:0.105: No valid video chain found. [ 659.415825][T11059] usb 2-1: USB disconnect, device number 11 [ 661.234908][T12915] Bluetooth: hci4: command tx timeout [ 661.234946][ T4909] Bluetooth: hci2: command tx timeout [ 663.314922][ T4909] Bluetooth: hci2: command tx timeout [ 664.236265][T15467] tipc: Disabling bearer [ 664.470094][T15577] netlink: 240 bytes leftover after parsing attributes in process `syz.7.3109'. [ 664.574856][ T5692] tipc: Node number set to 3527970262 [ 664.735507][ T7905] hsr_slave_0: left promiscuous mode [ 664.774784][ T7905] hsr_slave_1: left promiscuous mode [ 664.775968][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.775990][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.815559][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.815596][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.924830][ T7905] veth1_macvtap: left promiscuous mode [ 664.924888][ T7905] veth0_macvtap: left promiscuous mode [ 664.925033][ T7905] veth1_vlan: left promiscuous mode [ 664.925237][ T7905] veth0_vlan: left promiscuous mode [ 665.412796][ T1510] smc: removing ib device syz1 [ 665.667161][ T7905] team0 (unregistering): Port device team_slave_1 removed [ 665.685713][ T7905] team0 (unregistering): Port device team_slave_0 removed [ 666.434216][ T9] syz1: Port: 1 Link DOWN [ 666.470605][ T1510] smbdirect: ib_dev[syz1] removed [ 666.628868][T15492] xfrm0 speed is unknown, defaulting to 1000 [ 666.678715][T15607] batadv_slave_0: entered promiscuous mode [ 666.744726][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 666.895167][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 666.897417][ T9] usb 2-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config [ 666.897459][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.903397][ T9] usb 2-1: New USB device found, idVendor=04b1, idProduct=3042, bcdDevice= 0.40 [ 666.903425][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.903443][ T9] usb 2-1: Product: syz [ 666.903455][ T9] usb 2-1: Manufacturer: syz [ 666.903467][ T9] usb 2-1: SerialNumber: syz [ 667.017188][T15517] xfrm0 speed is unknown, defaulting to 1000 [ 667.137829][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 667.137868][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 667.906163][ T9] usb 2-1: USB disconnect, device number 12 [ 668.676316][T15631] udevd[15631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.535223][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 669.535240][ T36] audit: type=1326 audit(1782123827.252:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15601 comm="syz.4.3115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04ae2ce59 code=0x7fc00000 [ 669.833873][T15492] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.834006][T15492] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.834337][T15492] bridge_slave_0: entered allmulticast mode [ 669.856302][T15492] bridge_slave_0: entered promiscuous mode [ 669.875169][T15492] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.875303][T15492] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.875626][T15492] bridge_slave_1: entered allmulticast mode [ 669.877187][T15492] bridge_slave_1: entered promiscuous mode [ 669.952750][T15492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.971449][T15492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.020119][T15601] batadv_slave_0: left promiscuous mode [ 670.140549][T15517] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.140791][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.140922][T15517] bridge_slave_0: entered allmulticast mode [ 670.144983][T15517] bridge_slave_0: entered promiscuous mode [ 670.151275][T15492] team0: Port device team_slave_0 added [ 670.152145][T15517] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.152279][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.152457][T15517] bridge_slave_1: entered allmulticast mode [ 670.153716][T15517] bridge_slave_1: entered promiscuous mode [ 670.224987][T15492] team0: Port device team_slave_1 added [ 670.294971][T15517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.296002][T15492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.296015][T15492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.296035][T15492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.299083][T15492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.299097][T15492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.299119][T15492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.302951][T15517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.409198][T15517] team0: Port device team_slave_0 added [ 670.422659][T15517] team0: Port device team_slave_1 added [ 670.428382][T15492] hsr_slave_0: entered promiscuous mode [ 670.429252][T15492] hsr_slave_1: entered promiscuous mode [ 670.429797][T15492] debugfs: 'hsr0' already exists in 'hsr' [ 670.429812][T15492] Cannot create hsr debugfs directory [ 670.434865][ T5693] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 670.462867][T15517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.462881][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.462900][T15517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.469681][T15517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.469696][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.469719][T15517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.549673][T15517] hsr_slave_0: entered promiscuous mode [ 670.550627][T15517] hsr_slave_1: entered promiscuous mode [ 670.551302][T15517] debugfs: 'hsr0' already exists in 'hsr' [ 670.551318][T15517] Cannot create hsr debugfs directory [ 670.584953][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 670.586663][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.586690][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.586710][ T5693] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.586742][ T5693] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 670.586762][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.594595][ T5693] usb 2-1: config 0 descriptor?? [ 670.926175][T15492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.015473][ T5693] microsoft 0003:045E:07DA.0013: item fetching failed at offset 6/34 [ 671.015884][ T5693] microsoft 0003:045E:07DA.0013: parse failed [ 671.015961][ T5693] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 671.223914][ T5781] usb 2-1: USB disconnect, device number 13 [ 671.616836][T15492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.762573][T15679] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 671.936725][T15492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.187208][T15492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.419144][T15492] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.457080][T15492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 672.457799][T15492] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.497493][T15492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 672.498356][T15492] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.536770][T15492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.540655][T15492] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 672.580198][T15492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.619201][T15517] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 672.648264][ T36] audit: type=1326 audit(1782123830.362:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15680 comm="syz.1.3138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac38ce59 code=0x7fc00000 [ 672.792906][T15517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 672.807133][T15517] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 672.846642][T15517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 672.935440][T15517] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 673.402499][T15517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.433072][T15517] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 673.457270][T15517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.094821][ T5781] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 682.246284][ T5781] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.246313][ T5781] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.246345][ T5781] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 682.246365][ T5781] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.248059][ T5781] usb 8-1: config 0 descriptor?? [ 682.656785][ T5781] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 682.661159][ T5781] hid-thrustmaster 0003:044F:B65D.0014: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 682.661312][ T5781] hid-thrustmaster 0003:044F:B65D.0014: Wrong number of endpoints? [ 682.862892][ C1] hid-thrustmaster 0003:044F:B65D.0014: URB to get model id failed with error -71 [ 682.864078][ T9] usb 8-1: USB disconnect, device number 34 [ 685.956139][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.956169][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.231371][T12915] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 689.231612][T12915] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 689.231836][T12915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 689.232450][T12915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 689.234552][T12915] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 690.022511][T15736] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3148'. [ 690.040368][T15736] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3148'. [ 690.330505][T15492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.421311][T15761] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3155'. [ 690.421327][T15761] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3155'. [ 690.632908][T15763] bridge_slave_0: left allmulticast mode [ 690.632926][T15763] bridge_slave_0: left promiscuous mode [ 690.633024][T15763] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.776342][T15763] bridge_slave_1: left allmulticast mode [ 690.776362][T15763] bridge_slave_1: left promiscuous mode [ 690.776443][T15763] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.955554][T15763] bond0: (slave bond_slave_0): Releasing backup interface [ 691.015460][T15763] bond0: (slave bond_slave_1): Releasing backup interface [ 691.097833][T15763] team0: Port device team_slave_0 removed [ 691.138978][T15763] team0: Port device team_slave_1 removed [ 691.139833][T15763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.139852][T15763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.196347][T15763] net_ratelimit: 25 callbacks suppressed [ 691.196424][T15763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 691.314732][ T4909] Bluetooth: hci6: command tx timeout [ 691.418671][T15772] hub 8-0:1.0: USB hub found [ 691.419690][T15772] hub 8-0:1.0: 1 port detected [ 691.972835][T15492] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.981576][T15517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.989065][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.989187][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.998395][T15738] xfrm0 speed is unknown, defaulting to 1000 [ 692.006340][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.006422][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.023169][T15517] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.051758][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.051881][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.067641][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.067763][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.136961][T15802] 9pnet_virtio: no channels available for device syz [ 693.394728][ T4909] Bluetooth: hci6: command tx timeout [ 693.665509][T15492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.770653][T15738] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.770781][T15738] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.770985][T15738] bridge_slave_0: entered allmulticast mode [ 693.772463][T15738] bridge_slave_0: entered promiscuous mode [ 693.809217][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.055005][ T1072] bridge_slave_1: left allmulticast mode [ 695.055023][ T1072] bridge_slave_1: left promiscuous mode [ 695.055146][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.215398][ T1072] bridge_slave_0: left allmulticast mode [ 695.215421][ T1072] bridge_slave_0: left promiscuous mode [ 695.215567][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.474730][ T4909] Bluetooth: hci6: command tx timeout [ 695.975065][ T1072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.055077][ T1072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.075344][ T1072] bond0 (unregistering): Released all slaves [ 696.077843][ T1072] bond1 (unregistering): Released all slaves [ 696.117363][T15738] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.117433][T15738] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.118055][T15738] bridge_slave_1: entered allmulticast mode [ 696.119031][T15738] bridge_slave_1: entered promiscuous mode [ 696.127292][T15845] tipc: Started in network mode [ 696.127317][T15845] tipc: Node identity b297f00deea9, cluster identity 4711 [ 696.127421][T15845] tipc: Enabled bearer , priority 0 [ 696.149294][T15847] syzkaller0: entered promiscuous mode [ 696.149318][T15847] syzkaller0: entered allmulticast mode [ 696.153479][T15851] syzkaller0: MTU too low for tipc bearer [ 696.153497][T15851] tipc: Disabling bearer [ 696.289377][T15861] 9pnet_virtio: no channels available for device syz [ 696.520660][T15738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.583042][T15738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.568507][ T4909] Bluetooth: hci6: command tx timeout [ 697.597601][T15738] team0: Port device team_slave_0 added [ 698.040653][T15880] random: crng reseeded on system resumption [ 698.056559][T15880] Restarting kernel threads ... [ 698.056942][T15880] Done restarting kernel threads. [ 698.057525][T15880] Restarting kernel threads ... [ 698.057869][T15880] Done restarting kernel threads. [ 698.099502][T15882] 9pnet_virtio: no channels available for device syz [ 698.195359][T15738] team0: Port device team_slave_1 added [ 698.319781][T15738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.319798][T15738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.319819][T15738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.381110][T15738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.381127][T15738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.381149][T15738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.745722][ T5255] 8021q: adding VLAN 0 to HW filter on device eth13 [ 698.772565][T15915] random: crng reseeded on system resumption [ 698.780622][T15915] Restarting kernel threads ... [ 698.781209][T15915] Done restarting kernel threads. [ 698.924781][ T1072] hsr_slave_0: left promiscuous mode [ 698.965152][ T1072] hsr_slave_1: left promiscuous mode [ 698.968945][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.017674][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.435370][ T1072] team0 (unregistering): Port device team_slave_1 removed [ 699.475205][ T1072] team0 (unregistering): Port device team_slave_0 removed [ 700.088116][T15738] hsr_slave_0: entered promiscuous mode [ 700.088642][T15738] hsr_slave_1: entered promiscuous mode [ 700.089255][T15492] veth0_vlan: entered promiscuous mode [ 700.378480][T15492] veth1_vlan: entered promiscuous mode [ 700.412173][T15517] veth0_vlan: entered promiscuous mode [ 700.435099][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3201'. [ 700.608212][T15517] veth1_vlan: entered promiscuous mode [ 700.726233][T15492] veth0_macvtap: entered promiscuous mode [ 700.758600][T15492] veth1_macvtap: entered promiscuous mode [ 700.803491][T15738] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 700.837488][T15738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.846339][T15738] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 700.878146][T15738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.895283][T15517] veth0_macvtap: entered promiscuous mode [ 700.900221][T15738] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 700.930091][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3204'. [ 700.943818][T15738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.950231][T15738] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 700.995700][T15738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.015384][T15492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.018179][T15517] veth1_macvtap: entered promiscuous mode [ 701.047991][ T5255] 8021q: adding VLAN 0 to HW filter on device eth14 [ 701.077925][T15492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.120375][ T1510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.128586][ T1510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.146129][ T1510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.151481][T15517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.151907][ T1510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.183255][T15517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.243548][ T7905] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.268735][ T7905] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.272092][ T7905] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.275134][ T7905] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.330718][T15991] random: crng reseeded on system resumption [ 701.339153][T15991] Restarting kernel threads ... [ 701.339747][T15991] Done restarting kernel threads. [ 701.553651][T11034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.553671][T11034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.664701][T11034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.664717][T11034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.742915][T11034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.742933][T11034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.753510][T15738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.812025][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.812045][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.813490][ T5255] 8021q: adding VLAN 0 to HW filter on device eth15 [ 701.853639][T16015] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3212'. [ 701.853986][T15738] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.880016][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.880077][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.974984][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.975068][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.254861][ T5692] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 702.390807][T16049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'. [ 702.404673][ T5692] usb 8-1: Using ep0 maxpacket: 16 [ 704.847903][ T5255] 8021q: adding VLAN 0 to HW filter on device eth16 [ 705.477212][T15738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.756739][ T5692] usb 8-1: unable to get BOS descriptor or descriptor too short [ 705.757304][ T5692] usb 8-1: no configurations [ 705.757345][ T5692] usb 8-1: can't read configurations, error -22 [ 707.447459][T15738] veth0_vlan: entered promiscuous mode [ 707.468534][T15738] veth1_vlan: entered promiscuous mode [ 707.520523][T15738] veth0_macvtap: entered promiscuous mode [ 707.557237][T15738] veth1_macvtap: entered promiscuous mode [ 707.616462][T15738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.623144][T15738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.663043][ T7895] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.673510][ T7895] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.673901][ T7895] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.674309][ T7895] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.805085][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3252'. [ 709.681519][T16201] syzkaller0: entered promiscuous mode [ 709.681544][T16201] syzkaller0: entered allmulticast mode [ 709.682890][T16212] tc_dump_action: action bad kind [ 709.734471][T15304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.734492][T15304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.524824][ T818] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 713.684719][ T818] usb 2-1: Using ep0 maxpacket: 16 [ 717.087754][ T818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 717.087804][ T818] usb 2-1: no configurations [ 717.087814][ T818] usb 2-1: can't read configurations, error -22 [ 722.224828][ T818] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 722.374885][ T818] usb 2-1: Using ep0 maxpacket: 16 [ 724.800427][T12915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 724.800725][T12915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 724.801001][T12915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 724.801854][T12915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 724.802451][T12915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 725.488627][ T818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 725.488699][ T818] usb 2-1: no configurations [ 725.488710][ T818] usb 2-1: can't read configurations, error -22 [ 726.740834][ T4909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 726.741091][ T4909] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 726.741408][ T4909] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 726.742076][ T4909] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 726.742483][ T4909] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 726.834779][ T4909] Bluetooth: hci3: command tx timeout [ 728.660470][ T1352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.660490][ T1352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.755748][ T4909] Bluetooth: hci7: command tx timeout [ 728.915059][ T4909] Bluetooth: hci3: command tx timeout [ 728.994793][ T4909] Bluetooth: hci5: command 0x0406 tx timeout [ 729.083769][T16322] xfrm0 speed is unknown, defaulting to 1000 [ 729.604954][T16311] xfrm0 speed is unknown, defaulting to 1000 [ 729.644694][ T5692] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 729.794791][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 729.795467][ T36] audit: type=1326 audit(1782123887.512:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.9.3149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643b30ce59 code=0x7fc00000 [ 730.837159][T12915] Bluetooth: hci7: command tx timeout [ 730.995012][T12915] Bluetooth: hci3: command tx timeout [ 732.569520][ T1352] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.925160][T12915] Bluetooth: hci7: command tx timeout [ 732.948157][ T1352] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.060150][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 733.060203][ T5692] usb 2-1: no configurations [ 733.060214][ T5692] usb 2-1: can't read configurations, error -22 [ 733.074765][T12915] Bluetooth: hci3: command tx timeout [ 733.216133][ T1352] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.526125][ T1352] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.594162][T16322] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.594240][T16322] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.594369][T16322] bridge_slave_0: entered allmulticast mode [ 733.597140][T16322] bridge_slave_0: entered promiscuous mode [ 733.599460][T16311] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.599533][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.599673][T16311] bridge_slave_0: entered allmulticast mode [ 733.601218][T16311] bridge_slave_0: entered promiscuous mode [ 733.602775][T16322] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.602868][T16322] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.603017][T16322] bridge_slave_1: entered allmulticast mode [ 733.605981][T16322] bridge_slave_1: entered promiscuous mode [ 733.607515][T16311] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.607605][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.607729][T16311] bridge_slave_1: entered allmulticast mode [ 733.609199][T16311] bridge_slave_1: entered promiscuous mode [ 733.668015][T16322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.673237][T16311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.678272][T16322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.681680][ T36] audit: type=1326 audit(1782123891.392:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16419 comm="syz.2.3318" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7caf32ce59 code=0x7fc00000 [ 733.712806][T16311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.970709][T16322] team0: Port device team_slave_0 added [ 733.997743][T16322] team0: Port device team_slave_1 added [ 734.004063][T16311] team0: Port device team_slave_0 added [ 734.041795][T16311] team0: Port device team_slave_1 added [ 734.064813][T16322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.064830][T16322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.064852][T16322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.072730][T16322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.072741][T16322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.072753][T16322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.073782][T16311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.073796][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.073816][T16311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.085583][T16311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.085601][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.085624][T16311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.088580][T16478] syzkaller0: entered promiscuous mode [ 734.088601][T16478] syzkaller0: entered allmulticast mode [ 734.151695][T16322] hsr_slave_0: entered promiscuous mode [ 734.152650][T16322] hsr_slave_1: entered promiscuous mode [ 734.153204][T16322] debugfs: 'hsr0' already exists in 'hsr' [ 734.153220][T16322] Cannot create hsr debugfs directory [ 734.175605][T16311] hsr_slave_0: entered promiscuous mode [ 734.176853][T16311] hsr_slave_1: entered promiscuous mode [ 734.177584][T16311] debugfs: 'hsr0' already exists in 'hsr' [ 734.177601][T16311] Cannot create hsr debugfs directory [ 734.675821][T16485] syzkaller0: entered promiscuous mode [ 734.675843][T16485] syzkaller0: entered allmulticast mode [ 734.868236][ T36] audit: type=1326 audit(1782123892.582:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16479 comm="syz.9.3328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643b30ce59 code=0x7fc00000 [ 734.994999][T12915] Bluetooth: hci7: command tx timeout [ 735.746978][ T1352] bond0 (unregistering): Released all slaves [ 736.257439][ T5255] 8021q: adding VLAN 0 to HW filter on device eth17 [ 737.125003][ T36] audit: type=1326 audit(1782123894.672:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.2.3341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7caf32ce59 code=0x7fc00000 [ 737.512105][ T1352] tipc: Left network mode [ 738.516218][ T5255] 8021q: adding VLAN 0 to HW filter on device eth18 [ 739.169555][ T36] audit: type=1326 audit(1782123896.882:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.2.3352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7caf32ce59 code=0x7fc00000 [ 739.534730][ T1352] hsr_slave_0: left promiscuous mode [ 739.574749][ T1352] hsr_slave_1: left promiscuous mode [ 739.615173][ T1352] veth1_macvtap: left promiscuous mode [ 739.615231][ T1352] veth0_macvtap: left promiscuous mode [ 739.615354][ T1352] veth1_vlan: left promiscuous mode [ 739.615434][ T1352] veth0_vlan: left promiscuous mode [ 740.846470][ T5255] 8021q: adding VLAN 0 to HW filter on device eth19 [ 740.867656][ T36] audit: type=1326 audit(1782123898.582:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16603 comm="syz.9.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643b30ce59 code=0x7fc00000 [ 741.035481][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3368'. [ 741.424234][T16631] netlink: 944 bytes leftover after parsing attributes in process `syz.2.3371'. [ 742.250762][ T5255] 8021q: adding VLAN 0 to HW filter on device eth20 [ 742.306510][T16671] bridge_slave_0: left allmulticast mode [ 742.306536][T16671] bridge_slave_0: left promiscuous mode [ 742.306686][T16671] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.492039][T16671] bridge_slave_1: left allmulticast mode [ 742.492067][T16671] bridge_slave_1: left promiscuous mode [ 742.493227][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.655825][T16671] bond0: (slave bond_slave_0): Releasing backup interface [ 742.747070][T16671] bond0: (slave bond_slave_1): Releasing backup interface [ 742.831879][T16671] team0: Port device team_slave_0 removed [ 742.868268][T16671] team0: Port device team_slave_1 removed [ 742.869004][T16671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.869024][T16671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.919052][T16671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.919078][T16671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.957108][T16671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 743.057632][T16322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 743.108834][T16322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.120302][T16322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 743.168181][T16322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.187549][T16322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 743.219756][T16322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.237126][T16322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 743.288578][T16322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.516959][ T1352] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.638415][T16311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 743.687039][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.850498][ T1352] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.888470][T16311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 743.932662][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.945793][T16311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 743.974194][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.978195][T16311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 744.022198][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.176364][ T1352] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.246384][T16758] bridge_slave_0: left allmulticast mode [ 744.246410][T16758] bridge_slave_0: left promiscuous mode [ 744.246560][T16758] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.411469][T16758] bridge_slave_1: left allmulticast mode [ 744.411496][T16758] bridge_slave_1: left promiscuous mode [ 744.411631][T16758] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.588981][T16758] bond0: (slave bond_slave_0): Releasing backup interface [ 744.690158][T16758] bond0: (slave bond_slave_1): Releasing backup interface [ 744.797613][T16758] team0: Port device team_slave_0 removed [ 744.856511][T16758] team0: Port device team_slave_1 removed [ 744.860936][T16758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.861245][T16758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.920487][T16758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.920568][T16758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.977715][T16758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 745.208652][ T1352] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.444702][T16322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.483489][T16322] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.497203][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.497326][ T7899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.505319][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.506476][ T7899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.524565][T16311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.550581][T16799] syzkaller1: entered promiscuous mode [ 745.550605][T16799] syzkaller1: entered allmulticast mode [ 747.396140][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.396187][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.422771][T16311] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.513164][T11034] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.513285][T11034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.645827][T11034] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.645900][T11034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.885829][ T1352] bridge_slave_1: left allmulticast mode [ 747.885854][ T1352] bridge_slave_1: left promiscuous mode [ 747.886027][ T1352] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.056651][ T1352] bridge_slave_0: left allmulticast mode [ 748.056678][ T1352] bridge_slave_0: left promiscuous mode [ 748.056852][ T1352] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.788482][ T36] audit: type=1326 audit(1782123906.502:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16847 comm="syz.2.3415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7caf32ce59 code=0x7fc00000 [ 748.907384][ T1352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.988270][ T1352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.027156][ T1352] bond0 (unregistering): Released all slaves [ 754.770362][T16942] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3438'. [ 755.489426][T16322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.571132][T16322] veth0_vlan: entered promiscuous mode [ 755.624071][T16322] veth1_vlan: entered promiscuous mode [ 755.704546][T16322] veth0_macvtap: entered promiscuous mode [ 755.719823][T16322] veth1_macvtap: entered promiscuous mode [ 755.898796][T16982] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3447'. [ 756.983818][T16322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.017037][T16322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.624833][T17016] tipc: Started in network mode [ 757.624860][T17016] tipc: Node identity 760d7ceed73a, cluster identity 4711 [ 757.624955][T17016] tipc: Enabled bearer , priority 0 [ 757.652536][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.714251][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.724683][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.728640][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.832022][T16311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.855422][T17013] syzkaller0: entered promiscuous mode [ 757.855443][T17013] syzkaller0: entered allmulticast mode [ 757.894908][T16997] tipc: Resetting bearer [ 758.001298][T16997] tipc: Disabling bearer [ 758.314755][ T1352] hsr_slave_0: left promiscuous mode [ 758.355226][ T1352] hsr_slave_1: left promiscuous mode [ 758.357065][ T1352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.357086][ T1352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.398425][ T1352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.398446][ T1352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.485048][ T1352] veth1_macvtap: left promiscuous mode [ 758.485090][ T1352] veth0_macvtap: left promiscuous mode [ 758.485174][ T1352] veth1_vlan: left promiscuous mode [ 758.485230][ T1352] veth0_vlan: left promiscuous mode [ 759.066357][ T1352] team0 (unregistering): Port device team_slave_1 removed [ 759.085944][ T1352] team0 (unregistering): Port device team_slave_0 removed [ 759.221168][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.221187][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.321997][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.322017][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.363746][T16311] veth0_vlan: entered promiscuous mode [ 759.376337][T16311] veth1_vlan: entered promiscuous mode [ 759.413098][T16311] veth0_macvtap: entered promiscuous mode [ 759.417512][T16311] veth1_macvtap: entered promiscuous mode [ 759.478776][T16311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.481978][T16311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.591337][ T1072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.592172][ T1072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.593056][ T1072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.593499][ T1072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.660858][T17101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3466'. [ 760.804856][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.804879][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.804998][ T7899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.805011][ T7899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.375304][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'. [ 761.976353][T17138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3476'. [ 762.844784][ T1352] Bluetooth: hci0: Frame reassembly failed (-84) [ 762.848123][T17182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3488'. [ 764.914671][T12915] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 764.934556][ T36] audit: type=1326 audit(1782123922.642:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.9.3496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643b30ce59 code=0x7fc00000 [ 764.938045][T17259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3499'. [ 765.117761][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 765.902193][T17313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3512'. [ 766.758376][T17358] netlink: 'syz.1.3525': attribute type 1 has an invalid length. [ 767.746673][T17422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 770.779321][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 771.469302][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 771.886878][T17540] »»»»»»: renamed from vlan0 (while UP) [ 773.173905][T17594] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3582'. [ 773.186120][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 775.074663][T17582] Bluetooth: hci4: command 0x0406 tx timeout [ 776.499329][ T5255] 8021q: adding VLAN 0 to HW filter on device eth4 [ 777.521025][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3630'. [ 778.379318][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3643'. [ 778.754925][T12915] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 779.105127][T17798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3654'. [ 779.106508][T17798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3654'. [ 779.224667][ T5579] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 779.328289][T17807] bond1 (unregistering): Released all slaves [ 779.374887][ T5579] usb 10-1: Using ep0 maxpacket: 16 [ 779.390979][ T5579] usb 10-1: unable to get BOS descriptor or descriptor too short [ 779.391041][ T5579] usb 10-1: no configurations [ 779.391053][ T5579] usb 10-1: can't read configurations, error -22 [ 780.555449][ T36] audit: type=1326 audit(1782123938.272:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.3666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ca1ace59 code=0x7fc00000 [ 782.060701][T17877] tc_dump_action: action bad kind [ 783.245281][T17923] tc_dump_action: action bad kind [ 783.927774][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3712'. [ 783.927826][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3712'. [ 784.851643][T17984] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 786.718715][T18040] tc_dump_action: action bad kind [ 786.749331][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3746'. [ 786.886414][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 787.470233][T18078] hub 8-0:1.0: USB hub found [ 787.471369][T18078] hub 8-0:1.0: 1 port detected [ 788.298563][T18091] 9pnet_virtio: no channels available for device syz [ 788.544213][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 788.914632][T12915] Bluetooth: hci0: command 0x1003 tx timeout [ 788.916249][T17582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 789.371903][T18134] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.3774'. [ 789.388883][T18135] 9pnet_virtio: no channels available for device syz [ 790.401424][T18172] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.3786'. [ 790.563309][T18176] 9pnet_virtio: no channels available for device syz [ 793.051271][T18220] netlink: 1000 bytes leftover after parsing attributes in process `syz.2.3797'. [ 793.132841][T18224] 9pnet_virtio: no channels available for device syz [ 794.099075][T18273] 9pnet_virtio: no channels available for device syz [ 795.046532][T18312] 9pnet_virtio: no channels available for device syz [ 795.494837][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3828'. [ 796.323225][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3839'. [ 797.359716][T18409] xfrm0 speed is unknown, defaulting to 1000 [ 799.979418][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 800.288560][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3871'. [ 802.167801][T17582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 806.274888][T12915] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 806.901819][T18619] 9pnet_virtio: no channels available for device syz [ 808.891175][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.891225][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.121677][T18671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 811.268361][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3973'. [ 811.323621][T18722] netlink: 1000 bytes leftover after parsing attributes in process `syz.3.3975'. [ 811.621128][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'. [ 812.586818][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3991'. [ 813.007537][T18788] xfrm0 speed is unknown, defaulting to 1000 [ 813.126508][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 814.582511][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4016'. [ 815.600386][T18854] xfrm0 speed is unknown, defaulting to 1000 [ 815.796403][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'. [ 816.036569][T17582] Bluetooth: hci6: command 0x0406 tx timeout [ 816.940068][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 817.372849][T18903] xfrm0 speed is unknown, defaulting to 1000 [ 818.234500][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4051'. [ 819.640913][T18965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'. [ 819.838993][T18972] xfrm0 speed is unknown, defaulting to 1000 [ 821.378456][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 821.458772][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4081'. [ 821.814008][T19022] syzkaller0: entered promiscuous mode [ 821.814026][T19022] syzkaller0: entered allmulticast mode [ 830.782832][T19039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 830.992360][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4095'. [ 834.898851][T19096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 835.212637][T17582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.213485][T17582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.214660][T17582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.216683][T17582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.217115][T17582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.514703][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4109'. [ 836.438103][T11034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.226930][T11034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.234658][T17582] Bluetooth: hci0: command tx timeout [ 837.319559][T19168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4124'. [ 837.319580][T19168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4124'. [ 837.476544][T19105] xfrm0 speed is unknown, defaulting to 1000 [ 837.662418][T11034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.973417][T11034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.840566][T19105] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.840710][T19105] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.840853][T19105] bridge_slave_0: entered allmulticast mode [ 838.842204][T19105] bridge_slave_0: entered promiscuous mode [ 838.844389][T19105] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.844521][T19105] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.845334][T19105] bridge_slave_1: entered allmulticast mode [ 838.847192][T19105] bridge_slave_1: entered promiscuous mode [ 838.872964][T19105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.877801][T19105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.905769][T19105] team0: Port device team_slave_0 added [ 838.908512][T19105] team0: Port device team_slave_1 added [ 838.932635][T19105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.932652][T19105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.932673][T19105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.934199][T19105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.934222][T19105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.934245][T19105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.970641][T19105] hsr_slave_0: entered promiscuous mode [ 838.971535][T19105] hsr_slave_1: entered promiscuous mode [ 838.972129][T19105] debugfs: 'hsr0' already exists in 'hsr' [ 838.972146][T19105] Cannot create hsr debugfs directory [ 839.260425][T19191] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.4128'. [ 839.315155][T17582] Bluetooth: hci0: command tx timeout [ 840.310387][T19230] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.4141'. [ 840.627287][T11034] bridge_slave_1: left allmulticast mode [ 840.627313][T11034] bridge_slave_1: left promiscuous mode [ 840.627475][T11034] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.826417][T11034] bridge_slave_0: left allmulticast mode [ 840.826441][T11034] bridge_slave_0: left promiscuous mode [ 840.826589][T11034] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.396432][T17582] Bluetooth: hci0: command tx timeout [ 841.798298][T11034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.877150][T11034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.896810][T11034] bond0 (unregistering): Released all slaves [ 841.943329][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 842.246414][T19282] netlink: 1056 bytes leftover after parsing attributes in process `syz.1.4151'. [ 843.474680][T17582] Bluetooth: hci0: command tx timeout [ 843.789088][T19311] netlink: 1056 bytes leftover after parsing attributes in process `syz.9.4161'. [ 844.154692][T19326] 9pnet_virtio: no channels available for device syz [ 844.255616][T11034] hsr_slave_0: left promiscuous mode [ 844.304804][T11034] hsr_slave_1: left promiscuous mode [ 844.305498][T11034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.305517][T11034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.357514][T11034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.357537][T11034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.465858][T11034] veth1_macvtap: left promiscuous mode [ 844.467068][T11034] veth0_macvtap: left promiscuous mode [ 844.467275][T11034] veth1_vlan: left promiscuous mode [ 844.467362][T11034] veth0_vlan: left promiscuous mode [ 845.095852][T11034] team0 (unregistering): Port device team_slave_1 removed [ 845.135631][T11034] team0 (unregistering): Port device team_slave_0 removed [ 845.279726][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 845.431275][T19355] netlink: 1056 bytes leftover after parsing attributes in process `syz.3.4171'. [ 845.777742][T19105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 845.810775][T19105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.811673][T19105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 845.865725][T19105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.869594][T19105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 845.911037][T19105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.913341][T19105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 845.979045][T19105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.036227][T19372] 9pnet_virtio: no channels available for device syz [ 846.262648][T19105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.304051][T19105] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.324468][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.325075][ T7899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.345112][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.345923][ T7899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.759710][T19402] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.4181'. [ 846.917790][ T5255] 8021q: adding VLAN 0 to HW filter on device eth7 [ 847.702147][T19105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.702393][T19437] 9pnet_virtio: no channels available for device syz [ 849.186058][T19105] veth0_vlan: entered promiscuous mode [ 849.198723][T19105] veth1_vlan: entered promiscuous mode [ 849.283391][T19105] veth0_macvtap: entered promiscuous mode [ 849.308959][T19105] veth1_macvtap: entered promiscuous mode [ 849.325758][T19486] 9pnet_virtio: no channels available for device syz [ 849.356419][T19105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.381081][T19105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.413677][ T1072] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.413838][ T1072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.413880][ T1072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.413909][ T1072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.666433][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.666455][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.747415][ T1352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.747433][ T1352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.592922][T19518] Bluetooth: MGMT ver 1.23 [ 850.748818][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4205'. [ 851.611706][T19551] xfrm0 speed is unknown, defaulting to 1000 [ 851.878475][T12915] Bluetooth: hci3: command 0x0406 tx timeout [ 854.080260][T19566] syzkaller0: entered promiscuous mode [ 854.080283][T19566] syzkaller0: entered allmulticast mode [ 855.290881][ T5255] 8021q: adding VLAN 0 to HW filter on device eth8 [ 857.317726][T19612] syzkaller0: entered promiscuous mode [ 857.317752][T19612] syzkaller0: entered allmulticast mode [ 858.450210][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4230'. [ 865.006954][T19735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4262'. [ 866.929649][ T36] audit: type=1326 audit(1782124024.642:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.2.4275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7caf32ce59 code=0x7ffc0000 [ 866.954715][ T36] audit: type=1326 audit(1782124024.672:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.2.4275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7caf32ce59 code=0x7ffc0000 [ 866.998764][ T36] audit: type=1326 audit(1782124024.712:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.2.4275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f7caf32ce59 code=0x7ffc0000 [ 866.998807][ T36] audit: type=1326 audit(1782124024.712:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.2.4275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7caf32ce59 code=0x7ffc0000 [ 867.316053][T19793] syzkaller1: entered promiscuous mode [ 867.316075][T19793] syzkaller1: entered allmulticast mode [ 868.652070][T19840] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 868.652122][T19840] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 868.652157][T19840] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 868.652191][T19840] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 870.277413][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.277463][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.662096][T19915] xfrm0 speed is unknown, defaulting to 1000 [ 874.276862][T19994] TC_ACT_REPEAT abuse ? [ 874.280791][T19996] netlink: 'syz.3.4322': attribute type 3 has an invalid length. [ 874.280814][T19996] netlink: 'syz.3.4322': attribute type 1 has an invalid length. [ 874.280826][T19996] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4322'. [ 876.022534][T20037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4340'. [ 877.079679][T20054] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4345'. [ 877.713875][T20081] syzkaller1: entered promiscuous mode [ 877.713896][T20081] syzkaller1: entered allmulticast mode [ 877.922620][T20084] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4357'. [ 879.103696][T20112] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4368'. [ 879.796067][T20128] syzkaller1: entered promiscuous mode [ 879.796091][T20128] syzkaller1: entered allmulticast mode [ 880.168610][T20138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4380'. [ 881.364304][T20170] tipc: Enabled bearer , priority 0 [ 881.431057][T20170] syzkaller0: entered promiscuous mode [ 881.431083][T20170] syzkaller0: entered allmulticast mode [ 881.431539][T20170] tipc: Resetting bearer [ 881.635813][T20169] tipc: Resetting bearer [ 889.812348][T20169] tipc: Disabling bearer [ 889.926342][ T31] tipc: Node number set to 1547628557 [ 889.942349][T20196] syzkaller1: entered promiscuous mode [ 889.942374][T20196] syzkaller1: entered allmulticast mode [ 890.061721][T20212] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4405'. [ 891.234127][T20260] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4418'. [ 892.084984][T20300] syzkaller0: entered promiscuous mode [ 892.085003][T20300] syzkaller0: entered allmulticast mode [ 892.147248][T20307] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4431'. [ 893.137817][T20349] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4442'. [ 894.183185][T20393] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4455'. [ 894.846869][T20420] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4467'. [ 896.076786][T20453] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4481'. [ 897.110291][T20485] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4492'. [ 902.718266][T20631] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 902.767251][T20631] syzkaller0: entered promiscuous mode [ 902.767273][T20631] syzkaller0: entered allmulticast mode [ 904.190341][T20689] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 904.190388][T20689] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 904.190422][T20689] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 904.190456][T20689] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 904.543590][T20707] netlink: 'syz.2.4581': attribute type 1 has an invalid length. [ 904.830710][T20720] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 904.832148][T20720] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 904.832197][T20720] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 904.832232][T20720] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 904.854604][ T10] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 905.006071][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 905.006099][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 905.006121][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 905.006143][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 905.006162][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 905.010660][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 905.010692][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.010708][ T10] usb 3-1: Product: syz [ 905.010719][ T10] usb 3-1: Manufacturer: syz [ 905.010730][ T10] usb 3-1: SerialNumber: syz [ 905.015961][ T10] usb 3-1: config 0 descriptor?? [ 905.112203][ T10] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 905.112339][ T10] imon 3-1:0.0: unable to initialize intf0, err -90 [ 905.112352][ T10] imon:imon_probe: failed to initialize context! [ 905.112362][ T10] imon 3-1:0.0: unable to register, err -19 [ 905.324278][ T10] usb 3-1: USB disconnect, device number 62 [ 906.959531][T20772] 9p: Bad value for 'wfdno' [ 909.472289][T20841] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 909.472339][T20841] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 909.472375][T20841] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 909.472409][T20841] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 910.798164][T20870] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4644'. [ 910.846281][T20872] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 910.846344][T20872] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 910.846381][T20872] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 910.846419][T20872] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 912.877572][T20907] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4657'. [ 913.046229][T20919] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 913.048150][T20925] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4665'. [ 914.125474][T20923] syzkaller0: entered promiscuous mode [ 914.125497][T20923] syzkaller0: entered allmulticast mode [ 914.130934][T20940] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4672'. [ 915.184937][T20992] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4686'. [ 915.231143][T21002] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 915.268303][T21002] syzkaller0: entered promiscuous mode [ 915.268325][T21002] syzkaller0: entered allmulticast mode [ 916.121658][T21048] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4706'. [ 916.348979][T21059] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 916.386516][T21059] syzkaller0: entered promiscuous mode [ 916.386538][T21059] syzkaller0: entered allmulticast mode [ 916.389230][T21064] ------------[ cut here ]------------ [ 916.389244][T21064] !(flags & __GFP_NOWARN) [ 916.389257][T21064] WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x829/0x900, CPU#0: syz.3.4710/21064 [ 916.389308][T21064] Modules linked in: [ 916.389334][T21064] CPU: 0 UID: 0 PID: 21064 Comm: syz.3.4710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 916.389360][T21064] Tainted: [L]=SOFTLOCKUP [ 916.389368][T21064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 916.389380][T21064] RIP: 0010:__kvmalloc_node_noprof+0x829/0x900 [ 916.389404][T21064] Code: ff 48 c7 c7 20 23 0f 8e 48 89 de e8 41 da c0 02 e9 e9 fc ff ff 48 c7 c7 60 23 0f 8e 48 89 de e8 2d da c0 02 e9 1c fd ff ff 90 <0f> 0b 90 45 31 e4 e9 27 fc ff ff 49 83 7e 40 00 0f 85 b5 fa ff ff [ 916.389419][T21064] RSP: 0018:ffffc90008f5fa50 EFLAGS: 00010246 [ 916.389434][T21064] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: 0000000080000001 [ 916.389445][T21064] RDX: 0000000080000008 RSI: ffffffff8ba92a60 RDI: ffffffff8ba92a20 [ 916.389458][T21064] RBP: ffffc90008f5fc50 R08: 00000000004028c0 R09: 00000000ffffffff [ 916.389470][T21064] R10: 0000000000000100 R11: 0000000000000006 R12: 0000000000000000 [ 916.389481][T21064] R13: 00000000004028c0 R14: 0000000010000001 R15: 0000000080000008 [ 916.389492][T21064] FS: 00007f89c84066c0(0000) GS:ffff888126142000(0000) knlGS:0000000000000000 [ 916.389505][T21064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 916.389517][T21064] CR2: 0000200000002300 CR3: 000000003b512000 CR4: 00000000003526f0 [ 916.389531][T21064] Call Trace: [ 916.389538][T21064] [ 916.389546][T21064] ? io_pin_pages+0x9f/0x1b0 [ 916.389637][T21064] io_pin_pages+0x9f/0x1b0 [ 916.389654][T21064] io_sqe_buffer_register+0x21f/0x1360 [ 916.389701][T21064] ? rcu_is_watching+0x15/0xb0 [ 916.389730][T21064] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 916.389745][T21064] ? __kvmalloc_node_noprof+0x3e0/0x900 [ 916.389766][T21064] ? io_sqe_buffers_register+0x124/0x7e0 [ 916.389793][T21064] ? iovec_from_user+0x1ba/0x250 [ 916.389814][T21064] io_sqe_buffers_register+0x2eb/0x7e0 [ 916.389837][T21064] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 916.389856][T21064] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 916.389884][T21064] ? mutex_lock_nested+0x152/0x1d0 [ 916.389902][T21064] ? __se_sys_io_uring_register+0x221/0x1a20 [ 916.389926][T21064] __se_sys_io_uring_register+0x11a1/0x1a20 [ 916.389948][T21064] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 916.389966][T21064] ? rcu_is_watching+0x15/0xb0 [ 916.389989][T21064] ? rcu_is_watching+0x15/0xb0 [ 916.390009][T21064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.390026][T21064] do_syscall_64+0x174/0x580 [ 916.390051][T21064] ? trace_irq_disable+0x3b/0x140 [ 916.390071][T21064] ? clear_bhb_loop+0x40/0x90 [ 916.390087][T21064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.390104][T21064] RIP: 0033:0x7f89ca1ace59 [ 916.390120][T21064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.390134][T21064] RSP: 002b:00007f89c8406028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 916.390153][T21064] RAX: ffffffffffffffda RBX: 00007f89ca425fa0 RCX: 00007f89ca1ace59 [ 916.390167][T21064] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 916.390186][T21064] RBP: 00007f89ca242e6f R08: 0000000000000000 R09: 0000000000000000 [ 916.390198][T21064] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 916.390210][T21064] R13: 00007f89ca426038 R14: 00007f89ca425fa0 R15: 00007ffd468c37c8 [ 916.390230][T21064] [ 916.390248][T21064] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 916.390266][T21064] CPU: 0 UID: 0 PID: 21064 Comm: syz.3.4710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 916.390291][T21064] Tainted: [L]=SOFTLOCKUP [ 916.390297][T21064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 916.390308][T21064] Call Trace: [ 916.390314][T21064] [ 916.390322][T21064] vpanic+0x56c/0xa60 [ 916.390361][T21064] ? __pfx__printk+0x10/0x10 [ 916.390384][T21064] ? __pfx_vpanic+0x10/0x10 [ 916.390402][T21064] ? is_bpf_text_address+0x292/0x2b0 [ 916.390422][T21064] ? is_bpf_text_address+0x26/0x2b0 [ 916.390445][T21064] panic+0xc5/0xd0 [ 916.390463][T21064] ? __pfx_panic+0x10/0x10 [ 916.390487][T21064] __warn+0x315/0x4c0 [ 916.390506][T21064] ? __kvmalloc_node_noprof+0x829/0x900 [ 916.390529][T21064] ? __kvmalloc_node_noprof+0x829/0x900 [ 916.390549][T21064] __report_bug+0x331/0x530 [ 916.390650][T21064] ? io_rsrc_node_alloc+0x17f/0x2a0 [ 916.390704][T21064] ? io_sqe_buffer_register+0x1b2/0x1360 [ 916.390721][T21064] ? io_sqe_buffers_register+0x2eb/0x7e0 [ 916.390736][T21064] ? __kvmalloc_node_noprof+0x829/0x900 [ 916.390757][T21064] ? __pfx___report_bug+0x10/0x10 [ 916.390790][T21064] ? __asan_memset+0x22/0x50 [ 916.390808][T21064] ? __alloc_frozen_pages_noprof+0xac/0x380 [ 916.390833][T21064] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 916.390856][T21064] ? __kvmalloc_node_noprof+0x829/0x900 [ 916.390877][T21064] report_bug+0x16a/0x220 [ 916.390907][T21064] ? __kvmalloc_node_noprof+0x829/0x900 [ 916.390927][T21064] ? __kvmalloc_node_noprof+0x82b/0x900 [ 916.390947][T21064] handle_bug+0x9c/0x200 [ 916.390965][T21064] exc_invalid_op+0x1a/0x50 [ 916.390982][T21064] asm_exc_invalid_op+0x1a/0x20 [ 916.391000][T21064] RIP: 0010:__kvmalloc_node_noprof+0x829/0x900 [ 916.391023][T21064] Code: ff 48 c7 c7 20 23 0f 8e 48 89 de e8 41 da c0 02 e9 e9 fc ff ff 48 c7 c7 60 23 0f 8e 48 89 de e8 2d da c0 02 e9 1c fd ff ff 90 <0f> 0b 90 45 31 e4 e9 27 fc ff ff 49 83 7e 40 00 0f 85 b5 fa ff ff [ 916.391039][T21064] RSP: 0018:ffffc90008f5fa50 EFLAGS: 00010246 [ 916.391054][T21064] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: 0000000080000001 [ 916.391066][T21064] RDX: 0000000080000008 RSI: ffffffff8ba92a60 RDI: ffffffff8ba92a20 [ 916.391079][T21064] RBP: ffffc90008f5fc50 R08: 00000000004028c0 R09: 00000000ffffffff [ 916.391092][T21064] R10: 0000000000000100 R11: 0000000000000006 R12: 0000000000000000 [ 916.391103][T21064] R13: 00000000004028c0 R14: 0000000010000001 R15: 0000000080000008 [ 916.391122][T21064] ? io_pin_pages+0x9f/0x1b0 [ 916.391142][T21064] io_pin_pages+0x9f/0x1b0 [ 916.391159][T21064] io_sqe_buffer_register+0x21f/0x1360 [ 916.391182][T21064] ? rcu_is_watching+0x15/0xb0 [ 916.391205][T21064] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 916.391221][T21064] ? __kvmalloc_node_noprof+0x3e0/0x900 [ 916.391243][T21064] ? io_sqe_buffers_register+0x124/0x7e0 [ 916.391259][T21064] ? iovec_from_user+0x1ba/0x250 [ 916.391277][T21064] io_sqe_buffers_register+0x2eb/0x7e0 [ 916.391300][T21064] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 916.391318][T21064] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 916.391342][T21064] ? mutex_lock_nested+0x152/0x1d0 [ 916.391360][T21064] ? __se_sys_io_uring_register+0x221/0x1a20 [ 916.391378][T21064] __se_sys_io_uring_register+0x11a1/0x1a20 [ 916.391397][T21064] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 916.391416][T21064] ? rcu_is_watching+0x15/0xb0 [ 916.391440][T21064] ? rcu_is_watching+0x15/0xb0 [ 916.391463][T21064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.391479][T21064] do_syscall_64+0x174/0x580 [ 916.391500][T21064] ? trace_irq_disable+0x3b/0x140 [ 916.391519][T21064] ? clear_bhb_loop+0x40/0x90 [ 916.391536][T21064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.391552][T21064] RIP: 0033:0x7f89ca1ace59 [ 916.391566][T21064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.391580][T21064] RSP: 002b:00007f89c8406028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 916.391598][T21064] RAX: ffffffffffffffda RBX: 00007f89ca425fa0 RCX: 00007f89ca1ace59 [ 916.391611][T21064] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 916.391622][T21064] RBP: 00007f89ca242e6f R08: 0000000000000000 R09: 0000000000000000 [ 916.391634][T21064] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 916.391645][T21064] R13: 00007f89ca426038 R14: 00007f89ca425fa0 R15: 00007ffd468c37c8 [ 916.391665][T21064] [ 916.391967][T21064] Kernel Offset: disabled