last executing test programs: 21m29.948549079s ago: executing program 32 (id=1396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000680)={@private2, 0x4, 0x1, 0x0, 0x9, 0x5}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0x128, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_virt_wifi\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @IPSET_ATTR_ADT={0xa0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2b1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 21m23.358133369s ago: executing program 1 (id=1423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000100)="36040224ee94c2f713ff16f3048731f539d80e29baefbb8c", 0x18}], 0x2) 21m7.941230749s ago: executing program 33 (id=1423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000100)="36040224ee94c2f713ff16f3048731f539d80e29baefbb8c", 0x18}], 0x2) 14m5.244149091s ago: executing program 4 (id=4324): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) pwrite64(r0, &(0x7f0000000440)="7de2", 0x2, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xa, 0x8, 0x2}) 14m2.587653166s ago: executing program 4 (id=4339): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socket(0x200000000000011, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000", 0x2c}], 0x1}, 0x0) 14m2.124900094s ago: executing program 4 (id=4344): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, 0x0, 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xd8, 0x30, 0x401, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x52, 0x6, "d8f195109eca43e24feb4a8813f9ac6d6d39c9ebe9a80bcd00b38ecc713449b747214140f06ce9a8c1cf27b01655777c76fbc86741641520d583a73c8aaf72e123f9741caf1e98eb581ba0afcaed"}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 14m0.648725955s ago: executing program 4 (id=4352): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700)) syz_emit_ethernet(0x4e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r5, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 14m0.385797511s ago: executing program 4 (id=4355): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 14m0.083799697s ago: executing program 4 (id=4357): io_uring_setup(0x667, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) memfd_create(0x0, 0x2) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 13m59.454955853s ago: executing program 34 (id=4357): io_uring_setup(0x667, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) memfd_create(0x0, 0x2) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 8m20.552117216s ago: executing program 3 (id=5303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m20.347348013s ago: executing program 3 (id=5306): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000002180)={&(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000021c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000002240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @mcast2, 0xee5}, {0xa, 0x4e24, 0x40, @empty, 0x3}, r3, 0x3}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setresuid(0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b5d350987f70e06d038e7ff7fc6e5539b324b298b089b07083550090890e0878f0e1ac6e7049b334b959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193b63735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d759be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d6e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bacdc76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa94779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5092f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b1cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b384c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a119b616d41826137ba5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4f006738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba30642f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e51f7d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d2462374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a0000ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6994ff2bdfb14cb6d648cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 8m18.811553746s ago: executing program 3 (id=5318): close(0x3) r0 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000b40)={r1}, &(0x7f0000000840)=0x8) 8m18.528200915s ago: executing program 3 (id=5321): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x9, 0x0, 0x2, {0x1, @vbi={0x7fc4, 0xa9, 0x4, 0xb01516da, [0xfffffe00, 0x4000000], [0x7ff, 0x3], 0x1}}, 0xd25}) 8m18.485456592s ago: executing program 3 (id=5322): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x8000, 0xfffffff5) 8m18.372094731s ago: executing program 3 (id=5325): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) 8m2.794584437s ago: executing program 35 (id=5325): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) 3m52.653978249s ago: executing program 5 (id=5988): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="0000000000000000080004000600000008001b0000000000"], 0x30}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000", @ANYRES32=0x0, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x1021004, 0x0) syz_fuse_handle_req(r5, &(0x7f00000062c0)="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", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) syz_clone(0xc7400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m50.685306163s ago: executing program 5 (id=5989): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000008000"/20, @ANYRES32, @ANYBLOB="fdffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d931fe2d42e0ad6bdceda3b16a5bf6ae4fb5e5b4164b6707d07c453c8e429eda56de860fb2ada6b4e6d75a81e0f743cb7578c6ef201209329ee658de3464937bba794a58cd81e1b87f78165f583762f5f86ab365f6b8375d3448f3c60b4ff355b68135c622fdccc9877d365d0b5af0d4c948abe0ad37d42db244324f5d72142d848e023d8ab9a39f835e5baabab39c24d079f97b4af5c446025dc762e2e78756af2ef5a42bc2beda6c1aabbb34cc060031bd2bad8a479996"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r5, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x101, 0xd66}}) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) 3m41.89231805s ago: executing program 5 (id=6002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast2, 0x0, 0x0, 'dh\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) connect$pppl2tp(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x2, [{}, {}]}, 0x48) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/.$-+[:@:@V('}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044001}, 0x11) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r5, @ANYRES32=r6], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="3800000040001901feffffff00000000017c0000140042800f000a002e2425d42a7b2b2e4e2e00000c0001800600060065310000"], 0x38}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 3m41.515471103s ago: executing program 5 (id=6003): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x206280, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 3m41.000063639s ago: executing program 5 (id=6005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, 0x0) 3m40.587936111s ago: executing program 5 (id=6007): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x0, 0x34343452, 0x280, 0x168, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x81}}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c050}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000b7080000000000007b8af8ff00000000b7080000260a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'macvlan1\x00'}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) 3m38.020430685s ago: executing program 36 (id=6007): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x0, 0x34343452, 0x280, 0x168, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x81}}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c050}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000b7080000000000007b8af8ff00000000b7080000260a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'macvlan1\x00'}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) 1m44.165796095s ago: executing program 9 (id=6163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r4 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x35}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x88, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "b67ab523b0e6cfb6215d392ac73f11800d8fad96cb0f8e5e564239e007e93910bc6c8d476a8a4c3182eee481ad5286a8ca4e392ca6f16351ce061ade2578973e49"}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x32600) 1m41.356894616s ago: executing program 9 (id=6167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m35.775661957s ago: executing program 9 (id=6170): syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 1m32.068662349s ago: executing program 9 (id=6174): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast2, 0x0, 0x0, 'dh\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) connect$pppl2tp(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x2, [{}, {}]}, 0x48) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/.$-+[:@:@V('}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044001}, 0x11) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r5, @ANYRES32=r6], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="3800000040001901feffffff00000000017c0000140042800f000a002e2425d42a7b2b2e4e2e00000c0001800600060065310000040008"], 0x38}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 1m31.445101962s ago: executing program 9 (id=6176): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373", 0x0, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m29.772655019s ago: executing program 9 (id=6178): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31cbb393}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1m27.604111275s ago: executing program 8 (id=6182): eventfd(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m26.426952812s ago: executing program 8 (id=6183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001400)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) 1m23.846336985s ago: executing program 8 (id=6184): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m21.910456787s ago: executing program 8 (id=6187): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x98}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m20.058905641s ago: executing program 8 (id=6193): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x40006, 0x1, 0x400}, &(0x7f0000000100)=0x14) shutdown(r2, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x1}]}, {0x0, [0x61, 0x30, 0x2e, 0x7e]}}, 0x0, 0x2a}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) recvfrom(r4, &(0x7f0000000000)=""/35, 0x23, 0x100, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="00000000000000f1de86551a00341145b7a6514e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r4, @ANYBLOB="0000000000000000b70500000000000085000000a800000095", @ANYRESHEX=r5], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 1m16.186991054s ago: executing program 8 (id=6197): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m12.624454219s ago: executing program 37 (id=6178): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31cbb393}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1m0.066199348s ago: executing program 38 (id=6197): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 34.59570385s ago: executing program 2 (id=6250): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() open(0x0, 0x109042, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000040), 0x4800000000000, 0x101601) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 32.520505241s ago: executing program 2 (id=6251): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 25.691393614s ago: executing program 2 (id=6257): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(0x0, 0x75, 0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x0, 0x34343452, 0x280, 0x168, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x81}}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) listen(r0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c050}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000b7080000000000007b8af8ff00000000b7080000260a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'macvlan1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x24048084) syz_emit_ethernet(0x0, 0x0, 0x0) 24.428033107s ago: executing program 2 (id=6260): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x206280, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 22.38115145s ago: executing program 2 (id=6262): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_io_uring_setup(0x12c3, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0xfffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) 20.656823904s ago: executing program 2 (id=6264): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a0001002dbd700000000000022014000300fe", @ANYRES32=0x0, @ANYBLOB="0500a25a280000000500000000000000"], 0x34}}, 0xea5bc50b619957fe) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x2573, 0x4) sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r4, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/183, 0xb7}], 0x1}, 0x54}], 0x1, 0x40000020, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000b40)={0x53, 0x1, 0x8, {0x1017, 0x1}, {0x10, 0x1}, @cond=[{0x5, 0x6, 0x8, 0x8003, 0x3ecb, 0x9}, {0x600, 0x8000, 0x4, 0x4, 0x1ab1, 0xe00}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 20.202244955s ago: executing program 39 (id=6264): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a0001002dbd700000000000022014000300fe", @ANYRES32=0x0, @ANYBLOB="0500a25a280000000500000000000000"], 0x34}}, 0xea5bc50b619957fe) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x2573, 0x4) sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r4, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/183, 0xb7}], 0x1}, 0x54}], 0x1, 0x40000020, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000b40)={0x53, 0x1, 0x8, {0x1017, 0x1}, {0x10, 0x1}, @cond=[{0x5, 0x6, 0x8, 0x8003, 0x3ecb, 0x9}, {0x600, 0x8000, 0x4, 0x4, 0x1ab1, 0xe00}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 16.385043134s ago: executing program 7 (id=6270): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}], 0x48}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.128668563s ago: executing program 0 (id=6198): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007e80)={'syztnl2\x00', 0x0}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = semget(0x2, 0x4, 0x200) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000580)="b1", 0x1) recvmsg(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000019c0)=""/4091, 0xffb}], 0x1}, 0x12143) semop(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r9 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000180), 0x4001) ioctl$SNDRV_PCM_IOCTL_FORWARD(r9, 0x40084149, &(0x7f00000000c0)=0x5) 14.057759353s ago: executing program 7 (id=6272): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_io_uring_setup(0x12c3, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0xfffffffd, 0x12a}, &(0x7f0000000140), &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 12.139019975s ago: executing program 0 (id=6273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001400)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)) 10.34526631s ago: executing program 7 (id=6275): eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x0, 0x10000000004, 0x80000000, 0x100000000000200, 0x1ff}, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0x0) gettid() connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4) prctl$PR_GET_IO_FLUSHER(0x3a) 8.01839594s ago: executing program 7 (id=6276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x20, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x800000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) futex(&(0x7f0000000300)=0x1, 0x8, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x1, 0x2) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) prlimit64(r0, 0x4, &(0x7f00000001c0)={0x6, 0x6400}, &(0x7f0000000280)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r5, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001480)}, 0x2) 7.070870825s ago: executing program 0 (id=6277): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 6.502810517s ago: executing program 6 (id=6278): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_io_uring_setup(0x12c3, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0xfffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 6.466009032s ago: executing program 0 (id=6279): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() open(0x0, 0x109042, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(0x0, 0x4800000000000, 0x101601) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 4.349073156s ago: executing program 0 (id=6280): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0xf5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.790870024s ago: executing program 1 (id=6218): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}], 0xa5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.372153933s ago: executing program 6 (id=6281): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) 3.212005166s ago: executing program 6 (id=6282): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}], 0x48}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.185714807s ago: executing program 1 (id=6283): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x40006, 0x1, 0x400}, &(0x7f0000000100)=0x14) shutdown(r2, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x1}]}, {0x0, [0x61, 0x30, 0x2e, 0x7e]}}, 0x0, 0x2a}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) recvfrom(r4, &(0x7f0000000000)=""/35, 0x23, 0x100, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="00000000000000f1de86551a00341145b7a6514e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r4, @ANYBLOB="0000000000000000b70500000000000085000000a800000095", @ANYRESHEX=r5], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 2.677618872s ago: executing program 7 (id=6284): r0 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x0, 0x10000000004, 0x80000000, 0x100000000000200, 0x1ff}, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0x0) gettid() connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4) prctl$PR_GET_IO_FLUSHER(0x3a) 2.57013889s ago: executing program 1 (id=6285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2.363887717s ago: executing program 1 (id=6286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xddbf, 0x1, 0x3, 0x156}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e00000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 1.161374095s ago: executing program 1 (id=6287): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 1.138778276s ago: executing program 6 (id=6288): sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x8040) r0 = getpid() syz_pidfd_open(r0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.010106835s ago: executing program 7 (id=6289): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r0, &(0x7f0000002200)="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", 0x800) 1.008503224s ago: executing program 0 (id=6290): eventfd(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 655.619675ms ago: executing program 6 (id=6291): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x0) 0s ago: executing program 6 (id=6292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xddbf, 0x1, 0x3, 0x156}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000077"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') kernel console output (not intermixed with test programs): ns: partition scan of loop9 (þ被xü^>Ñà– ) failed (rc=-5) [ 943.379209][T19993] loop9: detected capacity change from 0 to 7 [ 943.380027][T19993] Dev loop9: unable to read RDB block 7 [ 943.380073][T19993] loop9: unable to read partition table [ 943.380292][T19993] loop9: partition table beyond EOD, truncated [ 943.380312][T19993] loop_reread_partitions: partition scan of loop9 (þ被xü^>Ñà– ) failed (rc=-5) [ 951.094232][ T38] audit: type=1400 audit(1768413080.411:53): lsm=SMACK fn=smack_task_setioprio action=denied subject="w" object="_" requested=w pid=20057 comm="syz.7.4893" opid=20057 ocomm="syz.7.4893" [ 954.833326][T15603] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 955.014085][T20101] bond0: (slave rose0): Releasing backup interface [ 955.180287][T15603] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 955.180310][T15603] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 955.180325][T15603] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 955.180361][T15603] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 955.180381][T15603] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 955.194852][T15603] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 955.194874][T15603] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 955.194890][T15603] usb 3-1: Product: syz [ 955.194901][T15603] usb 3-1: Manufacturer: syz [ 955.274881][T15603] cdc_wdm 3-1:1.0: skipping garbage [ 955.274895][T15603] cdc_wdm 3-1:1.0: skipping garbage [ 955.298784][T15603] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 955.298816][T15603] cdc_wdm 3-1:1.0: Unknown control protocol [ 956.039230][T15582] usb 3-1: USB disconnect, device number 8 [ 961.635787][T15582] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 962.871947][T15582] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 962.871982][T15582] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 962.872012][T15582] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 962.872068][T15582] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 962.872098][T15582] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 962.927031][T15582] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 962.927065][T15582] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 962.927090][T15582] usb 3-1: Product: syz [ 962.927106][T15582] usb 3-1: Manufacturer: syz [ 963.116013][T15582] cdc_wdm 3-1:1.0: skipping garbage [ 963.116035][T15582] cdc_wdm 3-1:1.0: skipping garbage [ 963.283742][T15582] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 963.283766][T15582] cdc_wdm 3-1:1.0: Unknown control protocol [ 963.542613][T20153] ======================================================= [ 963.542613][T20153] WARNING: The mand mount option has been deprecated and [ 963.542613][T20153] and is ignored by this kernel. Remove the mand [ 963.542613][T20153] option from the mount to silence this warning. [ 963.542613][T20153] ======================================================= [ 963.708430][T15582] usb 3-1: USB disconnect, device number 9 [ 963.787511][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4931'. [ 963.787538][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4931'. [ 964.220451][T20184] netlink: 'syz.7.4936': attribute type 1 has an invalid length. [ 964.272809][T20186] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4936'. [ 964.272847][T20186] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4936'. [ 964.359630][T20184] bond1: entered promiscuous mode [ 964.360121][T20184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.637885][T20189] bond1: (slave bridge1): making interface the new active one [ 964.637913][T20189] bridge1: entered promiscuous mode [ 964.639234][T20189] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 966.379969][T20207] binder: 20206:20207 ioctl c0306201 200000000080 returned -14 [ 968.693468][ T7349] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 968.850679][ T7349] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 968.850712][ T7349] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 968.850735][ T7349] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 968.850791][ T7349] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 968.850822][ T7349] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 968.904217][ T7349] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 968.904250][ T7349] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 968.904273][ T7349] usb 3-1: Product: syz [ 968.904290][ T7349] usb 3-1: Manufacturer: syz [ 968.948710][ T7349] cdc_wdm 3-1:1.0: skipping garbage [ 968.948729][ T7349] cdc_wdm 3-1:1.0: skipping garbage [ 968.966034][ T7349] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 968.966057][ T7349] cdc_wdm 3-1:1.0: Unknown control protocol [ 970.273216][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 970.358751][T15582] usb 3-1: USB disconnect, device number 10 [ 976.822717][T20320] syzkaller0: entered promiscuous mode [ 976.822746][T20320] syzkaller0: entered allmulticast mode [ 976.832934][T20320] tipc: Started in network mode [ 976.832966][T20320] tipc: Node identity fe3e0e601235, cluster identity 4711 [ 976.835815][T20320] tipc: Enabled bearer , priority 0 [ 976.851906][T20320] tipc: Resetting bearer [ 977.139711][T20319] tipc: Resetting bearer [ 979.858715][T20319] tipc: Disabling bearer [ 981.169361][ T7313] tipc: Node number set to 3960147552 [ 981.723349][T20349] 9pnet: p9_errstr2errno: server reported unknown error [ 982.785617][T20365] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 983.197402][ T69] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 983.197548][ T69] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 983.197590][ T69] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 983.197632][ T69] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 985.416692][T15582] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 985.895876][T15582] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 985.895937][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 985.895969][T15582] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.895998][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 985.896028][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 986.197517][T15582] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 986.197577][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 986.197608][T15582] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.197637][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.197665][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 986.265544][T15582] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 986.265604][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 986.265634][T15582] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.265671][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.265691][T15582] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 986.334046][T15582] usb 7-1: string descriptor 0 read error: -22 [ 986.334198][T15582] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 986.334225][T15582] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.382592][T15582] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 986.580668][ T7313] usb 7-1: USB disconnect, device number 5 [ 992.154403][ T61] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 992.553390][T19522] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 992.702563][T20476] netlink: 'syz.6.5036': attribute type 1 has an invalid length. [ 992.702587][T20476] netlink: 760 bytes leftover after parsing attributes in process `syz.6.5036'. [ 992.717049][T19522] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 992.717149][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 992.717239][T19522] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 992.717311][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 992.717384][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 992.723313][T15582] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 992.765873][T19522] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 992.765994][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 992.766072][T19522] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 992.766132][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 992.766226][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 992.812817][T19522] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 992.812978][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 992.813069][T19522] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 992.813145][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 992.813722][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 992.873251][T15582] usb 3-1: Using ep0 maxpacket: 16 [ 992.877087][T15582] usb 3-1: config 0 has no interfaces? [ 992.877124][T15582] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 992.877151][T15582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.926871][T15582] usb 3-1: config 0 descriptor?? [ 992.927809][T19522] usb 6-1: string descriptor 0 read error: -22 [ 992.927962][T19522] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 992.927990][T19522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.008311][T19522] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 993.342908][T15582] usb 6-1: USB disconnect, device number 5 [ 995.127925][T20498] netlink: 'syz.6.5044': attribute type 1 has an invalid length. [ 995.189991][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5044'. [ 995.190086][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5044'. [ 995.305963][T20498] bond1: entered promiscuous mode [ 995.306419][T20498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 996.466378][T20503] bond1: (slave bridge1): making interface the new active one [ 996.466397][T20503] bridge1: entered promiscuous mode [ 996.467289][T20503] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 996.521094][ T7349] usb 3-1: USB disconnect, device number 11 [ 996.708703][T20515] netlink: 'syz.2.5048': attribute type 1 has an invalid length. [ 996.708720][T20515] netlink: 760 bytes leftover after parsing attributes in process `syz.2.5048'. [ 998.187729][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.187781][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.486313][T19522] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 999.722552][T19522] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 999.722616][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 999.722649][T19522] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 999.722679][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 999.722708][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 999.727628][T19522] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 999.727746][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 999.727822][T19522] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 999.727897][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 999.727971][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 999.857478][T19522] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 999.857541][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 999.857573][T19522] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 999.857603][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 999.857633][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 999.941683][T19522] usb 8-1: string descriptor 0 read error: -22 [ 999.941837][T19522] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 999.941865][T19522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.997979][T20547] netlink: 'syz.5.5061': attribute type 1 has an invalid length. [ 999.998002][T20547] netlink: 760 bytes leftover after parsing attributes in process `syz.5.5061'. [ 1000.025653][T19522] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1000.094615][T20549] binder: 20546:20549 ioctl c0306201 200000000080 returned -14 [ 1000.097287][T20549] binder_alloc: 20546: binder_alloc_buf, no vma [ 1000.211629][T19522] usb 8-1: USB disconnect, device number 7 [ 1000.394013][ T7317] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1000.553259][ T7317] usb 7-1: Using ep0 maxpacket: 16 [ 1000.555629][ T7317] usb 7-1: config 0 has no interfaces? [ 1000.555667][ T7317] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1000.555694][ T7317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.630271][ T7317] usb 7-1: config 0 descriptor?? [ 1004.080349][T15583] usb 7-1: USB disconnect, device number 6 [ 1004.487735][T20595] binder: 20590:20595 ioctl c0306201 200000000080 returned -14 [ 1004.532245][T20595] binder_alloc: 20590: binder_alloc_buf, no vma [ 1004.863329][ T7317] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 1005.015500][ T7317] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.015583][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1005.015616][ T7317] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1005.015646][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1005.015676][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1005.018041][ T7317] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.018096][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1005.018128][ T7317] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1005.018158][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1005.018187][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1005.020513][ T7317] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.020578][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1005.020610][ T7317] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1005.020640][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1005.020671][ T7317] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1005.914405][ T7317] usb 3-1: string descriptor 0 read error: -22 [ 1005.914709][ T7317] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1005.914738][ T7317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.981140][ T7317] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1006.176736][T15582] usb 3-1: USB disconnect, device number 12 [ 1006.936525][T20625] binder: 20623:20625 ioctl c0306201 200000000080 returned -14 [ 1007.200733][ T7313] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1007.363269][ T7313] usb 7-1: Using ep0 maxpacket: 16 [ 1007.365578][ T7313] usb 7-1: config 0 has no interfaces? [ 1007.365616][ T7313] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1007.365643][ T7313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.371068][ T7313] usb 7-1: config 0 descriptor?? [ 1008.548954][T15603] usb 7-1: USB disconnect, device number 7 [ 1017.013794][T20681] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1018.123922][T15583] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1018.283864][T15583] usb 8-1: Using ep0 maxpacket: 16 [ 1018.287570][T15583] usb 8-1: config 0 has no interfaces? [ 1018.287595][T15583] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1018.287613][T15583] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.343395][T15583] usb 8-1: config 0 descriptor?? [ 1018.564841][ T7313] usb 8-1: USB disconnect, device number 8 [ 1018.987290][T20697] netlink: 'syz.5.5111': attribute type 1 has an invalid length. [ 1018.987314][T20697] netlink: 760 bytes leftover after parsing attributes in process `syz.5.5111'. [ 1019.055572][T20699] netlink: 'syz.2.5112': attribute type 1 has an invalid length. [ 1019.055596][T20699] netlink: 'syz.2.5112': attribute type 1 has an invalid length. [ 1019.055612][T20699] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5112'. [ 1020.925535][T20721] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1022.065951][T20730] netlink: 'syz.5.5123': attribute type 1 has an invalid length. [ 1022.065976][T20730] netlink: 760 bytes leftover after parsing attributes in process `syz.5.5123'. [ 1022.653525][ T7313] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1023.883267][ T7313] usb 6-1: Using ep0 maxpacket: 16 [ 1023.984833][ T7313] usb 6-1: config 0 has no interfaces? [ 1023.984874][ T7313] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1023.984901][ T7313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.024903][ T7313] usb 6-1: config 0 descriptor?? [ 1024.262322][T15583] usb 6-1: USB disconnect, device number 6 [ 1024.456517][T20750] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5129'. [ 1024.456598][T20750] nbd: must specify a device to reconfigure [ 1025.587008][T20759] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1025.699340][T20761] netlink: 'syz.5.5133': attribute type 72 has an invalid length. [ 1026.233287][T19522] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1026.390539][T19522] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.390601][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1026.390633][T19522] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.390663][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1026.390693][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1026.393805][T19522] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.393882][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1026.393913][T19522] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.393942][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1026.393972][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1026.396203][T19522] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.396258][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1026.396288][T19522] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.396318][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1026.396348][T19522] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1026.408022][T19522] usb 6-1: string descriptor 0 read error: -22 [ 1026.408171][T19522] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1026.408197][T19522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.448606][T19522] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1026.814097][T19522] usb 6-1: USB disconnect, device number 7 [ 1027.495726][T20781] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5140'. [ 1027.495745][T20781] nbd: must specify a device to reconfigure [ 1028.730426][T20788] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1028.743448][T20789] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.743461][T20789] binder: 20786:20789 ioctl 4018620d 200000000040 returned -16 [ 1028.925613][T20791] netlink: 'syz.7.5144': attribute type 72 has an invalid length. [ 1030.098712][T20798] syzkaller0: entered promiscuous mode [ 1030.098742][T20798] syzkaller0: entered allmulticast mode [ 1030.333210][T20796] tipc: Enabled bearer , priority 0 [ 1030.381721][T20793] tipc: Resetting bearer [ 1030.433851][T20792] tipc: Resetting bearer [ 1030.574562][T20792] tipc: Disabling bearer [ 1030.754031][T19522] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 1030.915103][T19522] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1030.915164][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1030.915197][T19522] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1030.915227][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1030.915257][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1030.916402][T19522] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1030.916454][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1030.916485][T19522] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1030.916515][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1030.916545][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1030.924014][T19522] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1030.924171][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1030.924260][T19522] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1030.924328][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1030.924401][T19522] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1030.996607][T19522] usb 8-1: string descriptor 0 read error: -22 [ 1030.997010][T19522] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1030.997086][T19522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.137760][T19522] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1031.154544][T20817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5154'. [ 1031.154567][T20817] nbd: must specify a device to reconfigure [ 1031.305005][T19522] usb 8-1: USB disconnect, device number 9 [ 1032.486703][T20838] tipc: Enabled bearer , priority 0 [ 1032.487652][T20838] syzkaller0: entered promiscuous mode [ 1032.487677][T20838] syzkaller0: entered allmulticast mode [ 1032.497293][T20838] tipc: Resetting bearer [ 1032.651292][T20837] tipc: Resetting bearer [ 1032.834133][T20837] tipc: Disabling bearer [ 1033.016751][T20850] netlink: 'syz.2.5164': attribute type 10 has an invalid length. [ 1033.047945][T20850] siw: device registration error -23 [ 1033.060907][T20851] syzkaller0: entered promiscuous mode [ 1033.060932][T20851] syzkaller0: entered allmulticast mode [ 1033.095966][T20848] nbd3: detected capacity change from 0 to 127 [ 1033.118992][ T61] block nbd3: Receive control failed (result -32) [ 1035.376481][T20851] tipc: Enabled bearer , priority 0 [ 1035.467149][T20859] tipc: Resetting bearer [ 1035.544354][T20846] tipc: Resetting bearer [ 1035.734233][T20846] tipc: Disabling bearer [ 1036.584151][T20880] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1036.905796][T20887] netlink: 'syz.3.5177': attribute type 10 has an invalid length. [ 1036.914106][T20887] siw: device registration error -23 [ 1037.650465][ T61] block nbd6: Receive control failed (result -32) [ 1038.070322][T20886] nbd6: detected capacity change from 0 to 127 [ 1039.509594][T20900] tipc: Enabled bearer , priority 0 [ 1039.532830][T20900] tipc: Resetting bearer [ 1039.843504][T20895] tipc: Disabling bearer [ 1043.777228][T20930] netlink: 'syz.7.5191': attribute type 10 has an invalid length. [ 1043.782027][T20930] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1051.523367][ T7313] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1051.673242][ T7313] usb 7-1: Using ep0 maxpacket: 16 [ 1051.677242][ T7313] usb 7-1: config 0 has no interfaces? [ 1051.677283][ T7313] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1051.677310][ T7313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.708761][ T7313] usb 7-1: config 0 descriptor?? [ 1051.938293][ T7313] usb 7-1: USB disconnect, device number 8 [ 1053.732043][ T61] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 1053.843513][T21002] fuse: Bad value for 'fd' [ 1056.969002][T21016] tipc: Enabled bearer , priority 0 [ 1056.980420][T21016] syzkaller0: entered promiscuous mode [ 1056.980447][T21016] syzkaller0: entered allmulticast mode [ 1058.356730][T21017] tipc: Resetting bearer [ 1058.870588][T21015] tipc: Resetting bearer [ 1058.983630][T19522] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1058.996877][T21037] netlink: 'syz.5.5226': attribute type 4 has an invalid length. [ 1059.088025][T21038] netlink: 'syz.5.5226': attribute type 4 has an invalid length. [ 1059.420425][T19522] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1059.420523][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1059.420555][T19522] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1059.420581][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1059.420607][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1059.421972][T19522] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1059.422020][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1059.422045][T19522] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1059.422071][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1059.422096][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1059.424843][T19522] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1059.424898][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1059.424929][T19522] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1059.424959][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1059.424988][T19522] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1059.436529][T19522] usb 7-1: string descriptor 0 read error: -22 [ 1059.436930][T19522] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1059.437003][T19522] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.563764][T19522] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1059.630339][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.630514][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.679678][T19522] usb 7-1: USB disconnect, device number 9 [ 1059.791468][T21015] tipc: Disabling bearer [ 1060.221752][T15603] tipc: Node number set to 3122777074 [ 1064.655154][T21088] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 1065.643562][ T7349] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 1065.799262][ T7349] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1065.799322][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1065.799354][ T7349] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1065.799384][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1065.799413][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1065.800885][ T7349] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1065.800946][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1065.800978][ T7349] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1065.801008][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1065.801038][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1065.920586][ T7349] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1065.920646][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1065.920678][ T7349] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1065.920707][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1065.920737][ T7349] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1065.999898][ T7349] usb 3-1: string descriptor 0 read error: -22 [ 1066.000055][ T7349] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1066.000081][ T7349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.146161][ T7349] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1066.148716][T21095] netlink: 'syz.7.5243': attribute type 4 has an invalid length. [ 1066.199367][T21095] netlink: 'syz.7.5243': attribute type 4 has an invalid length. [ 1066.283717][ T7349] usb 3-1: USB disconnect, device number 13 [ 1067.715174][T21099] tipc: Started in network mode [ 1067.715207][T21099] tipc: Node identity 0a63d49c6bf4, cluster identity 4711 [ 1067.715400][T21099] tipc: Enabled bearer , priority 0 [ 1067.716183][T21099] syzkaller0: entered promiscuous mode [ 1067.716206][T21099] syzkaller0: entered allmulticast mode [ 1068.690792][T21104] tipc: Resetting bearer [ 1068.929803][T21098] tipc: Resetting bearer [ 1069.265874][T21098] tipc: Disabling bearer [ 1069.515497][T15582] tipc: Node number set to 1637340316 [ 1072.045260][T21122] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1073.260816][T21127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.263876][T21127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.754132][T21127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.809913][T21127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.283313][T15582] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1076.413287][T15582] usb 4-1: device descriptor read/64, error -71 [ 1076.693339][T15582] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1076.823413][T15582] usb 4-1: device descriptor read/64, error -71 [ 1076.943587][T15582] usb usb4-port1: attempt power cycle [ 1077.283496][T15582] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1077.305713][T15582] usb 4-1: device descriptor read/8, error -71 [ 1077.543434][T15582] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1077.565347][T15582] usb 4-1: device descriptor read/8, error -71 [ 1077.634624][T21153] tipc: Enabled bearer , priority 0 [ 1077.635059][T21154] syzkaller0: entered promiscuous mode [ 1077.635084][T21154] syzkaller0: entered allmulticast mode [ 1077.674592][T15582] usb usb4-port1: unable to enumerate USB device [ 1077.695745][T21164] tipc: Resetting bearer [ 1077.695912][ T4482] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.770690][T21150] tipc: Resetting bearer [ 1078.264883][T21150] tipc: Disabling bearer [ 1080.883809][ T4482] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.914423][ T4482] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.914473][ T4482] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.026858][T21215] tipc: Enabled bearer , priority 15 [ 1082.657400][T15582] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1084.171386][T15582] usb 8-1: device descriptor read/64, error -71 [ 1084.209169][T21236] tipc: Enabled bearer , priority 0 [ 1084.227085][T21236] syzkaller0: entered promiscuous mode [ 1084.227110][T21236] syzkaller0: entered allmulticast mode [ 1084.413314][T15582] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1084.435722][T21244] tipc: Resetting bearer [ 1084.469843][ T38] audit: type=1326 audit(1768413213.811:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21245 comm="syz.5.5291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff92b59f749 code=0x0 [ 1084.507081][T21235] tipc: Resetting bearer [ 1084.563336][T15582] usb 8-1: device descriptor read/64, error -71 [ 1084.664317][T21235] tipc: Disabling bearer [ 1084.680754][T15582] usb usb8-port1: attempt power cycle [ 1085.043297][T15582] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1085.064263][T15582] usb 8-1: device descriptor read/8, error -71 [ 1085.608349][T21255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1085.612621][T21255] block device autoloading is deprecated and will be removed. [ 1086.523553][ T7313] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1087.327961][ T7313] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1087.327993][ T7313] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.328016][ T7313] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1087.328071][ T7313] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.328101][ T7313] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.332680][ T7313] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1087.332711][ T7313] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1087.332735][ T7313] usb 7-1: Product: syz [ 1087.332761][ T7313] usb 7-1: Manufacturer: syz [ 1087.418990][ T7313] cdc_wdm 7-1:1.0: skipping garbage [ 1087.419012][ T7313] cdc_wdm 7-1:1.0: skipping garbage [ 1087.471413][ T7313] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1087.471435][ T7313] cdc_wdm 7-1:1.0: Unknown control protocol [ 1087.614437][T21325] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1088.199763][T21351] syzkaller0: entered promiscuous mode [ 1088.199793][T21351] syzkaller0: entered allmulticast mode [ 1089.321181][T15582] usb 7-1: USB disconnect, device number 10 [ 1090.677507][ T61] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1091.293299][ T7313] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1091.946052][ T7313] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1091.946086][ T7313] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.946109][ T7313] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1091.946164][ T7313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.946195][ T7313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.949332][ T7313] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1091.949362][ T7313] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1091.949386][ T7313] usb 6-1: Product: syz [ 1091.949403][ T7313] usb 6-1: Manufacturer: syz [ 1092.059868][ T7313] cdc_wdm 6-1:1.0: skipping garbage [ 1092.059890][ T7313] cdc_wdm 6-1:1.0: skipping garbage [ 1092.077948][ T7313] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1092.077970][ T7313] cdc_wdm 6-1:1.0: Unknown control protocol [ 1093.903394][T15582] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1094.033280][T15582] usb 3-1: device descriptor read/64, error -71 [ 1094.293326][T15582] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1094.433236][T15582] usb 3-1: device descriptor read/64, error -71 [ 1094.544069][T15582] usb usb3-port1: attempt power cycle [ 1094.870806][T15603] usb 6-1: USB disconnect, device number 8 [ 1094.904305][T15582] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1094.924316][T15582] usb 3-1: device descriptor read/8, error -71 [ 1095.163243][T15582] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1095.184734][T15582] usb 3-1: device descriptor read/8, error -71 [ 1095.293858][T15582] usb usb3-port1: unable to enumerate USB device [ 1097.988809][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5372'. [ 1097.988836][T21459] nbd: must specify a device to reconfigure [ 1098.530257][T21474] syzkaller0: entered promiscuous mode [ 1098.530286][T21474] syzkaller0: entered allmulticast mode [ 1101.856378][T21492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5385'. [ 1101.856403][T21492] nbd: must specify a device to reconfigure [ 1103.907490][T19394] Bluetooth: hci0: Frame reassembly failed (-84) [ 1103.907586][T19394] Bluetooth: hci0: Frame reassembly failed (-84) [ 1103.980789][T19408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1103.994778][T19408] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1103.996244][T19408] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1103.997277][T19408] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1103.998509][T19408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1105.020498][T21511] chnl_net:caif_netlink_parms(): no params data found [ 1105.751337][T21511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.751549][T21511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.751835][T21511] bridge_slave_0: entered allmulticast mode [ 1105.759792][T21511] bridge_slave_0: entered promiscuous mode [ 1105.789703][T21511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.789834][T21511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.790034][T21511] bridge_slave_1: entered allmulticast mode [ 1105.805078][T21511] bridge_slave_1: entered promiscuous mode [ 1105.943400][ T5806] Bluetooth: hci0: command 0x1003 tx timeout [ 1105.948371][ T61] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1106.103281][ T5806] Bluetooth: hci6: command tx timeout [ 1106.190159][T21511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.217030][T21511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.484811][T21558] syzkaller0: entered promiscuous mode [ 1106.484842][T21558] syzkaller0: entered allmulticast mode [ 1106.607947][T21511] team0: Port device team_slave_0 added [ 1106.786236][T21562] loop9: detected capacity change from 0 to 7 [ 1106.790821][T21562] Dev loop9: unable to read RDB block 7 [ 1106.790871][T21562] loop9: unable to read partition table [ 1106.791098][T21562] loop9: partition table beyond EOD, truncated [ 1106.791118][T21562] loop_reread_partitions: partition scan of loop9 (þ被xü^>Ñà– ) failed (rc=-5) [ 1106.889503][T21511] team0: Port device team_slave_1 added [ 1107.302425][T21577] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5415'. [ 1108.808501][ T5806] Bluetooth: hci6: command tx timeout [ 1110.823298][ T5806] Bluetooth: hci6: command tx timeout [ 1110.873590][T21511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.873609][T21511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.873641][T21511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.877386][T21511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.877402][T21511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.877433][T21511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.199185][T21511] hsr_slave_0: entered promiscuous mode [ 1111.209591][T21511] hsr_slave_1: entered promiscuous mode [ 1111.210730][T21511] debugfs: 'hsr0' already exists in 'hsr' [ 1111.210758][T21511] Cannot create hsr debugfs directory [ 1112.243321][T21636] netlink: 'syz.6.5431': attribute type 12 has an invalid length. [ 1112.333558][T21638] usb usb8: usbfs: process 21638 (syz.7.5427) did not claim interface 0 before use [ 1112.387055][T21511] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1112.435457][T21511] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1112.468309][T21511] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1112.507872][T21511] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1112.808005][T21511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.849119][T21511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.867485][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.867708][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.902329][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.902571][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.903280][ T61] Bluetooth: hci6: command tx timeout [ 1113.000955][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5438'. [ 1114.746039][T21511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.208357][T21694] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1115.689476][T21511] veth0_vlan: entered promiscuous mode [ 1115.715731][T21511] veth1_vlan: entered promiscuous mode [ 1115.779394][T21511] veth0_macvtap: entered promiscuous mode [ 1115.795831][T21511] veth1_macvtap: entered promiscuous mode [ 1115.877851][T21511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.926796][T21511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.929953][T21701] netlink: 'syz.6.5450': attribute type 12 has an invalid length. [ 1115.970495][ T69] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.970808][ T69] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.970852][ T69] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.970893][ T69] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.528284][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.528308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.733416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.733439][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.203484][T21727] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5458'. [ 1118.203512][T21727] openvswitch: netlink: Flow key attr not present in new flow. [ 1118.380756][T21735] netlink: 'syz.7.5460': attribute type 12 has an invalid length. [ 1119.451590][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5472'. [ 1119.553233][ T7349] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1119.683257][ T7349] usb 9-1: device descriptor read/64, error -71 [ 1119.805018][T21764] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.5473'. [ 1119.829661][T21766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5474'. [ 1119.923249][ T7349] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1120.053414][ T7349] usb 9-1: device descriptor read/64, error -71 [ 1120.164070][ T7349] usb usb9-port1: attempt power cycle [ 1120.181206][T15599] IPVS: starting estimator thread 0... [ 1120.274057][T21780] netlink: 'syz.5.5479': attribute type 10 has an invalid length. [ 1120.280246][T21780] siw: device registration error -23 [ 1120.288279][T21779] IPVS: using max 9 ests per chain, 21600 per kthread [ 1120.333267][T21778] nbd14: detected capacity change from 0 to 127 [ 1120.340262][ T61] block nbd14: Receive control failed (result -32) [ 1120.380087][T21784] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5482'. [ 1120.470315][T21788] netlink: 'syz.5.5484': attribute type 1 has an invalid length. [ 1120.470337][T21788] netlink: 760 bytes leftover after parsing attributes in process `syz.5.5484'. [ 1120.544594][T21790] netlink: 'syz.7.5481': attribute type 12 has an invalid length. [ 1120.603268][ T7349] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1120.624442][ T7349] usb 9-1: device descriptor read/8, error -71 [ 1122.608093][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.608167][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.858004][ T7349] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1122.907093][ T7349] usb 9-1: device descriptor read/8, error -71 [ 1123.013594][ T7349] usb usb9-port1: unable to enumerate USB device [ 1123.555870][T21823] netlink: 'syz.7.5496': attribute type 1 has an invalid length. [ 1123.555959][T21823] netlink: 760 bytes leftover after parsing attributes in process `syz.7.5496'. [ 1125.972376][T21850] netlink: 'syz.2.5501': attribute type 12 has an invalid length. [ 1126.093270][T15583] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1126.383261][T15583] usb 9-1: Using ep0 maxpacket: 16 [ 1126.384161][T15583] usb 9-1: no configurations [ 1126.384174][T15583] usb 9-1: can't read configurations, error -22 [ 1126.524603][T15583] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1127.083270][T15583] usb 9-1: Using ep0 maxpacket: 16 [ 1127.087153][T15583] usb 9-1: no configurations [ 1127.087172][T15583] usb 9-1: can't read configurations, error -22 [ 1127.089040][T15583] usb usb9-port1: attempt power cycle [ 1129.097421][T15583] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1129.126012][T15583] usb 9-1: Using ep0 maxpacket: 16 [ 1129.127573][T15583] usb 9-1: no configurations [ 1129.127591][T15583] usb 9-1: can't read configurations, error -22 [ 1129.253377][T15583] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1129.273874][T15583] usb 9-1: Using ep0 maxpacket: 16 [ 1129.274642][T15583] usb 9-1: no configurations [ 1129.274660][T15583] usb 9-1: can't read configurations, error -22 [ 1129.275028][T15583] usb usb9-port1: unable to enumerate USB device [ 1132.267669][T21906] netlink: 'syz.2.5522': attribute type 12 has an invalid length. [ 1136.039198][T21935] tipc: Enabled bearer , priority 0 [ 1136.042723][T21935] tipc: Resetting bearer [ 1136.394077][T21934] tipc: Disabling bearer [ 1141.625767][T21965] binder: 21964:21965 ioctl c0306201 200000000080 returned -14 [ 1146.901473][T21993] block nbd5: NBD_DISCONNECT [ 1146.901506][T21993] block nbd5: Send disconnect failed -32 [ 1147.909756][T21997] binder: 21995:21997 ioctl c0306201 200000000080 returned -14 [ 1149.247599][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5559'. [ 1149.271266][T22013] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5558'. [ 1152.151869][T22033] binder: 22032:22033 ioctl c0306201 200000000080 returned -14 [ 1153.289354][T22047] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5572'. [ 1155.616465][T22079] ptrace attach of "./syz-executor exec"[21511] was attempted by " [ 1163.997205][T22178] ptrace attach of "./syz-executor exec"[21511] was attempted by " [ 1181.194578][T22279] ptrace attach of "./syz-executor exec"[18870] was attempted by " [ 1188.435330][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.435405][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1195.303561][T22366] ptrace attach of "./syz-executor exec"[18870] was attempted by " [ 1202.919417][T22418] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 1210.264471][T22461] tipc: Enabling of bearer rejected, failed to enable media [ 1210.362856][T22465] ptrace attach of "./syz-executor exec"[18870] was attempted by " [ 1212.162639][T22480] binder: 22478:22480 ioctl c0306201 200000000080 returned -14 [ 1214.736057][ T7349] IPVS: starting estimator thread 0... [ 1215.027221][T22501] IPVS: using max 7 ests per chain, 16800 per kthread [ 1216.239362][T22509] siw: device registration error -23 [ 1216.303561][T22500] nbd5: detected capacity change from 0 to 127 [ 1216.303851][T22503] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5719'. [ 1216.304179][T22503] block nbd0: reconnected socket [ 1216.304194][T22503] nbd: socks must be embedded in a SOCK_ITEM attr [ 1216.310532][ T61] block nbd5: Receive control failed (result -32) [ 1216.312609][ T5806] block nbd0: Receive control failed (result -32) [ 1216.462334][T15599] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1216.552654][T22521] trusted_key: syz.8.5723 sent an empty control message without MSG_MORE. [ 1218.291193][T15599] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1218.291233][T15599] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1218.291275][T15599] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1218.291301][T15599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.555751][T15599] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1218.558023][T15599] usb 6-1: invalid MIDI out EP 0 [ 1218.599411][T22532] binder: 22531:22532 ioctl c0306201 200000000080 returned -14 [ 1220.334399][T15599] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1220.338433][T15599] usb 6-1: USB disconnect, device number 9 [ 1221.548863][T22551] nbd: nbd7 already in use [ 1223.350574][T15599] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1223.635459][T15599] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.635498][T15599] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.635525][T15599] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1223.635573][T15599] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1223.635600][T15599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.641020][T15599] usb 6-1: config 0 descriptor?? [ 1224.817536][T15599] usbhid 6-1:0.0: can't add hid device: -71 [ 1224.820417][T15599] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1224.852475][T15599] usb 6-1: USB disconnect, device number 10 [ 1226.453268][ T7318] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1226.537119][ T38] audit: type=1326 audit(1768413355.871:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0debcff749 code=0x7ffc0000 [ 1226.541639][ T38] audit: type=1326 audit(1768413355.871:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0debcff749 code=0x7ffc0000 [ 1226.616813][ T7318] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1226.616839][ T7318] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1226.616866][ T7318] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1226.616884][ T7318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.704777][ T7318] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1226.722058][ T7318] usb 8-1: invalid MIDI out EP 0 [ 1227.023393][T22598] binder: 22596:22598 ioctl c0306201 200000000080 returned -14 [ 1227.051912][ T7318] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1227.077425][ T7318] usb 8-1: USB disconnect, device number 14 [ 1228.773015][T22625] nbd: nbd8 already in use [ 1228.778177][T22625] block nbd8: NBD_DISCONNECT [ 1228.778197][T22625] block nbd8: Send disconnect failed -32 [ 1228.778212][T22625] block nbd8: shutting down sockets [ 1230.746265][ T61] Bluetooth: hci6: command 0x0406 tx timeout [ 1230.907428][T22634] binder: 22633:22634 ioctl c0306201 200000000080 returned -14 [ 1232.178265][T22651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5765'. [ 1232.180272][T22651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5765'. [ 1234.055667][ T7349] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1234.215819][ T7349] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1234.215858][ T7349] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1234.215899][ T7349] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1234.215926][ T7349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.306933][ T7349] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1235.311517][ T7349] usb 7-1: invalid MIDI out EP 0 [ 1235.470574][ T7349] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1236.313577][ T7318] usb 7-1: USB disconnect, device number 11 [ 1237.853667][ T38] audit: type=1326 audit(1768413367.181:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22674 comm="syz.2.5775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9514a7f749 code=0x0 [ 1244.526533][T22670] syz.6.5773 (22670) used greatest stack depth: 16280 bytes left [ 1244.565634][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5780'. [ 1244.572673][T22697] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5780'. [ 1249.383008][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.383228][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.583635][T22733] ptrace attach of "./syz-executor exec"[21511] was attempted by " [ 1252.145123][T22740] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1252.483554][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5792'. [ 1258.036920][T22767] syzkaller0: entered promiscuous mode [ 1258.036949][T22767] syzkaller0: entered allmulticast mode [ 1264.946393][ T38] audit: type=1326 audit(1768413394.281:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22798 comm="syz.8.5810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0debcff749 code=0x0 [ 1270.973499][T22861] syzkaller0: entered promiscuous mode [ 1270.973527][T22861] syzkaller0: entered allmulticast mode [ 1274.085737][ T38] audit: type=1326 audit(1768413403.421:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22884 comm="syz.6.5833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bbe6af749 code=0x0 [ 1278.448864][T22924] nbd: nbd7 already in use [ 1278.451985][T22924] block nbd7: NBD_DISCONNECT [ 1278.452012][T22924] block nbd7: Send disconnect failed -32 [ 1278.452035][T22924] block nbd7: shutting down sockets [ 1279.536729][T22944] fuse: Bad value for 'fd' [ 1285.471617][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5862'. [ 1290.487825][T23015] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5873'. [ 1295.865640][T23030] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1295.865694][T23030] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1295.865733][T23030] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1299.848891][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1300.565032][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1300.851917][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1300.865600][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1300.867576][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1301.699842][T23089] Bluetooth: MGMT ver 1.23 [ 1302.819210][T23062] chnl_net:caif_netlink_parms(): no params data found [ 1303.075783][ T61] Bluetooth: hci0: command tx timeout [ 1306.028005][ T61] Bluetooth: hci0: command tx timeout [ 1306.226447][T23120] netlink: 216 bytes leftover after parsing attributes in process `syz.5.5900'. [ 1306.644849][T23124] syzkaller0: entered promiscuous mode [ 1306.644879][T23124] syzkaller0: entered allmulticast mode [ 1306.785813][T23062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.786150][T23062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.786392][T23062] bridge_slave_0: entered allmulticast mode [ 1306.788742][T23062] bridge_slave_0: entered promiscuous mode [ 1306.844936][T23062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.845098][T23062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.845307][T23062] bridge_slave_1: entered allmulticast mode [ 1306.849921][T23062] bridge_slave_1: entered promiscuous mode [ 1308.727181][ T61] Bluetooth: hci0: command tx timeout [ 1309.843915][T23062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.798531][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.799081][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.802070][ T61] Bluetooth: hci0: command tx timeout [ 1310.836873][T23062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.813943][T23062] team0: Port device team_slave_0 added [ 1314.816670][T23062] team0: Port device team_slave_1 added [ 1315.078783][T23062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.078797][T23062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.078821][T23062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.082780][T23185] syzkaller0: entered promiscuous mode [ 1315.082798][T23185] syzkaller0: entered allmulticast mode [ 1315.146354][T23062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.146371][T23062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.146402][T23062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.550142][T23062] hsr_slave_0: entered promiscuous mode [ 1316.551612][T23062] hsr_slave_1: entered promiscuous mode [ 1316.552668][T23062] debugfs: 'hsr0' already exists in 'hsr' [ 1316.552694][T23062] Cannot create hsr debugfs directory [ 1317.363327][ T7349] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1317.527286][ T7349] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.527338][ T7349] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1317.527377][ T7349] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1317.527399][ T7349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.602990][ T7349] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1318.667470][ T7349] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1318.890915][ T7349] usb 6-1: USB disconnect, device number 11 [ 1319.598452][ T38] audit: type=1326 audit(1768413448.881:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23222 comm="syz.7.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a237f749 code=0x7ffc0000 [ 1319.598797][ T38] audit: type=1326 audit(1768413448.881:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23222 comm="syz.7.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a237f749 code=0x7ffc0000 [ 1319.599100][ T38] audit: type=1326 audit(1768413448.891:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23222 comm="syz.7.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f48a237f749 code=0x7ffc0000 [ 1319.599519][ T38] audit: type=1326 audit(1768413448.901:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23222 comm="syz.7.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a237f749 code=0x7ffc0000 [ 1319.599826][ T38] audit: type=1326 audit(1768413448.901:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23222 comm="syz.7.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a237f749 code=0x7ffc0000 [ 1319.600100][ T38] audit: type=1326 audit(1768413448.911:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23222 comm="syz.7.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48a237e1ff code=0x7ffc0000 [ 1319.600503][ T38] audit: type=1326 audit(1768413448.911:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23222 comm="syz.7.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a237f749 code=0x7ffc0000 [ 1319.600788][ T38] audit: type=1326 audit(1768413448.921:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23222 comm="syz.7.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a237f749 code=0x7ffc0000 [ 1323.399131][ T38] audit: type=1326 audit(1768413452.731:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23249 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0debcff749 code=0x7ffc0000 [ 1323.399196][ T38] audit: type=1326 audit(1768413452.731:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23249 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0debcff749 code=0x7ffc0000 [ 1327.123154][T15603] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1327.277358][T15603] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.277418][T15603] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1327.277466][T15603] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1327.277493][T15603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.405725][T23062] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1328.308459][T15603] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1329.197789][T15603] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1329.229546][T15603] usb 7-1: USB disconnect, device number 12 [ 1329.311454][T23062] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1329.350279][T23062] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1329.790670][T23296] ptrace attach of "./syz-executor exec"[18395] was attempted by " [ 1329.797628][T23296] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5944'. [ 1330.013805][T23062] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1330.556142][T23307] 9pnet_virtio: no channels available for device syz [ 1334.511608][T23062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.442941][T23062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.478782][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.493199][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.527221][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.527363][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.621531][T23062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1336.998277][T23347] syzkaller0: entered promiscuous mode [ 1336.998305][T23347] syzkaller0: entered allmulticast mode [ 1337.335698][T23350] tipc: Enabled bearer , priority 0 [ 1337.363541][T23346] tipc: Resetting bearer [ 1337.496938][T23346] tipc: Disabling bearer [ 1339.922302][T23062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.104970][T23062] veth0_vlan: entered promiscuous mode [ 1340.148374][T23062] veth1_vlan: entered promiscuous mode [ 1340.260718][T23062] veth0_macvtap: entered promiscuous mode [ 1340.291149][T23062] veth1_macvtap: entered promiscuous mode [ 1340.367350][T23062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.432076][T23062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.483905][T19394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.484161][T19394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.484205][T19394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.484247][T19394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.946484][T23419] syzkaller0: entered promiscuous mode [ 1344.946505][T23419] syzkaller0: entered allmulticast mode [ 1344.971121][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.971143][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.208880][T23424] tipc: Enabled bearer , priority 0 [ 1345.602294][T23418] tipc: Resetting bearer [ 1345.989826][ T61] block nbd7: Receive control failed (result -32) [ 1346.015251][T23426] nbd7: detected capacity change from 0 to 63 [ 1346.076733][T23434] block nbd7: NBD_DISCONNECT [ 1346.076798][T23434] block nbd7: Send disconnect failed -32 [ 1346.078076][T23434] block nbd7: shutting down sockets [ 1346.151608][T23418] tipc: Disabling bearer [ 1346.183886][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 1346.184217][ T38] audit: type=1326 audit(1768413475.511:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23427 comm="syz.8.5977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0debcff749 code=0x0 [ 1346.937750][ T4482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.938208][ T4482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.391407][T23480] syzkaller0: entered promiscuous mode [ 1357.391433][T23480] syzkaller0: entered allmulticast mode [ 1357.652328][T23487] tipc: Enabled bearer , priority 0 [ 1357.715984][T23479] tipc: Resetting bearer [ 1357.876049][T23479] tipc: Disabling bearer [ 1364.393367][T23520] nbd7: detected capacity change from 0 to 127 [ 1364.393642][T23522] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6002'. [ 1364.393838][T23522] block nbd0: reconnected socket [ 1364.393852][T23522] nbd: socks must be embedded in a SOCK_ITEM attr [ 1364.397233][T23522] netlink: 'syz.5.6002': attribute type 10 has an invalid length. [ 1364.397255][T23522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6002'. [ 1364.397274][T23522] openvswitch: netlink: Flow actions attr not present in new flow. [ 1364.459455][T23522] siw: device registration error -23 [ 1364.482624][ T61] block nbd7: Receive control failed (result -32) [ 1364.486965][ T5806] block nbd0: Receive control failed (result -32) [ 1366.018664][T23536] 9pnet_virtio: no channels available for device syz [ 1368.480236][ T7317] IPVS: starting estimator thread 0... [ 1368.723289][ T7317] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1368.921821][T23556] IPVS: using max 7 ests per chain, 16800 per kthread [ 1368.951368][T23555] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6013'. [ 1368.952741][T23555] block nbd0: reconnected socket [ 1368.952757][T23555] nbd: socks must be embedded in a SOCK_ITEM attr [ 1369.035512][ T7317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.035540][ T7317] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1369.035576][ T7317] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1369.035598][ T7317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.098994][T23557] netlink: 'syz.7.6013': attribute type 10 has an invalid length. [ 1369.099054][T23557] openvswitch: netlink: Flow actions attr not present in new flow. [ 1369.177491][T23555] siw: device registration error -23 [ 1369.184035][ T5806] block nbd0: Receive control failed (result -32) [ 1369.275327][ T7317] usb 3-1: config 0 descriptor?? [ 1371.029261][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1371.069652][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1371.089094][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1371.106311][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1371.123645][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1371.782473][ T38] audit: type=1326 audit(1768413501.091:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.8.6015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0debcff749 code=0x0 [ 1371.882409][ T7317] usb 3-1: USB disconnect, device number 18 [ 1371.991795][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.991957][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.783718][ T61] Bluetooth: hci1: command tx timeout [ 1374.574627][T23583] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6018'. [ 1376.224790][ T61] Bluetooth: hci1: command tx timeout [ 1376.592405][T23611] netlink: 'syz.6.6023': attribute type 10 has an invalid length. [ 1376.592431][T23611] openvswitch: netlink: Flow actions attr not present in new flow. [ 1376.614633][T23611] siw: device registration error -23 [ 1376.637532][T23565] chnl_net:caif_netlink_parms(): no params data found [ 1378.017891][T23604] nbd8: detected capacity change from 0 to 127 [ 1378.018198][T23609] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6023'. [ 1378.020988][T23609] block nbd0: reconnected socket [ 1378.021003][T23609] nbd: socks must be embedded in a SOCK_ITEM attr [ 1379.115330][T23565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.115713][T23565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.115943][T23565] bridge_slave_0: entered allmulticast mode [ 1379.118925][T23565] bridge_slave_0: entered promiscuous mode [ 1379.131554][T23565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.131741][T23565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.131928][T23565] bridge_slave_1: entered allmulticast mode [ 1379.134261][T23565] bridge_slave_1: entered promiscuous mode [ 1380.870064][ T61] block nbd8: Receive control failed (result -32) [ 1380.871002][ T5806] block nbd0: Receive control failed (result -32) [ 1381.000273][ T5806] Bluetooth: hci1: command tx timeout [ 1382.349804][T23632] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6030'. [ 1382.544368][T23636] 9pnet_virtio: no channels available for device syz [ 1383.073407][ T5806] Bluetooth: hci1: command tx timeout [ 1383.577855][T23565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.581672][T23565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.422368][T23565] team0: Port device team_slave_0 added [ 1391.431981][T23565] team0: Port device team_slave_1 added [ 1391.679413][T23667] netlink: 'syz.6.6037': attribute type 10 has an invalid length. [ 1391.679440][T23667] openvswitch: netlink: Flow actions attr not present in new flow. [ 1391.681629][T23667] siw: device registration error -23 [ 1392.790623][ T5806] block nbd15: Receive control failed (result -32) [ 1392.807859][T23660] nbd15: detected capacity change from 0 to 127 [ 1392.828984][T23665] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6037'. [ 1393.000252][T23565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.000266][T23565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.000288][T23565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.002018][T23565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.002030][T23565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.002051][T23565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.172827][T23677] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6042'. [ 1393.529734][T23565] hsr_slave_0: entered promiscuous mode [ 1393.531348][T23565] hsr_slave_1: entered promiscuous mode [ 1393.532529][T23565] debugfs: 'hsr0' already exists in 'hsr' [ 1393.532554][T23565] Cannot create hsr debugfs directory [ 1395.554298][T23690] 9pnet_virtio: no channels available for device syz [ 1398.139154][ T38] audit: type=1326 audit(1768413527.471:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23697 comm="syz.6.6045" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bbe6af749 code=0x0 [ 1400.741849][T23565] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1401.835380][T23565] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1402.433885][T23565] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1402.721412][T23722] ptrace attach of "./syz-executor exec"[18870] was attempted by " [ 1402.734276][T23722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6052'. [ 1403.533893][T23565] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1404.069920][T23565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.134301][T23565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.152854][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.156880][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.184878][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.185052][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.723685][T23399] IPVS: starting estimator thread 0... [ 1404.823481][T23747] IPVS: using max 8 ests per chain, 19200 per kthread [ 1405.097244][T23755] netlink: 'syz.8.6050': attribute type 10 has an invalid length. [ 1405.126420][T23755] siw: device registration error -23 [ 1405.890497][ T38] audit: type=1326 audit(1768413535.221:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23748 comm="syz.2.6057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff273a2f749 code=0x0 [ 1406.974029][T23761] ptrace attach of "./syz-executor exec"[18395] was attempted by " [ 1408.336806][T23750] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6050'. [ 1410.307037][T23565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1411.201568][ T38] audit: type=1326 audit(1768413540.481:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23770 comm="syz.6.6061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bbe6af749 code=0x0 [ 1412.697902][T23787] netlink: 'syz.8.6064': attribute type 12 has an invalid length. [ 1415.765711][T23565] veth0_vlan: entered promiscuous mode [ 1415.792149][T23565] veth1_vlan: entered promiscuous mode [ 1415.929892][T23565] veth0_macvtap: entered promiscuous mode [ 1415.967676][T23565] veth1_macvtap: entered promiscuous mode [ 1417.540929][T23565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.538706][T23565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.534532][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.553793][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.555813][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.555860][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.755497][T23813] netlink: 'syz.8.6069': attribute type 10 has an invalid length. [ 1419.757636][T23813] siw: device registration error -23 [ 1420.229592][T23811] nbd16: detected capacity change from 0 to 127 [ 1420.229878][T23812] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6069'. [ 1420.230216][T23812] block nbd0: reconnected socket [ 1420.230232][T23812] nbd: socks must be embedded in a SOCK_ITEM attr [ 1420.249725][ T5806] block nbd16: Receive control failed (result -32) [ 1420.271256][ T61] block nbd0: Receive control failed (result -32) [ 1422.336428][T19545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.336460][T19545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.801180][ T38] audit: type=1326 audit(1768413552.131:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23833 comm="syz.8.6076" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0debcff749 code=0x0 [ 1425.223148][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 1426.257623][ T5987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.257647][ T5987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.588691][T23846] netlink: 'syz.6.6077': attribute type 12 has an invalid length. [ 1434.628587][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.628679][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.258542][T23915] netlink: 'syz.2.6092': attribute type 12 has an invalid length. [ 1441.485118][T23925] ptrace attach of "./syz-executor exec"[18395] was attempted by " [ 1441.487491][T23925] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6097'. [ 1442.672579][ T38] audit: type=1326 audit(1768413572.001:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.9.6087" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8787bf749 code=0x0 [ 1446.813369][T23950] netlink: 'syz.6.6102': attribute type 10 has an invalid length. [ 1446.853616][T23950] siw: device registration error -23 [ 1448.275229][T23948] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6102'. [ 1454.965796][T24005] netlink: 'syz.6.6113': attribute type 12 has an invalid length. [ 1455.494138][ T38] audit: type=1326 audit(1768413584.831:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24004 comm="syz.9.6116" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8787bf749 code=0x0 [ 1461.093233][T23577] IPVS: starting estimator thread 0... [ 1461.183457][T24037] IPVS: using max 10 ests per chain, 24000 per kthread [ 1461.245649][T24036] nbd17: detected capacity change from 0 to 127 [ 1461.256100][T24040] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6118'. [ 1461.263129][T24040] block nbd0: reconnected socket [ 1461.263146][T24040] nbd: socks must be embedded in a SOCK_ITEM attr [ 1461.265821][T24036] netlink: 'syz.2.6118': attribute type 10 has an invalid length. [ 1461.337416][T24036] siw: device registration error -23 [ 1461.340386][ T5806] block nbd17: Receive control failed (result -32) [ 1461.362470][ T61] block nbd0: Receive control failed (result -32) [ 1463.814228][T24070] netlink: 'syz.7.6131': attribute type 12 has an invalid length. [ 1465.684561][T24086] netlink: 'syz.8.6136': attribute type 10 has an invalid length. [ 1465.730247][T24086] siw: device registration error -23 [ 1465.869561][T24083] nbd18: detected capacity change from 0 to 127 [ 1465.869782][T24085] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6136'. [ 1465.869887][T24085] block nbd0: reconnected socket [ 1465.869901][T24085] nbd: socks must be embedded in a SOCK_ITEM attr [ 1465.896218][ T61] block nbd18: Receive control failed (result -32) [ 1465.907647][ T5806] block nbd0: Receive control failed (result -32) [ 1468.888063][T24119] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6145'. [ 1473.251319][T24137] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6148'. [ 1474.245821][T24140] siw: device registration error -23 [ 1474.407343][T24145] netlink: 'syz.6.6150': attribute type 12 has an invalid length. [ 1474.463289][T24138] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1478.832542][T24168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6157'. [ 1482.295293][ T38] audit: type=1326 audit(1768413611.631:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24185 comm="syz.2.6162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff273a2f749 code=0x0 [ 1483.015265][T24195] netlink: 'syz.9.6163': attribute type 12 has an invalid length. [ 1493.783558][T24222] nbd19: detected capacity change from 0 to 63 [ 1493.783866][T24228] block nbd9: NBD_DISCONNECT [ 1493.783891][T24228] block nbd9: Send disconnect failed -32 [ 1493.783912][T24228] block nbd9: shutting down sockets [ 1493.984791][ T5806] block nbd19: Receive control failed (result -32) [ 1494.191889][T23398] IPVS: starting estimator thread 0... [ 1494.283220][T24235] IPVS: using max 7 ests per chain, 16800 per kthread [ 1494.425155][T24234] nbd9: detected capacity change from 0 to 127 [ 1494.425356][T24236] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6174'. [ 1494.425478][T24236] block nbd0: reconnected socket [ 1494.425492][T24236] nbd: socks must be embedded in a SOCK_ITEM attr [ 1494.427809][T24234] netlink: 'syz.9.6174': attribute type 10 has an invalid length. [ 1494.429286][T24234] siw: device registration error -23 [ 1494.450225][ T5806] block nbd9: Receive control failed (result -32) [ 1494.488283][ T61] block nbd0: Receive control failed (result -32) [ 1494.829446][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.829508][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.340192][T24248] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6172'. [ 1496.719059][T24255] netlink: 'syz.2.6177': attribute type 12 has an invalid length. [ 1496.903295][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 1505.576225][T24292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6189'. [ 1513.862093][T24333] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6201'. [ 1514.928762][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1514.952799][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1514.964655][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1514.966027][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1514.967020][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1517.363078][ T5806] Bluetooth: hci4: command tx timeout [ 1517.555465][T24341] chnl_net:caif_netlink_parms(): no params data found [ 1519.383119][ T5806] Bluetooth: hci4: command tx timeout [ 1519.403239][T24376] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 1519.403267][T24376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1519.455932][T24376] vhci_hcd vhci_hcd.0: Device attached [ 1519.468686][T24379] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(14) [ 1519.468714][T24379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1519.469801][T24379] vhci_hcd vhci_hcd.0: Device attached [ 1519.513928][T24376] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(13) [ 1519.513956][T24376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1519.514111][T24376] vhci_hcd vhci_hcd.0: Device attached [ 1519.515653][T24376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1519.555480][T24376] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(19) [ 1519.555509][T24376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1519.555603][T24376] vhci_hcd vhci_hcd.0: Device attached [ 1519.559855][T24376] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(21) [ 1519.559881][T24376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1519.568204][T24376] vhci_hcd vhci_hcd.0: Device attached [ 1519.668040][T24376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1519.687637][T24376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1519.713139][T24379] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(26) [ 1519.713166][T24379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1519.714790][T24379] vhci_hcd vhci_hcd.0: Device attached [ 1519.762434][T24388] vhci_hcd: connection closed [ 1519.769414][T24386] vhci_hcd: connection closed [ 1519.771395][T24384] vhci_hcd: connection closed [ 1519.786285][T24382] vhci_hcd: connection closed [ 1519.786592][T24380] vhci_hcd: connection closed [ 1519.797584][T24377] vhci_hcd: connection closed [ 1519.804726][ T7349] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1519.834735][T24341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.834913][T24341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.835127][T24341] bridge_slave_0: entered allmulticast mode [ 1519.837454][T24341] bridge_slave_0: entered promiscuous mode [ 1519.839413][T24378] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1519.859511][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1519.884115][T24341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.884335][T24341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.884559][T24341] bridge_slave_1: entered allmulticast mode [ 1519.887413][T24341] bridge_slave_1: entered promiscuous mode [ 1519.893880][ T68] vhci_hcd vhci_hcd.7: release socket [ 1519.895308][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1519.901860][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1519.901924][ T68] vhci_hcd vhci_hcd.7: release socket [ 1519.902087][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1519.902290][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1519.902324][ T68] vhci_hcd vhci_hcd.7: release socket [ 1519.902480][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1519.903590][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1519.903633][ T68] vhci_hcd vhci_hcd.7: release socket [ 1519.903801][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1519.904148][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1519.904190][ T68] vhci_hcd vhci_hcd.7: release socket [ 1519.904296][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1519.904701][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1519.904730][ T68] vhci_hcd vhci_hcd.7: release socket [ 1519.904824][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1520.248783][T24341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.283692][T24341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.333968][ T5806] Bluetooth: hci4: command tx timeout [ 1522.485196][T24341] team0: Port device team_slave_0 added [ 1522.506820][T24341] team0: Port device team_slave_1 added [ 1522.951755][T24402] 9pnet_virtio: no channels available for device syz [ 1523.025068][T24402] overlay: Unknown parameter '/' [ 1523.302892][T24403] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1524.013736][T24403] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1524.016216][T24403] overlayfs: failed to look up (tracing) for ino (-66) [ 1525.533136][ T61] Bluetooth: hci4: command tx timeout [ 1525.550492][ T7349] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1525.863884][T24341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.863904][T24341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.863935][T24341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.866668][T24341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.866683][T24341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.866714][T24341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.035980][ T38] audit: type=1326 audit(1768413655.341:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24407 comm="syz.6.6217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bbe6af749 code=0x0 [ 1526.515224][T24341] hsr_slave_0: entered promiscuous mode [ 1526.556017][T24341] hsr_slave_1: entered promiscuous mode [ 1526.562018][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1526.563242][T24341] debugfs: 'hsr0' already exists in 'hsr' [ 1526.563267][T24341] Cannot create hsr debugfs directory [ 1526.623520][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1526.640962][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1526.680097][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1526.682267][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1527.122761][T15590] usb usb48-port1: attempt power cycle [ 1528.684298][T15590] usb usb48-port1: unable to enumerate USB device [ 1528.743337][ T5806] Bluetooth: hci1: command tx timeout [ 1530.820837][T24435] 9pnet_virtio: no channels available for device syz [ 1530.875584][T24435] overlay: Unknown parameter '/' [ 1531.055347][T24436] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1531.543235][T24436] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1531.545630][T24436] overlayfs: failed to look up (tracing) for ino (-66) [ 1532.783053][ T5806] Bluetooth: hci1: command tx timeout [ 1534.864651][T24341] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1535.513794][ T5806] Bluetooth: hci1: command tx timeout [ 1536.024928][T24341] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1537.209705][T24341] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1537.228435][T24451] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1537.318710][T24414] chnl_net:caif_netlink_parms(): no params data found [ 1537.422788][T24341] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1537.543227][ T5806] Bluetooth: hci1: command tx timeout [ 1540.200538][T24476] netlink: 'syz.6.6230': attribute type 10 has an invalid length. [ 1540.221371][T24476] siw: device registration error -23 [ 1540.363185][T24474] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6230'. [ 1540.467058][T24414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.467221][T24414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.467405][T24414] bridge_slave_0: entered allmulticast mode [ 1540.474156][T24414] bridge_slave_0: entered promiscuous mode [ 1540.915434][T24414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.915581][T24414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.915909][T24414] bridge_slave_1: entered allmulticast mode [ 1540.918653][T24414] bridge_slave_1: entered promiscuous mode [ 1541.464234][T24485] ptrace attach of "./syz-executor exec"[18870] was attempted by " [ 1542.592159][T24414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.267370][T24414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.603777][T24505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1544.128610][T24414] team0: Port device team_slave_0 added [ 1544.142388][T24514] netlink: 'syz.6.6241': attribute type 10 has an invalid length. [ 1544.171545][T24514] siw: device registration error -23 [ 1544.172489][T24414] team0: Port device team_slave_1 added [ 1544.202181][T24512] nbd20: detected capacity change from 0 to 127 [ 1544.202688][T24513] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6241'. [ 1544.202815][T24513] block nbd0: reconnected socket [ 1544.202829][T24513] nbd: socks must be embedded in a SOCK_ITEM attr [ 1544.237017][ T5806] block nbd20: Receive control failed (result -32) [ 1544.254557][ T61] block nbd0: Receive control failed (result -32) [ 1544.287255][ T38] audit: type=1326 audit(1768413673.621:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24504 comm="syz.2.6240" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff273a2f749 code=0x0 [ 1544.396164][T24518] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 1544.396192][T24518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1544.398629][T24518] vhci_hcd vhci_hcd.0: Device attached [ 1544.401859][T24518] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(13) [ 1544.401885][T24518] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1544.402013][T24518] vhci_hcd vhci_hcd.0: Device attached [ 1544.404695][T24518] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(15) [ 1544.404720][T24518] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1544.404858][T24518] vhci_hcd vhci_hcd.0: Device attached [ 1544.406387][T24518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1544.409873][T24518] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(19) [ 1544.409899][T24518] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1544.410036][T24518] vhci_hcd vhci_hcd.0: Device attached [ 1544.412833][T24518] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(21) [ 1544.412859][T24518] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1544.413267][T24518] vhci_hcd vhci_hcd.0: Device attached [ 1544.414858][T24518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1544.417521][T24518] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(25) [ 1544.417547][T24518] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1544.417668][T24518] vhci_hcd vhci_hcd.0: Device attached [ 1544.419090][T24518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1544.428452][T24529] vhci_hcd: connection closed [ 1544.431056][T24217] vhci_hcd vhci_hcd.6: stop threads [ 1544.431082][T24217] vhci_hcd vhci_hcd.6: release socket [ 1544.431123][T24217] vhci_hcd vhci_hcd.6: disconnect device [ 1544.431246][T24527] vhci_hcd: connection closed [ 1544.432760][T24217] vhci_hcd vhci_hcd.6: stop threads [ 1544.432779][T24217] vhci_hcd vhci_hcd.6: release socket [ 1544.432819][T24217] vhci_hcd vhci_hcd.6: disconnect device [ 1544.434661][T24525] vhci_hcd: connection closed [ 1544.438112][T24217] vhci_hcd vhci_hcd.6: stop threads [ 1544.438132][T24217] vhci_hcd vhci_hcd.6: release socket [ 1544.438172][T24217] vhci_hcd vhci_hcd.6: disconnect device [ 1544.438234][T24523] vhci_hcd: connection closed [ 1544.438906][T24217] vhci_hcd vhci_hcd.6: stop threads [ 1544.438924][T24217] vhci_hcd vhci_hcd.6: release socket [ 1544.438963][T24217] vhci_hcd vhci_hcd.6: disconnect device [ 1544.734009][T24521] vhci_hcd: connection closed [ 1544.741916][T24519] vhci_hcd: connection closed [ 1544.744318][T24217] vhci_hcd vhci_hcd.6: stop threads [ 1544.744392][T24217] vhci_hcd vhci_hcd.6: release socket [ 1547.005622][T24341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1547.021176][T24217] vhci_hcd vhci_hcd.6: disconnect device [ 1547.718451][T24217] vhci_hcd vhci_hcd.6: stop threads [ 1547.718481][T24217] vhci_hcd vhci_hcd.6: release socket [ 1547.718556][T24217] vhci_hcd vhci_hcd.6: disconnect device [ 1549.564158][T24541] ptrace attach of "./syz-executor exec"[18870] was attempted by " [ 1549.994453][T24341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1550.236528][T24414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.236547][T24414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.236580][T24414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.239577][T24341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1550.561589][T24414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.561603][T24414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.561636][T24414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.590761][T24341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1553.875672][T24414] hsr_slave_0: entered promiscuous mode [ 1553.877253][T24414] hsr_slave_1: entered promiscuous mode [ 1553.878373][T24414] debugfs: 'hsr0' already exists in 'hsr' [ 1553.878400][T24414] Cannot create hsr debugfs directory [ 1556.653622][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.653701][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.881300][T24414] netdevsim netdevsim1 eth8 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1557.087370][T24414] netdevsim netdevsim1 eth7 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1560.407301][T24341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.506562][T24414] netdevsim netdevsim1 eth6 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1560.843766][T24341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.650356][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.663826][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.583792][T24414] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1563.637218][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.637360][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.297988][T24414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1565.331649][T24414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1565.407667][T24414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1565.460608][T24414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1565.728338][T24341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.919558][T24341] veth0_vlan: entered promiscuous mode [ 1565.949848][T24414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.982130][T24341] veth1_vlan: entered promiscuous mode [ 1566.066410][T24414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.092400][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.092620][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.129416][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1566.144353][ T2130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.144515][ T2130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.167590][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1566.171051][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1566.172290][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1566.197593][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1566.220889][T24341] veth0_macvtap: entered promiscuous mode [ 1566.256556][T24341] veth1_macvtap: entered promiscuous mode [ 1566.323283][T24341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1566.357597][T24341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.409948][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.440715][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.476442][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.501659][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.563066][ T61] Bluetooth: hci0: command tx timeout [ 1568.934339][T24645] 9pnet_virtio: no channels available for device syz [ 1569.027647][T24645] overlay: Unknown parameter '/' [ 1569.202398][T24646] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1569.643191][T24646] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1569.643273][T24646] overlayfs: failed to look up (tracing) for ino (-66) [ 1570.584648][ T61] Bluetooth: hci0: command tx timeout [ 1571.029041][ T2130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.029066][ T2130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.068140][T24414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1571.161416][ T2283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.161438][ T2283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.300773][T24414] veth0_vlan: entered promiscuous mode [ 1571.333335][T24414] veth1_vlan: entered promiscuous mode [ 1571.594413][T24624] chnl_net:caif_netlink_parms(): no params data found [ 1571.691063][T24414] veth0_macvtap: entered promiscuous mode [ 1571.771535][T24414] veth1_macvtap: entered promiscuous mode [ 1571.930149][T24414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1571.976175][T24414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.053949][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.887068][ T61] Bluetooth: hci0: command tx timeout [ 1573.892873][T24663] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 1573.937564][T24663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1573.937827][T24663] vhci_hcd vhci_hcd.0: Device attached [ 1573.974303][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.974599][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.974646][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.979660][T24671] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 1573.979686][T24671] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1573.979823][T24671] vhci_hcd vhci_hcd.0: Device attached [ 1573.987745][T24663] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(15) [ 1573.987810][T24663] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1573.988174][T24663] vhci_hcd vhci_hcd.0: Device attached [ 1573.990719][T24663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1574.241080][T24678] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1574.252081][T24671] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(19) [ 1574.252111][T24671] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1574.252254][T24671] vhci_hcd vhci_hcd.0: Device attached [ 1574.274728][T24678] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(26) [ 1574.274756][T24678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1574.274928][T24678] vhci_hcd vhci_hcd.0: Device attached [ 1574.276102][T24671] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1574.276311][T24663] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(24) [ 1574.276335][T24663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1574.276471][T24663] vhci_hcd vhci_hcd.0: Device attached [ 1574.564004][T24681] vhci_hcd: connection closed [ 1574.564343][T24683] vhci_hcd: connection closed [ 1574.567634][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1574.567659][ T68] vhci_hcd vhci_hcd.7: release socket [ 1574.571165][T24674] vhci_hcd: connection closed [ 1574.571697][T24664] vhci_hcd: connection closed [ 1574.598009][T24680] vhci_hcd: connection closed [ 1574.603125][T24676] vhci_hcd: connection closed [ 1574.613146][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1574.613479][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1574.613499][ T68] vhci_hcd vhci_hcd.7: release socket [ 1574.613569][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1574.615236][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1574.615263][ T68] vhci_hcd vhci_hcd.7: release socket [ 1574.615477][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1574.615786][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1574.615802][ T68] vhci_hcd vhci_hcd.7: release socket [ 1574.616004][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1574.616312][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1574.616328][ T68] vhci_hcd vhci_hcd.7: release socket [ 1574.616365][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1574.616660][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1574.616675][ T68] vhci_hcd vhci_hcd.7: release socket [ 1574.616876][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1574.920336][T23397] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1575.321274][T24624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.321517][T24624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.321791][T24624] bridge_slave_0: entered allmulticast mode [ 1575.346273][T24624] bridge_slave_0: entered promiscuous mode [ 1575.361875][T24624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.362005][T24624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.362251][T24624] bridge_slave_1: entered allmulticast mode [ 1575.363403][T23398] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1575.399814][T24624] bridge_slave_1: entered promiscuous mode [ 1575.565092][T23398] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.565128][T23398] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.565155][T23398] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1575.565210][T23398] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1575.565236][T23398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.571917][T23398] usb 7-1: config 0 descriptor?? [ 1575.974026][ T61] Bluetooth: hci0: command tx timeout [ 1576.134494][T24697] 9pnet_virtio: no channels available for device syz [ 1576.178759][T24697] overlay: Unknown parameter '/' [ 1576.350441][T24698] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1576.947309][T24698] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1576.947880][T24698] overlayfs: failed to look up (tracing) for ino (-66) [ 1578.802579][T23398] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1578.858090][T24624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.907464][T24624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.054139][ T7349] usb 7-1: USB disconnect, device number 13 [ 1579.285342][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.285365][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.354220][T24624] team0: Port device team_slave_0 added [ 1579.372648][T24624] team0: Port device team_slave_1 added [ 1579.675342][T24624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.675361][T24624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.675393][T24624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.691184][T24624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.691227][T24624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.691309][T24624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.713421][ T4482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.713489][ T4482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.687551][T24714] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 1581.687591][T24714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1581.687953][T24714] vhci_hcd vhci_hcd.0: Device attached [ 1581.716932][T24714] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(13) [ 1581.716961][T24714] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1581.721977][T24714] vhci_hcd vhci_hcd.0: Device attached [ 1581.726909][T24714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1581.727321][T24712] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 1581.727346][T24712] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1581.728824][T24712] vhci_hcd vhci_hcd.0: Device attached [ 1581.784467][T24712] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(16) [ 1581.784486][T24712] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1581.784587][T24712] vhci_hcd vhci_hcd.0: Device attached [ 1581.804853][T24712] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(21) [ 1581.804926][T24712] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1581.806142][T24712] vhci_hcd vhci_hcd.0: Device attached [ 1581.858082][T24712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1581.885882][T24712] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(25) [ 1581.885909][T24712] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1581.903766][T24712] vhci_hcd vhci_hcd.0: Device attached [ 1581.908430][T24712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1581.977271][T24720] vhci_hcd: connection closed [ 1581.977402][T24722] vhci_hcd: connection closed [ 1581.978571][T24718] vhci_hcd: connection closed [ 1581.981282][T24728] vhci_hcd: connection closed [ 1581.997581][ T4482] vhci_hcd vhci_hcd.6: stop threads [ 1581.997606][ T4482] vhci_hcd vhci_hcd.6: release socket [ 1581.997840][ T4482] vhci_hcd vhci_hcd.6: disconnect device [ 1581.997995][ T4482] vhci_hcd vhci_hcd.6: stop threads [ 1581.998012][ T4482] vhci_hcd vhci_hcd.6: release socket [ 1581.998894][ T4482] vhci_hcd vhci_hcd.6: disconnect device [ 1581.999075][ T4482] vhci_hcd vhci_hcd.6: stop threads [ 1581.999092][ T4482] vhci_hcd vhci_hcd.6: release socket [ 1581.999312][ T4482] vhci_hcd vhci_hcd.6: disconnect device [ 1581.999444][ T4482] vhci_hcd vhci_hcd.6: stop threads [ 1581.999459][ T4482] vhci_hcd vhci_hcd.6: release socket [ 1581.999675][ T4482] vhci_hcd vhci_hcd.6: disconnect device [ 1582.001201][T24726] vhci_hcd: connection closed [ 1582.002295][ T2130] vhci_hcd vhci_hcd.6: stop threads [ 1582.002314][ T2130] vhci_hcd vhci_hcd.6: release socket [ 1582.002513][T24724] vhci_hcd: connection closed [ 1582.002541][ T2130] vhci_hcd vhci_hcd.6: disconnect device [ 1582.002703][ T2130] vhci_hcd vhci_hcd.6: stop threads [ 1582.002720][ T2130] vhci_hcd vhci_hcd.6: release socket [ 1582.033047][ T7318] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1582.033243][ T7318] usb 45-1: enqueue for inactive port 0 [ 1582.090358][ T2130] vhci_hcd vhci_hcd.6: disconnect device [ 1582.143271][ T7318] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1582.492172][T24624] hsr_slave_0: entered promiscuous mode [ 1582.527014][T24624] hsr_slave_1: entered promiscuous mode [ 1582.528109][T24624] debugfs: 'hsr0' already exists in 'hsr' [ 1582.528133][T24624] Cannot create hsr debugfs directory [ 1586.243174][T24763] ================================================================== [ 1586.243192][T24763] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 [ 1586.243232][T24763] Read of size 1 at addr ffff88805c0a0200 by task syz.7.6289/24763 [ 1586.243253][T24763] [ 1586.243287][T24763] CPU: 0 UID: 0 PID: 24763 Comm: syz.7.6289 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1586.243320][T24763] Tainted: [L]=SOFTLOCKUP [ 1586.243329][T24763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1586.243348][T24763] Call Trace: [ 1586.243360][T24763] [ 1586.243369][T24763] dump_stack_lvl+0xe8/0x150 [ 1586.243404][T24763] print_report+0xca/0x240 [ 1586.243433][T24763] ? rt_spin_lock+0x88/0x3e0 [ 1586.243470][T24763] kasan_report+0x118/0x150 [ 1586.243508][T24763] ? rt_spin_lock+0x88/0x3e0 [ 1586.243544][T24763] ? __wake_up_common_lock+0x2f/0x1e0 [ 1586.243573][T24763] __kasan_check_byte+0x2a/0x40 [ 1586.243609][T24763] lock_acquire+0x84/0x340 [ 1586.243641][T24763] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1586.243672][T24763] ? reacquire_held_locks+0x104/0x190 [ 1586.243713][T24763] rt_spin_lock+0x88/0x3e0 [ 1586.243742][T24763] ? __wake_up_common_lock+0x2f/0x1e0 [ 1586.243774][T24763] ? __pfx_rt_spin_lock+0x10/0x10 [ 1586.243805][T24763] ? rt_spin_unlock+0x161/0x200 [ 1586.243838][T24763] ? __wake_up_common_lock+0x18a/0x1e0 [ 1586.243870][T24763] __wake_up_common_lock+0x2f/0x1e0 [ 1586.243899][T24763] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1586.243924][T24763] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1586.243947][T24763] snd_pcm_action+0x1f4/0x240 [ 1586.243981][T24763] loopback_trigger+0xb82/0x1b60 [ 1586.244007][T24763] ? rcu_is_watching+0x15/0xb0 [ 1586.244034][T24763] snd_pcm_do_start+0xb7/0x180 [ 1586.244058][T24763] snd_pcm_action+0xe7/0x240 [ 1586.244092][T24763] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 1586.244124][T24763] ? __pfx_interleaved_copy+0x10/0x10 [ 1586.244150][T24763] ? __pfx_default_write_copy+0x10/0x10 [ 1586.244179][T24763] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1586.244206][T24763] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1586.244230][T24763] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1586.244261][T24763] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1586.244295][T24763] ? snd_pcm_oss_write3+0x1a2/0x350 [ 1586.244335][T24763] snd_pcm_oss_write3+0x1bc/0x350 [ 1586.244374][T24763] snd_pcm_oss_sync1+0x345/0x760 [ 1586.244410][T24763] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1586.244437][T24763] ? __pfx_default_wake_function+0x10/0x10 [ 1586.244478][T24763] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1586.244503][T24763] ? __asan_memset+0x22/0x50 [ 1586.244530][T24763] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1586.244560][T24763] snd_pcm_oss_sync+0x6ef/0x9d0 [ 1586.244588][T24763] snd_pcm_oss_release+0x102/0x250 [ 1586.244611][T24763] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1586.244633][T24763] __fput+0x45b/0xa80 [ 1586.244666][T24763] task_work_run+0x1d4/0x260 [ 1586.244703][T24763] ? __pfx_task_work_run+0x10/0x10 [ 1586.244745][T24763] exit_to_user_mode_loop+0xef/0x4e0 [ 1586.244778][T24763] ? rcu_is_watching+0x15/0xb0 [ 1586.244801][T24763] do_syscall_64+0x2c1/0xf80 [ 1586.244824][T24763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.244847][T24763] ? trace_irq_disable+0x37/0x100 [ 1586.244872][T24763] ? clear_bhb_loop+0x60/0xb0 [ 1586.244899][T24763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.244922][T24763] RIP: 0033:0x7f48a237f749 [ 1586.244949][T24763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1586.244970][T24763] RSP: 002b:00007ffeeff45d78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1586.244994][T24763] RAX: 0000000000000000 RBX: 00007f48a25d7da0 RCX: 00007f48a237f749 [ 1586.245011][T24763] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1586.245026][T24763] RBP: 00007f48a25d7da0 R08: 0000000000007d90 R09: 00000006eff4606f [ 1586.245042][T24763] R10: 00007f48a25d7cb0 R11: 0000000000000246 R12: 0000000000183184 [ 1586.245058][T24763] R13: 00007ffeeff45e70 R14: ffffffffffffffff R15: 00007ffeeff45e90 [ 1586.245087][T24763] [ 1586.245095][T24763] [ 1586.245100][T24763] Allocated by task 24764: [ 1586.245111][T24763] kasan_save_track+0x3e/0x80 [ 1586.245141][T24763] __kasan_kmalloc+0x93/0xb0 [ 1586.245172][T24763] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 1586.245204][T24763] snd_pcm_attach_substream+0x5b7/0xb30 [ 1586.245229][T24763] snd_pcm_open_substream+0xb6/0x2410 [ 1586.245260][T24763] snd_pcm_oss_open+0xf2a/0x1bd0 [ 1586.245278][T24763] chrdev_open+0x4cf/0x5e0 [ 1586.245296][T24763] do_dentry_open+0x7d0/0x1270 [ 1586.245317][T24763] vfs_open+0x3b/0x350 [ 1586.245337][T24763] path_openat+0x342a/0x3df0 [ 1586.245366][T24763] do_filp_open+0x1fa/0x410 [ 1586.245393][T24763] do_sys_openat2+0x121/0x200 [ 1586.245416][T24763] __x64_sys_openat+0x138/0x170 [ 1586.245438][T24763] do_syscall_64+0xec/0xf80 [ 1586.245464][T24763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.245485][T24763] [ 1586.245490][T24763] Freed by task 24764: [ 1586.245500][T24763] kasan_save_track+0x3e/0x80 [ 1586.245529][T24763] kasan_save_free_info+0x46/0x50 [ 1586.245553][T24763] __kasan_slab_free+0x5c/0x80 [ 1586.245584][T24763] kfree+0x1bd/0x900 [ 1586.245611][T24763] snd_pcm_detach_substream+0x1e1/0x290 [ 1586.245635][T24763] snd_pcm_oss_release+0x184/0x250 [ 1586.245655][T24763] __fput+0x45b/0xa80 [ 1586.245676][T24763] task_work_run+0x1d4/0x260 [ 1586.245706][T24763] exit_to_user_mode_loop+0xef/0x4e0 [ 1586.245735][T24763] do_syscall_64+0x2c1/0xf80 [ 1586.245756][T24763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.245776][T24763] [ 1586.245781][T24763] The buggy address belongs to the object at ffff88805c0a0000 [ 1586.245781][T24763] which belongs to the cache kmalloc-2k of size 2048 [ 1586.245801][T24763] The buggy address is located 512 bytes inside of [ 1586.245801][T24763] freed 2048-byte region [ffff88805c0a0000, ffff88805c0a0800) [ 1586.245826][T24763] [ 1586.245832][T24763] The buggy address belongs to the physical page: [ 1586.245852][T24763] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c0a0 [ 1586.245874][T24763] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1586.245893][T24763] flags: 0x80000000000040(head|node=0|zone=1) [ 1586.245915][T24763] page_type: f5(slab) [ 1586.245936][T24763] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1586.245956][T24763] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1586.245978][T24763] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1586.245998][T24763] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1586.246019][T24763] head: 0080000000000003 ffffea0001702801 00000000ffffffff 00000000ffffffff [ 1586.246038][T24763] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1586.246050][T24763] page dumped because: kasan: bad access detected [ 1586.246066][T24763] page_owner tracks the page as allocated [ 1586.246074][T24763] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5808, tgid 5808 (syz-executor), ts 101534739678, free_ts 0 [ 1586.246114][T24763] post_alloc_hook+0x234/0x290 [ 1586.246144][T24763] get_page_from_freelist+0x28c0/0x2960 [ 1586.246165][T24763] __alloc_frozen_pages_noprof+0x181/0x370 [ 1586.246184][T24763] alloc_pages_mpol+0xd1/0x380 [ 1586.246202][T24763] allocate_slab+0x86/0x3b0 [ 1586.246226][T24763] ___slab_alloc+0xb10/0x13e0 [ 1586.246247][T24763] __slab_alloc+0xc6/0x1f0 [ 1586.246266][T24763] __kmalloc_node_track_caller_noprof+0x2bf/0x810 [ 1586.246300][T24763] kmalloc_reserve+0x136/0x290 [ 1586.246324][T24763] pskb_expand_head+0x19d/0x1160 [ 1586.246355][T24763] netlink_trim+0x1b3/0x2c0 [ 1586.246380][T24763] netlink_broadcast_filtered+0xd6/0x1000 [ 1586.246407][T24763] nlmsg_notify+0xf0/0x1a0 [ 1586.246434][T24763] __dev_notify_flags+0xf4/0x2e0 [ 1586.246466][T24763] rtnl_newlink_create+0x61c/0xb00 [ 1586.246494][T24763] rtnl_newlink+0x16e7/0x1c90 [ 1586.246517][T24763] page_owner free stack trace missing [ 1586.246525][T24763] [ 1586.246531][T24763] Memory state around the buggy address: [ 1586.246543][T24763] ffff88805c0a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1586.246558][T24763] ffff88805c0a0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1586.246574][T24763] >ffff88805c0a0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1586.246586][T24763] ^ [ 1586.246598][T24763] ffff88805c0a0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1586.246614][T24763] ffff88805c0a0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1586.246626][T24763] ================================================================== [ 1586.246649][T24763] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1586.246672][T24763] CPU: 0 UID: 0 PID: 24763 Comm: syz.7.6289 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1586.246704][T24763] Tainted: [L]=SOFTLOCKUP [ 1586.246713][T24763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1586.246727][T24763] Call Trace: [ 1586.246735][T24763] [ 1586.246744][T24763] vpanic+0x1e0/0x670 [ 1586.246779][T24763] panic+0xb9/0xc0 [ 1586.246810][T24763] ? __pfx_panic+0x10/0x10 [ 1586.246843][T24763] ? rt_spin_lock+0x88/0x3e0 [ 1586.246874][T24763] ? rcu_is_watching+0x15/0xb0 [ 1586.246899][T24763] ? rt_spin_lock+0x88/0x3e0 [ 1586.246929][T24763] check_panic_on_warn+0x89/0xb0 [ 1586.246965][T24763] ? rt_spin_lock+0x88/0x3e0 [ 1586.246995][T24763] end_report+0x6f/0x140 [ 1586.247030][T24763] kasan_report+0x129/0x150 [ 1586.247067][T24763] ? rt_spin_lock+0x88/0x3e0 [ 1586.247103][T24763] ? __wake_up_common_lock+0x2f/0x1e0 [ 1586.247131][T24763] __kasan_check_byte+0x2a/0x40 [ 1586.247167][T24763] lock_acquire+0x84/0x340 [ 1586.247198][T24763] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1586.247230][T24763] ? reacquire_held_locks+0x104/0x190 [ 1586.247271][T24763] rt_spin_lock+0x88/0x3e0 [ 1586.247301][T24763] ? __wake_up_common_lock+0x2f/0x1e0 [ 1586.247332][T24763] ? __pfx_rt_spin_lock+0x10/0x10 [ 1586.247363][T24763] ? rt_spin_unlock+0x161/0x200 [ 1586.247396][T24763] ? __wake_up_common_lock+0x18a/0x1e0 [ 1586.247427][T24763] __wake_up_common_lock+0x2f/0x1e0 [ 1586.247462][T24763] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1586.247487][T24763] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1586.247508][T24763] snd_pcm_action+0x1f4/0x240 [ 1586.247542][T24763] loopback_trigger+0xb82/0x1b60 [ 1586.247567][T24763] ? rcu_is_watching+0x15/0xb0 [ 1586.247593][T24763] snd_pcm_do_start+0xb7/0x180 [ 1586.247616][T24763] snd_pcm_action+0xe7/0x240 [ 1586.247650][T24763] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 1586.247681][T24763] ? __pfx_interleaved_copy+0x10/0x10 [ 1586.247708][T24763] ? __pfx_default_write_copy+0x10/0x10 [ 1586.247736][T24763] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1586.247763][T24763] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1586.247786][T24763] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1586.247819][T24763] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1586.247853][T24763] ? snd_pcm_oss_write3+0x1a2/0x350 [ 1586.247893][T24763] snd_pcm_oss_write3+0x1bc/0x350 [ 1586.247935][T24763] snd_pcm_oss_sync1+0x345/0x760 [ 1586.247970][T24763] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1586.247998][T24763] ? __pfx_default_wake_function+0x10/0x10 [ 1586.248034][T24763] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1586.248061][T24763] ? __asan_memset+0x22/0x50 [ 1586.248089][T24763] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1586.248121][T24763] snd_pcm_oss_sync+0x6ef/0x9d0 [ 1586.248149][T24763] snd_pcm_oss_release+0x102/0x250 [ 1586.248172][T24763] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1586.248195][T24763] __fput+0x45b/0xa80 [ 1586.248227][T24763] task_work_run+0x1d4/0x260 [ 1586.248263][T24763] ? __pfx_task_work_run+0x10/0x10 [ 1586.248305][T24763] exit_to_user_mode_loop+0xef/0x4e0 [ 1586.248337][T24763] ? rcu_is_watching+0x15/0xb0 [ 1586.248360][T24763] do_syscall_64+0x2c1/0xf80 [ 1586.248383][T24763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.248406][T24763] ? trace_irq_disable+0x37/0x100 [ 1586.248430][T24763] ? clear_bhb_loop+0x60/0xb0 [ 1586.248463][T24763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.248485][T24763] RIP: 0033:0x7f48a237f749 [ 1586.248503][T24763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1586.248523][T24763] RSP: 002b:00007ffeeff45d78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1586.248547][T24763] RAX: 0000000000000000 RBX: 00007f48a25d7da0 RCX: 00007f48a237f749 [ 1586.248563][T24763] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1586.248577][T24763] RBP: 00007f48a25d7da0 R08: 0000000000007d90 R09: 00000006eff4606f [ 1586.248594][T24763] R10: 00007f48a25d7cb0 R11: 0000000000000246 R12: 0000000000183184 [ 1586.248609][T24763] R13: 00007ffeeff45e70 R14: ffffffffffffffff R15: 00007ffeeff45e90 [ 1586.248638][T24763] [ 1586.249230][T24763] Kernel Offset: disabled