last executing test programs: 4m54.240916694s ago: executing program 2 (id=3086): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001480)='-v', 0x2) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f", 0x4a}], 0x1) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8"}, 0x3f1) 4m53.963335225s ago: executing program 2 (id=3088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 4m52.695383202s ago: executing program 2 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000a00), 0x0) setgroups(0x0, 0x0) 4m51.450726777s ago: executing program 2 (id=3092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r4, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 4m50.22728093s ago: executing program 2 (id=3094): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x1a3b, &(0x7f0000000540)={0x0, 0xbe8, 0x400, 0x7, 0x2af, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000080)='/dev/mapper/control\x00', 0x14) lseek(r4, 0x0, 0x0) read(r4, &(0x7f0000000100), 0x14) openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000200)={0x29, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x3, 'wlc\x00', 0x6e, 0x9, 0x28}, 0x2c) r5 = syz_clone(0x44018080, 0x0, 0xfffffffffffffd7e, 0x0, 0x0, 0x0) migrate_pages(r5, 0x5, &(0x7f0000000040)=0x5, &(0x7f00000009c0)=0x272) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xf8}}, 0x4000010) socket$inet6(0xa, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000640)='-&:\n-\xb2];\x0f\xb2\x86NV6&\x01=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xaf0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92AjYg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x5) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000740)=ANY=[@ANYBLOB="090000000000000001000000000000000000b900"]) 4m45.444928319s ago: executing program 2 (id=3101): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') 2m29.152832714s ago: executing program 3 (id=3335): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 2m21.276873036s ago: executing program 3 (id=3347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe0000000073130000000000009c000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r4, 0x29, 0x3c, 0x0, 0x0) 2m19.193689159s ago: executing program 3 (id=3350): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x8}, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740), 0x40000000000017d, 0x888) 2m11.174978064s ago: executing program 3 (id=3359): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x0, 0x39c, 0x0, r1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) recvmsg$inet_nvme(r2, 0x0, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x7, 0x33b, 0x8, 0x3, 0xd06, 0x9, 0x40, {0x0, @in6={{0xa, 0x4e22, 0x8000, @private0, 0x8}}, 0x6, 0x8, 0x7, 0x9, 0x80000000}}, &(0x7f0000000400)=0xb0) 2m9.171511382s ago: executing program 3 (id=3361): syz_open_dev$vim2m(0x0, 0x5, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 1m55.820132366s ago: executing program 3 (id=3373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) close(r3) 1m40.399232194s ago: executing program 32 (id=3373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) close(r3) 27.008301393s ago: executing program 0 (id=3443): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000080)={'veth1_virt_wifi\x00', @ifru_map={0x70000000, 0x0, 0x0, 0x2, 0x2, 0x80}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xa8}) mremap(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_ublk_setup_io_uring(0x4318, &(0x7f00000003c0)={0x0, 0x36f4, 0x10000, 0x2, 0x11d}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x0, &(0x7f0000000b80)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000bc0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c40)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000c80)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0xc87e, 0x400, 0x0, 0x115, 0x0, r4}, &(0x7f0000000e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc748, 0x10, 0x3, 0x1ef, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b7, 0x80000, 0x3, 0xe6, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd0fe, 0x4, 0x0, 0x3ce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4df, 0x200, 0x1, 0x3b3}, 0xffffffffffffffff}], 0x4, &(0x7f0000000d80)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, r9, '\x00', {0x3, 0xa5e, 0x0, &(0x7f0000001ec0)=@buf_max_buf="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"}}, &(0x7f0000000cc0)) io_uring_setup(0x8, &(0x7f0000001e40)={0x0, 0x0, 0x2, 0x0, 0x17b, 0x0, r11}) socket$l2tp(0x2, 0x2, 0x73) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x4, 0x4c8, [0x200000000600, 0x0, 0x0, 0x2000000006d8, 0x2000000009d8], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="000000001e0000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000800000000f6626174616476300000000000000000006261746164763000000000000000000076657468305f766c616e0000000000007866726d300000000000000000000000486481d925cb00ff000000ffaaaaaaaaaabbffffffffff0000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff020000000900000003000000001070696d726567300000000000000000006970365f767469300000000000000000697036746e6c30000000000000000000626f6e645f736c6176655f3000000000bbbbbbbbbbbbffffffff0000ffffffffffffff000000ffff00007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a310000000000000000000000000000000000000000000000010c0000002d00000000000000030000004000000000006970766c616e3000000000000000000070696d7265673000000000000000000076657468315f746f5f6261746164760070696d36726567300000000000000000000000000000ffff00ffffffaaaaaaaaaa320000ff00ffff0000980100009801000010020000636f6d6d656e74000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000"]}, 0x400) 19.795841638s ago: executing program 0 (id=3449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x4, 0x101c40) setitimer(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000700)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x8}, 0x1}, 0x1c) fcntl$setstatus(r3, 0x4, 0x400) sendmmsg$inet6(r2, &(0x7f0000000740), 0x40000000000017d, 0x888) 13.048528838s ago: executing program 1 (id=3455): syz_open_dev$vim2m(0x0, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 11.427700445s ago: executing program 4 (id=3456): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 10.165611268s ago: executing program 1 (id=3457): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x48884) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 8.933409705s ago: executing program 4 (id=3458): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000680)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000700), 0x0, 0x0) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000800)={&(0x7f0000800000/0x800000)=nil, &(0x7f00001eb000/0x2000)=nil, 0x800000, 0x0, 0xf4ffffff}) 8.143041402s ago: executing program 0 (id=3459): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000006118000000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000440)=0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff2}}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xb}}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x10}}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000009c0000"], &(0x7f0000000600)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 7.143275432s ago: executing program 4 (id=3460): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc000, 0x7f) faccessat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) getsockopt$packet_int(r3, 0x107, 0x7, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 5.850261885s ago: executing program 1 (id=3461): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-v', 0x2) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f00000004c0)="e1", 0x1}, {&(0x7f0000000500)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f0000000ec0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f0000000700)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000c80)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000d40)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x20e) close_range(r0, 0xffffffffffffffff, 0x0) 5.494252008s ago: executing program 4 (id=3462): r0 = socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000080)='configfs\x00', 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0xfff, 0x5, 0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000280)) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x1214040, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000640)={0x3, 0x2, 0x1, 0x1}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000700)={0x0}, 0x2, 0x8}}, 0x20) socket(0x18, 0x6, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2007300, 0x0, 0x0, 0x0, 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4}, 0x50) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2c, r6, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 5.084443958s ago: executing program 0 (id=3463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0) 4.990350441s ago: executing program 1 (id=3464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.780588634s ago: executing program 4 (id=3465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x8010, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x6}, 0x8) 3.555549684s ago: executing program 0 (id=3466): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc000, 0x7f) faccessat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$packet_int(r3, 0x107, 0x7, 0x0, 0x0) 3.177580653s ago: executing program 4 (id=3467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000280)=0x7, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a300000000008000340000000011400000011"], 0x64}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000580)="2bbe08f245daadbc9d1254b16a1ab689eb6ed3d2823caa49bdc448d5cb2acd552df8ab37ebfc7f52a47cf76af4f891fb7748709ff1b341ad4f8e9c72ba44ad0e17abc35adbfdbb29e5a74357a9cccc0d15ca96dca5df7a4058dfff189d45555473ffcaf007b3d3558ab0d6ba6115887b8931b97112f44ac4d91cd9cedb1ffa9816c0781b534eb4cdf6123f50573ff5cc18ee2db4715f0caed95aef0382ab93b4d9cf309c53bb313174305cca768fca4aef982a1336e924fe11491e2e1c5f2c25bf") sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000800)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)={0x54, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x990}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x50) 1.265509113s ago: executing program 1 (id=3468): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r2, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 896.299039ms ago: executing program 0 (id=3469): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0x3a52, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x0, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x2, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x0, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x9, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x135, 0x6]}, 0x45c) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 0s ago: executing program 1 (id=3470): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) r6 = socket(0x9, 0x2, 0x100002) connect$inet6(r6, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.068994][ T5696] usb 3-1: config 0 descriptor?? [ 453.120298][ T5696] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 453.292247][ T5696] bcm5974 3-1:0.0: could not read from device [ 453.480522][ T4945] bcm5974 3-1:0.0: could not read from device [ 453.589166][ T5696] input: failed to attach handler mousedev to device input26, error: -5 [ 453.947282][ T4945] bcm5974 3-1:0.0: could not read from device [ 454.239318][ T5696] usb 3-1: USB disconnect, device number 34 [ 454.240703][ T9489] bcm5974 3-1:0.0: could not read from device [ 456.201738][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 456.351093][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 456.352021][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 456.357902][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.357917][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 456.357944][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 456.357965][ T10] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 456.357987][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 456.357999][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 456.360074][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.360094][ T10] usb 4-1: Product: syz [ 456.360102][ T10] usb 4-1: Manufacturer: syz [ 456.360110][ T10] usb 4-1: SerialNumber: syz [ 456.971918][ T5696] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 457.018588][ T10] usb 4-1: selecting invalid altsetting 0 [ 457.027594][ T10] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 457.029375][ T10] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 457.123531][ T5696] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 457.128848][ T5696] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 457.128896][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 457.128923][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 457.128966][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.204015][ T5696] usb 1-1: config 0 descriptor?? [ 457.204774][T12678] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 457.787802][ T10] usb 4-1: USB disconnect, device number 29 [ 457.893665][T12689] binder: 12688:12689 ioctl c0306201 0 returned -14 [ 457.894581][T12689] binder: 12688:12689 ioctl c0306201 200000001680 returned -11 [ 459.690949][ T5696] usbhid 1-1:0.0: can't add hid device: -71 [ 459.691031][ T5696] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 459.730916][ T5696] usb 1-1: USB disconnect, device number 27 [ 460.333779][T12708] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 461.460888][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 461.619257][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 461.634573][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.638106][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.638138][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.638162][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.638203][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.698087][ T10] usb 3-1: config 0 descriptor?? [ 461.947906][T12730] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 462.231528][ T5696] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 462.289920][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input27 [ 462.390889][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 462.391546][ T5696] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 462.393933][ T5696] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 462.394466][ T5696] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 462.394489][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 462.394523][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.394535][ T5696] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 462.394548][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 462.394559][ T5696] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 462.394571][ T5696] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 462.394594][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.563839][ T5696] usb 4-1: config 0 descriptor?? [ 462.720521][ T10] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 462.815820][ T5696] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 463.028906][ T5867] usb 4-1: USB disconnect, device number 30 [ 463.107669][ T5867] usblp0: removed [ 463.493773][ T197] usb 3-1: USB disconnect, device number 35 [ 463.925490][ T5326] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 464.177702][ T5326] usb 4-1: Using ep0 maxpacket: 16 [ 464.386726][ T5326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.386875][ T5326] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 464.494532][ T5326] usb 4-1: config 4 has an invalid interface number: 86 but max is 0 [ 464.494561][ T5326] usb 4-1: config 4 has no interface number 0 [ 464.494702][ T5326] usb 4-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 464.494776][ T5326] usb 4-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 464.494852][ T5326] usb 4-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 464.494919][ T5326] usb 4-1: config 4 interface 86 has no altsetting 0 [ 464.582953][ T5326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.583046][ T5326] usb 4-1: Product: syz [ 464.583123][ T5326] usb 4-1: Manufacturer: syz [ 464.583179][ T5326] usb 4-1: SerialNumber: syz [ 467.736615][T12776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2198'. [ 467.763722][T12776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.668842][T12787] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 470.770380][ T5326] cypress_m8 4-1:4.86: DeLorme Earthmate USB converter detected [ 470.889267][ T5326] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 471.468062][T12824] fuse: Bad value for 'fd' [ 471.602530][ T197] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 471.763738][ T197] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 471.767549][ T197] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 471.767576][ T197] usb 1-1: config 0 has no interface number 0 [ 471.767648][ T197] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 471.767703][ T197] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.767731][ T197] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 471.779854][ T197] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 471.779881][ T197] usb 1-1: Product: syz [ 471.779896][ T197] usb 1-1: SerialNumber: syz [ 471.838841][ T197] usb 1-1: config 0 descriptor?? [ 471.968921][ T197] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 472.314745][ T197] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input28 [ 473.117834][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 473.599699][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.599980][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.600229][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.600473][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.600712][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.600983][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.601213][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.601439][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.601665][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.601894][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.611668][ T5867] usb 1-1: USB disconnect, device number 28 [ 473.611795][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 473.823714][ T5867] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 474.746204][ T5326] usb 4-1: USB disconnect, device number 31 [ 474.800391][ T5326] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 474.812469][ T5326] cypress_m8 4-1:4.86: device disconnected [ 474.859128][T12863] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2225'. [ 474.862374][T12863] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2225'. [ 475.251166][ T197] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 475.400988][ T197] usb 3-1: Using ep0 maxpacket: 16 [ 475.402235][ T197] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 475.403451][ T197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.403482][ T197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.403506][ T197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.403548][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.419202][ T197] usb 3-1: config 0 descriptor?? [ 477.174126][ T197] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input29 [ 477.566020][ T197] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 477.758211][T12887] netlink: 'syz.4.2232': attribute type 16 has an invalid length. [ 477.758236][T12887] netlink: 'syz.4.2232': attribute type 17 has an invalid length. [ 478.245825][T12887] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.264110][T12887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.793877][T12887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.823944][T12887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.850635][T12887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.873186][T12887] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 478.984777][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.984857][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.023912][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.023985][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.335777][T12920] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2240'. [ 480.339144][T12920] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2240'. [ 480.632559][ T5704] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 480.787215][ T5704] usb 4-1: Using ep0 maxpacket: 8 [ 480.788177][ T5704] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 480.792501][ T5704] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 480.792606][ T5704] usb 4-1: config 0 interface 0 has no altsetting 0 [ 480.800320][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.800344][ T5704] usb 4-1: Product: syz [ 480.800359][ T5704] usb 4-1: Manufacturer: syz [ 480.800373][ T5704] usb 4-1: SerialNumber: syz [ 480.933849][ T5704] usb 4-1: config 0 descriptor?? [ 480.958008][ T5704] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 481.048161][T12473] usb 3-1: USB disconnect, device number 36 [ 481.203316][ T5704] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 481.207749][ T5704] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 481.386692][ T5696] usb 4-1: USB disconnect, device number 32 [ 483.170941][ T197] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 483.321699][ T197] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.323215][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.323245][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.323268][ T197] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.323362][ T197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.335445][ T197] usb 1-1: config 0 descriptor?? [ 485.081787][ T197] usbhid 1-1:0.0: can't add hid device: -71 [ 485.081923][ T197] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 485.144188][ T197] usb 1-1: USB disconnect, device number 29 [ 488.990865][ T5867] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 489.020966][T12473] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 489.058042][T13031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.082580][T13031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.140917][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 489.144811][ T5867] usb 1-1: unable to get BOS descriptor or descriptor too short [ 489.144870][ T5867] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 489.146842][ T5867] usb 1-1: config 4 has an invalid interface number: 86 but max is 0 [ 489.146869][ T5867] usb 1-1: config 4 has no interface number 0 [ 489.146912][ T5867] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 489.146942][ T5867] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 489.146965][ T5867] usb 1-1: config 4 interface 86 has no altsetting 0 [ 489.150064][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.150092][ T5867] usb 1-1: Product: syz [ 489.150108][ T5867] usb 1-1: Manufacturer: syz [ 489.150123][ T5867] usb 1-1: SerialNumber: syz [ 489.172094][T12473] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 489.174444][T12473] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.174477][T12473] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.174504][T12473] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.174537][T12473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.200355][T12473] usb 4-1: config 0 descriptor?? [ 489.631050][ T5867] cypress_m8 1-1:4.86: DeLorme Earthmate USB converter detected [ 489.670013][ T5867] earthmate ttyUSB0: required endpoint is missing [ 489.688719][ T5867] usb 1-1: USB disconnect, device number 30 [ 489.702874][T13031] batman_adv: batadv0: Interface deactivated: gretap1 [ 489.706158][ T5867] cypress_m8 1-1:4.86: device disconnected [ 489.778821][T12473] hid_parser_main: 5 callbacks suppressed [ 489.778880][T12473] hid-multitouch 0003:0EEF:72C4.0009: unknown main item tag 0x0 [ 489.778899][T12473] hid-multitouch 0003:0EEF:72C4.0009: unknown main item tag 0x0 [ 489.964040][ T3354] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.964083][ T3354] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.964104][ T3354] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.964123][ T3354] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.033387][T12473] hid-multitouch 0003:0EEF:72C4.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 490.131708][T12473] usb 4-1: USB disconnect, device number 33 [ 490.175829][T13041] fido_id[13041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 490.447050][T13049] netlink: 'syz.0.2273': attribute type 1 has an invalid length. [ 490.567987][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2273'. [ 490.725114][T13049] bond5: entered promiscuous mode [ 490.742020][T13049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.158047][T13068] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 491.242794][ T1000] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 491.339381][T13068] 8021q: adding VLAN 0 to HW filter on device bond10 [ 491.402264][ T1000] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 491.403797][ T1000] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 491.403821][ T1000] usb 1-1: config 0 has no interface number 0 [ 491.403866][ T1000] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 491.403892][ T1000] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 491.403916][ T1000] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 491.406221][ T1000] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 491.406247][ T1000] usb 1-1: Product: syz [ 491.406263][ T1000] usb 1-1: SerialNumber: syz [ 491.485366][ T1000] usb 1-1: config 0 descriptor?? [ 491.499590][ T1000] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 491.534116][ T1000] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input30 [ 492.020515][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 492.186771][T13085] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 492.253141][T12473] usb 1-1: USB disconnect, device number 31 [ 492.563806][T12473] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 493.564973][T13095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2285'. [ 493.564998][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'. [ 493.789099][T13101] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 493.937554][T13103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2286'. [ 494.149262][T13103] bond11: entered promiscuous mode [ 494.197665][T13103] 8021q: adding VLAN 0 to HW filter on device bond11 [ 494.256866][T13106] syzkaller0: entered promiscuous mode [ 494.256894][T13106] syzkaller0: entered allmulticast mode [ 494.896760][T13120] netlink: 'syz.4.2292': attribute type 1 has an invalid length. [ 494.961775][T13120] 8021q: adding VLAN 0 to HW filter on device bond11 [ 496.784164][ T1000] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 496.960904][ T1000] usb 4-1: Using ep0 maxpacket: 16 [ 496.961763][ T1000] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.963239][ T1000] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.963263][ T1000] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.966735][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.966760][ T1000] usb 4-1: Product: syz [ 496.966775][ T1000] usb 4-1: Manufacturer: syz [ 496.966789][ T1000] usb 4-1: SerialNumber: syz [ 497.123796][ T1000] usb 4-1: 0:2 : does not exist [ 497.544740][ T1000] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 497.789345][ T1000] usb 4-1: USB disconnect, device number 34 [ 497.966930][ T9489] udevd[9489]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.151102][T13169] random: crng reseeded on system resumption [ 499.244559][T13172] netlink: 'syz.4.2309': attribute type 1 has an invalid length. [ 499.373408][T13172] bond12: entered promiscuous mode [ 499.403204][T13172] 8021q: adding VLAN 0 to HW filter on device bond12 [ 499.474930][T13169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.743827][T13181] fuse: fd is not a fuse device [ 501.034465][T13197] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 501.714879][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.715112][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.651077][T13210] nvme nvme0: rdma connection establishment failed (-104) [ 503.573974][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 503.574001][ T36] audit: type=1326 audit(1791963927.828:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 503.574043][ T36] audit: type=1326 audit(1791963927.828:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 503.584997][ T36] audit: type=1326 audit(1791963927.838:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 503.809559][ T36] audit: type=1326 audit(1791963928.058:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 503.809840][ T36] audit: type=1326 audit(1791963928.058:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 504.748752][T13245] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2323'. [ 504.917140][T13245] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.917754][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.970913][ T5867] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 505.028601][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2328'. [ 505.121648][ T5867] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 505.129153][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 505.129179][ T5867] usb 3-1: Product: syz [ 505.129193][ T5867] usb 3-1: Manufacturer: syz [ 505.129208][ T5867] usb 3-1: SerialNumber: syz [ 505.175809][ T5867] usb 3-1: config 0 descriptor?? [ 505.226055][ T5867] usb 3-1: selecting invalid altsetting 1 [ 505.226078][ T5867] comedi comedi5: could not switch to alternate setting 1 [ 505.226094][ T5867] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 505.408841][ T36] audit: type=1326 audit(1791963929.658:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 505.409943][ T36] audit: type=1326 audit(1791963929.658:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 505.410902][ T197] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 505.412152][ T36] audit: type=1326 audit(1791963929.658:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 505.414574][ T36] audit: type=1326 audit(1791963929.668:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 505.415677][ T36] audit: type=1326 audit(1791963929.668:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13226 comm="syz.2.2320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 505.430925][ T5704] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 505.638691][ T5704] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 505.653851][ T5704] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.653872][ T5704] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.653887][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.653906][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.687677][ T5704] usb 1-1: config 0 descriptor?? [ 506.173836][ T5867] usb 3-1: USB disconnect, device number 37 [ 506.182105][ T5704] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 506.183387][ T5704] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 506.543608][ T5704] hid-multitouch 0003:0EEF:72C4.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 506.586762][ T5704] usb 1-1: USB disconnect, device number 32 [ 506.652934][T13289] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2338'. [ 506.712428][ T5867] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 506.812178][T13290] fido_id[13290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 506.881722][ T5867] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 506.903009][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 506.903044][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 506.903084][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.036198][T13293] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 507.335198][T13293] bond13: entered promiscuous mode [ 507.376013][T13293] 8021q: adding VLAN 0 to HW filter on device bond13 [ 507.403528][T13298] random: crng reseeded on system resumption [ 507.465724][ T5867] qmi_wwan 3-1:1.0: probe with driver qmi_wwan failed with error -22 [ 507.502817][ T5867] usb 3-1: USB disconnect, device number 38 [ 507.729797][T13298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.513522][ T1000] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 508.701829][ T1000] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 508.703198][ T1000] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 508.703213][ T1000] usb 3-1: config 0 has no interface number 0 [ 508.703248][ T1000] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 508.703263][ T1000] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 508.703277][ T1000] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.705909][ T1000] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 508.705934][ T1000] usb 3-1: Product: syz [ 508.705949][ T1000] usb 3-1: SerialNumber: syz [ 508.780962][ T5704] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 508.794182][ T1000] usb 3-1: config 0 descriptor?? [ 508.812490][ T1000] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 508.841652][ T1000] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input31 [ 508.950546][ T5704] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 508.983902][ T5704] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 508.983939][ T5704] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 508.983967][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 509.085225][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 509.085255][ T5704] usb 1-1: Product: syz [ 509.085271][ T5704] usb 1-1: Manufacturer: syz [ 509.085286][ T5704] usb 1-1: SerialNumber: syz [ 509.137557][ T5704] usb 1-1: config 0 descriptor?? [ 509.194567][ T5704] usb 1-1: selecting invalid altsetting 0 [ 509.361054][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 509.757338][ C0] cm109_urb_ctl_callback: 46 callbacks suppressed [ 509.757374][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.757630][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.757876][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.758124][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.758383][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.758630][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.758876][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.759121][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.759360][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.759627][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 509.852119][ T1000] usb 3-1: USB disconnect, device number 39 [ 509.852198][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 509.891616][ T5704] usb 1-1: USB disconnect, device number 33 [ 509.941622][ T1000] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 510.116882][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2351'. [ 512.860914][ T1000] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 513.011990][ T1000] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 513.018700][ T1000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.018725][ T1000] usb 1-1: Product: syz [ 513.018739][ T1000] usb 1-1: Manufacturer: syz [ 513.018754][ T1000] usb 1-1: SerialNumber: syz [ 513.083377][ T1000] usb 1-1: config 0 descriptor?? [ 513.174572][ T197] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 513.331626][ T197] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.333331][ T197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.333362][ T197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.333384][ T197] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.333427][ T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.404339][ T197] usb 4-1: config 0 descriptor?? [ 514.067637][ T197] usbhid 4-1:0.0: can't add hid device: -71 [ 514.067757][ T197] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 514.072504][ T197] usb 4-1: USB disconnect, device number 36 [ 514.116215][ T1000] usb 1-1: f81604_read: reg: 100f failed: -EPROTO [ 514.155565][ T1000] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 514.168010][ T1000] usb 1-1: USB disconnect, device number 34 [ 514.262114][ T1000] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 514.368210][ T5255] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 514.471910][ T1000] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 516.491013][ T197] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 516.641669][ T197] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 516.644642][ T197] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 516.644668][ T197] usb 4-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 516.700934][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.700951][ T197] usb 4-1: Product: syz [ 516.700959][ T197] usb 4-1: Manufacturer: syz [ 516.700967][ T197] usb 4-1: SerialNumber: syz [ 517.024763][ T1000] usb 4-1: USB disconnect, device number 37 [ 518.213349][T13417] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 518.515045][T13421] fuse: fd is not a fuse device [ 520.281815][T13437] tipc: Enabling of bearer rejected, failed to enable media [ 523.011447][T12473] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 523.192309][T12473] usb 3-1: device descriptor read/64, error -71 [ 523.451010][T12473] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 523.580890][T12473] usb 3-1: device descriptor read/64, error -71 [ 523.691196][T12473] usb usb3-port1: attempt power cycle [ 524.030905][T12473] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 524.051593][T12473] usb 3-1: device descriptor read/8, error -71 [ 524.226078][T13487] netlink: 'syz.0.2397': attribute type 16 has an invalid length. [ 524.226094][T13487] netlink: 'syz.0.2397': attribute type 17 has an invalid length. [ 524.252343][T13487] 0ªî{X¹¦: left allmulticast mode [ 525.155348][T12473] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 525.325619][T13493] fuse: Bad value for 'fd' [ 525.360934][T12473] usb 3-1: device not accepting address 43, error -71 [ 525.793031][T13487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.259853][T12473] usb usb3-port1: unable to enumerate USB device [ 526.356030][T13487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.516512][T13507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2403'. [ 526.606430][T13487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.615278][T13487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.637277][T13487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.637304][T13487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.667755][T13487] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 526.682987][ T3354] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.683354][ T3354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.692965][ T3354] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.693084][ T3354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.767139][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 526.767157][ T36] audit: type=1326 audit(1791963951.018:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.767203][ T36] audit: type=1326 audit(1791963951.018:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.830044][ T36] audit: type=1326 audit(1791963951.078:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.865321][ T36] audit: type=1326 audit(1791963951.078:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.865554][ T36] audit: type=1326 audit(1791963951.118:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.866449][ T36] audit: type=1326 audit(1791963951.118:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.929007][ T36] audit: type=1326 audit(1791963951.178:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.931233][ T36] audit: type=1326 audit(1791963951.178:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.951093][ T36] audit: type=1326 audit(1791963951.198:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 526.956921][ T36] audit: type=1326 audit(1791963951.208:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.2405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 527.331011][ T5867] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 528.094697][ T5867] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 528.144396][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 528.144424][ T5867] usb 1-1: Product: syz [ 528.144440][ T5867] usb 1-1: Manufacturer: syz [ 528.144455][ T5867] usb 1-1: SerialNumber: syz [ 528.193049][ T5867] usb 1-1: config 0 descriptor?? [ 528.248921][ T5867] usb 1-1: selecting invalid altsetting 1 [ 528.248943][ T5867] comedi comedi5: could not switch to alternate setting 1 [ 528.248958][ T5867] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 530.454569][ T10] usb 1-1: USB disconnect, device number 35 [ 531.167787][T13578] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 532.049775][T13578] batman_adv: batadv0: Adding interface: gretap1 [ 532.049788][T13578] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.049807][T13578] batman_adv: batadv0: Interface activated: gretap1 [ 532.112522][T13585] netlink: 'syz.4.2425': attribute type 16 has an invalid length. [ 532.112536][T13585] netlink: 'syz.4.2425': attribute type 17 has an invalid length. [ 532.151061][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.151211][T13585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.151682][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.151826][T13585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.366170][T13585] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 534.268534][T13617] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2434'. [ 534.322382][T13620] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2434'. [ 534.322893][T13617] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.323267][T13617] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.360287][T13620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2434'. [ 534.370841][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 534.529299][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 534.530122][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 534.531683][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.531734][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.553389][ T10] usb 1-1: config 0 descriptor?? [ 534.588389][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 534.875635][ T10] usb 1-1: USB disconnect, device number 36 [ 534.878129][ T4945] bcm5974 1-1:0.0: could not read from device [ 534.936841][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 534.936852][ T36] audit: type=1326 audit(1791963959.188:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.936878][ T36] audit: type=1326 audit(1791963959.188:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.950929][ T36] audit: type=1326 audit(1791963959.198:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.950977][ T36] audit: type=1326 audit(1791963959.198:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.951220][ T36] audit: type=1326 audit(1791963959.208:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.956946][ T36] audit: type=1326 audit(1791963959.208:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.957008][ T36] audit: type=1326 audit(1791963959.208:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.957047][ T36] audit: type=1326 audit(1791963959.208:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.961124][ T36] audit: type=1326 audit(1791963959.208:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 534.963111][ T36] audit: type=1326 audit(1791963959.218:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.1.2437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291f4e2d9 code=0x7ffc0000 [ 535.693077][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 536.720823][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 536.726643][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 536.728485][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.728517][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.826701][ T10] usb 1-1: config 0 descriptor?? [ 536.970952][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 537.039140][ T10] bcm5974 1-1:0.0: could not read from device [ 537.120123][ T4945] bcm5974 1-1:0.0: could not read from device [ 537.214967][ T4945] bcm5974 1-1:0.0: could not read from device [ 537.550802][ T4945] bcm5974 1-1:0.0: could not read from device [ 537.622451][ T10] input: failed to attach handler mousedev to device input33, error: -5 [ 537.629727][ T4945] bcm5974 1-1:0.0: could not read from device [ 537.701055][ T10] usb 1-1: USB disconnect, device number 37 [ 540.450906][ T5714] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 540.661564][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 540.838531][ T5714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 541.505029][ T5714] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 541.528556][ T5714] usb 4-1: config 4 has an invalid interface number: 86 but max is 0 [ 541.528585][ T5714] usb 4-1: config 4 has no interface number 0 [ 541.528629][ T5714] usb 4-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 541.528660][ T5714] usb 4-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 541.528686][ T5714] usb 4-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 541.528710][ T5714] usb 4-1: config 4 interface 86 has no altsetting 0 [ 541.532299][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.532325][ T5714] usb 4-1: Product: syz [ 541.532338][ T5714] usb 4-1: Manufacturer: syz [ 541.532353][ T5714] usb 4-1: SerialNumber: syz [ 541.698666][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 541.698692][T13712] netlink: 'syz.0.2452': attribute type 10 has an invalid length. [ 541.698702][T13712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2452'. [ 541.867318][ T5714] cypress_m8 4-1:4.86: DeLorme Earthmate USB converter detected [ 541.911161][ T5714] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 541.931910][ T5714] usb 4-1: USB disconnect, device number 38 [ 541.989250][ T5714] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 542.007083][ T5714] cypress_m8 4-1:4.86: device disconnected [ 542.644764][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2456'. [ 542.924160][T13741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2457'. [ 545.524094][ T5714] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 545.700965][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 545.710604][ T5714] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.738337][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.738365][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.755194][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.755220][ T5714] usb 4-1: Product: syz [ 545.755234][ T5714] usb 4-1: Manufacturer: syz [ 545.755248][ T5714] usb 4-1: SerialNumber: syz [ 545.826255][ T5714] usb 4-1: 0:2 : does not exist [ 546.018428][ T5714] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 546.146594][ T5714] usb 4-1: USB disconnect, device number 39 [ 546.347022][ T9489] udevd[9489]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.387949][T13789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2469'. [ 549.090961][ T5704] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 549.240874][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 549.241827][ T5704] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 549.243173][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.243212][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.247156][ T5704] usb 4-1: config 0 descriptor?? [ 549.365217][ T5704] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 549.520594][ T4945] bcm5974 4-1:0.0: could not read from device [ 549.607285][ T5704] bcm5974 4-1:0.0: could not read from device [ 549.639548][ T4945] bcm5974 4-1:0.0: could not read from device [ 549.720890][ T5704] input: failed to attach handler mousedev to device input34, error: -5 [ 549.724236][ T4945] bcm5974 4-1:0.0: could not read from device [ 549.748245][ T5704] usb 4-1: USB disconnect, device number 40 [ 550.415512][ T5704] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 550.483732][T13825] tipc: Enabling of bearer rejected, failed to enable media [ 550.581284][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 550.582260][ T5704] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 550.583794][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.583849][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.639736][ T5704] usb 4-1: config 0 descriptor?? [ 550.677463][ T5704] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 550.860565][ T4945] bcm5974 4-1:0.0: could not read from device [ 550.913154][ T5704] bcm5974 4-1:0.0: could not read from device [ 550.954683][ T4945] bcm5974 4-1:0.0: could not read from device [ 551.032539][ T5704] input: failed to attach handler mousedev to device input35, error: -5 [ 551.399994][ T4945] bcm5974 4-1:0.0: could not read from device [ 551.408645][T12473] usb 4-1: USB disconnect, device number 41 [ 552.326403][T13853] fuse: fd is not a fuse device [ 552.480877][ T197] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 552.632197][ T197] usb 4-1: Using ep0 maxpacket: 32 [ 552.633201][ T197] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 552.636142][ T197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.636166][ T197] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 552.636215][ T197] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 552.636253][ T197] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 552.636295][ T197] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 552.636318][ T197] usb 4-1: config 1 interface 1 has no altsetting 0 [ 552.719258][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.719287][ T197] usb 4-1: Product: syz [ 552.719302][ T197] usb 4-1: Manufacturer: syz [ 552.719318][ T197] usb 4-1: SerialNumber: syz [ 553.185131][T13862] tipc: Enabling of bearer rejected, failed to enable media [ 553.399145][ T197] usb 4-1: selecting invalid altsetting 0 [ 553.406901][ T197] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 553.408623][ T197] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 553.631652][ T197] usb 4-1: USB disconnect, device number 42 [ 553.733461][ T9543] udevd[9543]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.318114][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'. [ 559.318154][T13912] netlink: 'syz.0.2506': attribute type 10 has an invalid length. [ 559.318172][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2506'. [ 559.400872][T12473] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 560.411357][T12473] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 560.412859][T12473] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.412907][T12473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.754149][T12473] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 560.815598][T12473] wwan wwan0: port wwan0qmi0 attached [ 561.008256][T12473] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, e6:ae:d9:4a:e5:0f [ 561.029728][T12473] usb 4-1: USB disconnect, device number 43 [ 561.056560][T12473] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 561.225795][T12473] wwan wwan0: port wwan0qmi0 disconnected [ 562.833327][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.833398][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.351384][T14037] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 567.851886][T14054] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 567.906976][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2546'. [ 567.912205][T14054] 8021q: adding VLAN 0 to HW filter on device bond14 [ 569.037276][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2550'. [ 576.734609][T14201] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2583'. [ 576.735076][T14201] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2583'. [ 577.475644][T14216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2595'. [ 580.213013][T14248] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2607'. [ 580.213559][T14248] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2607'. [ 580.496105][T14251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2609'. [ 585.006237][T14291] netlink: 'syz.1.2622': attribute type 19 has an invalid length. [ 586.300892][T14293] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 586.433924][T14298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2624'. [ 588.065387][T14331] fuse: fd is not a fuse device [ 588.273390][T14333] fuse: Bad value for 'fd' [ 588.280573][T14340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2638'. [ 591.592060][T14386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2652'. [ 593.213001][T14410] fuse: fd is not a fuse device [ 594.445510][T14419] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 594.792227][T14425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2665'. [ 597.815258][T14472] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 598.149466][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2682'. [ 598.163718][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2682'. [ 601.258990][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2693'. [ 601.302519][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2693'. [ 601.571760][T14522] fuse: fd is not a fuse device [ 605.935673][T14567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2707'. [ 608.136795][T14600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2718'. [ 610.609372][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 610.609410][T14615] netlink: 'syz.3.2722': attribute type 10 has an invalid length. [ 610.609427][T14615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2722'. [ 611.932609][T14641] fuse: fd is not a fuse device [ 612.400300][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 612.400319][ T36] audit: type=1326 audit(1791964036.648:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.400351][ T36] audit: type=1326 audit(1791964036.648:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.409531][ T36] audit: type=1326 audit(1791964036.658:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.409580][ T36] audit: type=1326 audit(1791964036.658:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.411792][ T36] audit: type=1326 audit(1791964036.658:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.411839][ T36] audit: type=1326 audit(1791964036.668:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.414033][ T36] audit: type=1326 audit(1791964036.668:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.415753][ T36] audit: type=1326 audit(1791964036.668:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.417427][ T36] audit: type=1326 audit(1791964036.668:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 612.417471][ T36] audit: type=1326 audit(1791964036.668:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14649 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f4cfe2d9 code=0x7ffc0000 [ 619.194371][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'. [ 619.194408][T14731] netlink: 'syz.4.2755': attribute type 10 has an invalid length. [ 619.194425][T14731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2755'. [ 619.275441][T14731] geneve4: entered promiscuous mode [ 619.275468][T14731] geneve4: entered allmulticast mode [ 619.290881][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.290928][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.290962][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.290995][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.712067][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 619.716981][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 619.748240][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 619.750646][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 619.757265][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.808890][ T4910] Bluetooth: hci5: command tx timeout [ 623.976530][ T4910] Bluetooth: hci5: command tx timeout [ 624.439238][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.466416][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.737322][ T4910] Bluetooth: hci5: command tx timeout [ 627.378702][T14739] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.388677][T14739] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.388890][T14739] bridge_slave_0: entered allmulticast mode [ 627.405778][T14739] bridge_slave_0: entered promiscuous mode [ 627.902411][T14739] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.902483][T14739] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.902617][T14739] bridge_slave_1: entered allmulticast mode [ 627.904055][T14739] bridge_slave_1: entered promiscuous mode [ 628.072296][T14739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.132537][T14739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.503565][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2785'. [ 628.595511][T14739] team0: Port device team_slave_0 added [ 628.612031][T14739] team0: Port device team_slave_1 added [ 628.772605][ T4910] Bluetooth: hci5: command tx timeout [ 628.855700][T14739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.855728][T14739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.855754][T14739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.858093][T14739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.858107][T14739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.858133][T14739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.035859][T14739] hsr_slave_0: entered promiscuous mode [ 629.037105][T14739] hsr_slave_1: entered promiscuous mode [ 629.037974][T14739] debugfs: 'hsr0' already exists in 'hsr' [ 629.037999][T14739] Cannot create hsr debugfs directory [ 632.402398][T13954] bridge_slave_1: left allmulticast mode [ 632.449123][T13954] bridge_slave_1: left promiscuous mode [ 632.494331][T13954] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.693430][T13954] bridge_slave_0: left allmulticast mode [ 632.693466][T13954] bridge_slave_0: left promiscuous mode [ 632.693718][T13954] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.917493][T13954] batman_adv: batadv0: Interface deactivated: gretap1 [ 633.643240][T13954] batman_adv: batadv0: Removing interface: gretap1 [ 633.742041][T13954] bond4 (unregistering): (slave geneve3): Releasing active interface [ 633.742241][T13954] geneve3 (unregistering): left promiscuous mode [ 634.031618][T13954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.112719][T13954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.131606][T13954] bond0 (unregistering): Released all slaves [ 634.138476][T13954] bond1 (unregistering): Released all slaves [ 634.162131][T13954] bond2 (unregistering): Released all slaves [ 634.179867][T13954] bond3 (unregistering): Released all slaves [ 634.205750][T13954] bond4 (unregistering): Released all slaves [ 634.227872][T13954] bond5 (unregistering): Released all slaves [ 634.416644][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 635.031728][T13954] tipc: Left network mode [ 641.023899][T14739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 641.305339][T14739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 641.622672][T14739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 642.534562][T14739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.697383][T14739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 642.730202][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 642.800394][T14739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.808341][T15079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2829'. [ 642.972747][T14739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 643.028821][T14739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.620066][T14739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.674514][T14739] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.697491][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.697698][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.739982][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.740282][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.450507][T15105] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 644.493204][T13954] hsr_slave_0: left promiscuous mode [ 644.542502][T13954] hsr_slave_1: left promiscuous mode [ 644.543583][T13954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.601274][T13954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.221946][T13954] team0 (unregistering): Port device team_slave_1 removed [ 646.302152][T13954] team0 (unregistering): Port device team_slave_0 removed [ 646.675795][T15105] 8021q: adding VLAN 0 to HW filter on device bond6 [ 646.705193][T15107] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 648.229843][T14739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.743538][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2854'. [ 648.784899][T14739] veth0_vlan: entered promiscuous mode [ 648.816452][T14739] veth1_vlan: entered promiscuous mode [ 648.926660][T14739] veth0_macvtap: entered promiscuous mode [ 648.949403][T13954] IPVS: stop unused estimator thread 0... [ 648.973168][T14739] veth1_macvtap: entered promiscuous mode [ 649.086225][T14739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.161596][T14739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.673439][T13961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.673927][T13961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.674416][T13961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.674932][T13961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.307750][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.338901][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.533629][T13957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.533645][T13957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.589192][T15212] fuse: Unknown parameter 'group_id00000000000000000000' [ 653.833048][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.875945][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.931746][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.955243][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.957236][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 654.440631][T15235] netlink: 'syz.0.2871': attribute type 1 has an invalid length. [ 654.501478][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2871'. [ 654.512789][T15238] bond7: entered promiscuous mode [ 654.513331][T15238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 655.082142][T15245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2873'. [ 656.196891][ T4910] Bluetooth: hci0: command tx timeout [ 657.778061][T15270] netlink: 'syz.2.2881': attribute type 1 has an invalid length. [ 657.779238][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2879'. [ 657.920926][T15277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2881'. [ 658.010482][T15277] bond8: entered promiscuous mode [ 658.011276][T15277] 8021q: adding VLAN 0 to HW filter on device bond8 [ 658.273904][ T4910] Bluetooth: hci0: command tx timeout [ 658.583230][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 658.583255][T15291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2884'. [ 660.079361][T15307] fuse: fd is not a fuse device [ 660.312629][T15312] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 660.350845][ T4910] Bluetooth: hci0: command tx timeout [ 661.289659][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2892'. [ 661.318276][T15225] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.318541][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.318789][T15225] bridge_slave_0: entered allmulticast mode [ 661.349246][T15225] bridge_slave_0: entered promiscuous mode [ 661.395907][T15225] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.396030][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.396204][T15225] bridge_slave_1: entered allmulticast mode [ 661.432709][T15225] bridge_slave_1: entered promiscuous mode [ 661.559451][T15225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.583729][T15225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.950051][T15225] team0: Port device team_slave_0 added [ 662.445644][ T4910] Bluetooth: hci0: command tx timeout [ 662.606032][T15225] team0: Port device team_slave_1 added [ 663.844641][T15225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.844659][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.844686][T15225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.874788][T15225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.874805][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.874831][T15225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.978459][T15225] hsr_slave_0: entered promiscuous mode [ 664.003383][T15225] hsr_slave_1: entered promiscuous mode [ 664.005643][T15225] debugfs: 'hsr0' already exists in 'hsr' [ 664.005667][T15225] Cannot create hsr debugfs directory [ 667.085873][T15376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2905'. [ 669.670586][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2914'. [ 670.806929][T15412] hsr_slave_1 (unregistering): left promiscuous mode [ 670.841578][T15421] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 671.095151][T15225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.095189][T15225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.795783][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2921'. [ 673.385801][T15225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.385825][T15225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.910878][T15225] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 673.912292][T15225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.917528][T15225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.630821][T15225] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 674.665081][T15225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.665116][T15225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.358763][T15225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 679.373758][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2939'. [ 679.373794][T15525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2939'. [ 679.443518][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.706552][T15525] geneve2: entered promiscuous mode [ 679.706571][T15525] geneve2: entered allmulticast mode [ 679.725949][T15225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 679.812868][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.831152][T15225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 679.871317][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.874021][T15225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 679.905846][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.362095][T15225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.469411][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.526657][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.526921][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.584459][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.585642][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.203528][T15225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.617483][T15225] veth0_vlan: entered promiscuous mode [ 684.962932][T15225] veth1_vlan: entered promiscuous mode [ 685.155667][T15225] veth0_macvtap: entered promiscuous mode [ 685.173050][T15225] veth1_macvtap: entered promiscuous mode [ 685.420043][T15225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.753032][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.753101][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.780366][T15225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.862013][T13961] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.862289][T13961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.162254][T13962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.163389][T13962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.534276][T15619] overlayfs: failed to resolve './cgroup': -2 [ 686.750309][T15625] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 687.764777][T15625] 8021q: adding VLAN 0 to HW filter on device bond9 [ 688.121952][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.121973][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.448837][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.448860][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.646603][T15645] netlink: 'syz.1.2962': attribute type 19 has an invalid length. [ 689.897137][T15659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2967'. [ 692.516594][T15676] random: crng reseeded on system resumption [ 692.635714][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 693.032600][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.069381][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.119859][T15676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.157151][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 693.206967][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 693.247005][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 694.913206][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2980'. [ 695.586751][ T4910] Bluetooth: hci4: command tx timeout [ 697.635665][ T4910] Bluetooth: hci4: command tx timeout [ 698.233600][ T3331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.233635][ T3331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 698.967926][ T3331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.967963][ T3331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 699.593199][ T3331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.593234][ T3331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 699.710770][ T4910] Bluetooth: hci4: command tx timeout [ 701.568126][ T3331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.568162][ T3331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 701.793803][ T4910] Bluetooth: hci4: command tx timeout [ 702.101535][ T5714] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 702.250799][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 702.252244][ T5714] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 702.253533][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.253563][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.253586][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 702.253623][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.346195][ T5714] usb 5-1: config 0 descriptor?? [ 702.973877][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 702.973895][ T36] audit: type=1326 audit(1791964127.228:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 702.973932][ T36] audit: type=1326 audit(1791964127.228:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 702.986826][ T36] audit: type=1326 audit(1791964127.238:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 702.986876][ T36] audit: type=1326 audit(1791964127.238:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 702.986915][ T36] audit: type=1326 audit(1791964127.238:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 702.987281][ T5714] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000B/input/input36 [ 702.990456][ T36] audit: type=1326 audit(1791964127.238:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 702.990500][ T36] audit: type=1326 audit(1791964127.238:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 702.990539][ T36] audit: type=1326 audit(1791964127.238:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 703.013784][ T36] audit: type=1326 audit(1791964127.258:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 703.013831][ T36] audit: type=1326 audit(1791964127.258:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15794 comm="syz.0.3005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc030fbe2d9 code=0x7ffc0000 [ 703.138854][ T5714] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 704.487332][ T3331] bridge_slave_1: left allmulticast mode [ 704.487357][ T3331] bridge_slave_1: left promiscuous mode [ 704.487518][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.676899][T15393] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 704.726295][ T3331] bridge_slave_0: left allmulticast mode [ 704.726332][ T3331] bridge_slave_0: left promiscuous mode [ 704.756501][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.920239][ T3331] batman_adv: batadv0: Interface deactivated: gretap1 [ 705.734454][ T31] usb 5-1: USB disconnect, device number 32 [ 705.807555][T15829] fuse: fd is not a fuse device [ 707.492429][ T3331] batman_adv: batadv0: Removing interface: gretap1 [ 707.621495][ T3331] bond4 (unregistering): (slave geneve2): Releasing active interface [ 708.020825][ T5704] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 708.174157][ T5704] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 708.179329][ T5704] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 708.179373][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 708.179387][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 708.179411][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.247063][ T5704] usb 5-1: config 0 descriptor?? [ 708.248810][T15854] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 708.291501][ T3331] bond3 (unregistering): (slave bond0): Releasing backup interface [ 708.352091][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.455663][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.520085][ T3331] bond0 (unregistering): Released all slaves [ 708.557579][ T3331] bond1 (unregistering): Released all slaves [ 708.645452][ T3331] bond2 (unregistering): Released all slaves [ 708.701678][ T3331] bond3 (unregistering): Released all slaves [ 708.768233][ T3331] bond4 (unregistering): Released all slaves [ 708.816326][ T3331] bond5 (unregistering): Released all slaves [ 708.895888][ T3331] bond6 (unregistering): Released all slaves [ 708.937351][ T3331] bond7 (unregistering): Released all slaves [ 708.997403][ T3331] bond8 (unregistering): Released all slaves [ 709.051083][ T3331] bond9 (unregistering): Released all slaves [ 709.112843][ T3331] bond10 (unregistering): Released all slaves [ 709.156122][ T3331] bond11 (unregistering): Released all slaves [ 709.919525][T15673] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.919658][T15673] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.919841][T15673] bridge_slave_0: entered allmulticast mode [ 709.930318][T15673] bridge_slave_0: entered promiscuous mode [ 709.966400][T15673] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.966523][T15673] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.966651][T15673] bridge_slave_1: entered allmulticast mode [ 709.991145][T15673] bridge_slave_1: entered promiscuous mode [ 710.143326][ T3331] tipc: Left network mode [ 710.262536][T15673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.275691][T15673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.001348][T15673] team0: Port device team_slave_0 added [ 711.010293][T15673] team0: Port device team_slave_1 added [ 711.622373][ T5704] usbhid 5-1:0.0: can't add hid device: -71 [ 711.622500][ T5704] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 711.669303][ T5704] usb 5-1: USB disconnect, device number 33 [ 711.850705][T15673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.850724][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.850750][T15673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.860591][T15673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.860614][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.860839][T15673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.764201][T15673] hsr_slave_0: entered promiscuous mode [ 712.777948][T15673] hsr_slave_1: entered promiscuous mode [ 712.785515][T15673] debugfs: 'hsr0' already exists in 'hsr' [ 712.785540][T15673] Cannot create hsr debugfs directory [ 714.778591][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3030'. [ 714.806973][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 715.958525][T15946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3037'. [ 717.093278][ T3331] hsr_slave_0: left promiscuous mode [ 717.097182][ T3331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.097209][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.114449][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3041'. [ 717.183117][ T3331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.202995][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.500109][ T3331] veth1_macvtap: left promiscuous mode [ 717.529516][ T3331] veth0_macvtap: left promiscuous mode [ 717.529792][ T3331] veth1_vlan: left promiscuous mode [ 717.598492][ T3331] veth0_vlan: left promiscuous mode [ 718.785275][T15993] fuse: fd is not a fuse device [ 719.322848][ T3331] team0 (unregistering): Port device team_slave_1 removed [ 719.385428][ T3331] team0 (unregistering): Port device team_slave_0 removed [ 719.533952][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3049'. [ 719.611016][T15975] bridge_slave_1: left allmulticast mode [ 719.611055][T15975] bridge_slave_1: left promiscuous mode [ 719.611332][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.751986][T15975] bridge_slave_0: left allmulticast mode [ 719.752012][T15975] bridge_slave_0: left promiscuous mode [ 719.752165][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.151629][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 720.723342][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 721.031796][T16017] hsr_slave_1 (unregistering): left promiscuous mode [ 721.575948][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3057'. [ 721.742534][T16045] netlink: 'syz.2.3059': attribute type 19 has an invalid length. [ 724.084593][ T3331] IPVS: stop unused estimator thread 0... [ 725.801633][T15673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 725.941181][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 725.945607][T15673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 726.145731][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 726.147473][T15673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 726.230968][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 726.233890][T15673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 726.337808][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 726.341244][T16108] tipc: Enabling of bearer rejected, failed to enable media [ 726.431718][T16103] fuse: fd is not a fuse device [ 727.766848][T15673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.834149][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 727.901636][T15673] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.934362][T13961] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.934817][T13961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.020966][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.021136][T13964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.583983][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'. [ 732.777801][T16207] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3083'. [ 733.035052][T16216] netlink: 'syz.1.3084': attribute type 10 has an invalid length. [ 733.035387][T16216] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.087649][T16216] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.166241][T16216] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.166401][T16216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.168136][T16216] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.185901][T16216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.284816][T16216] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 733.625141][T15673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.570432][T15673] veth0_vlan: entered promiscuous mode [ 734.602036][T15673] veth1_vlan: entered promiscuous mode [ 734.801509][T15673] veth0_macvtap: entered promiscuous mode [ 734.944004][ T4910] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 734.944047][ T4910] CPU: 1 UID: 0 PID: 4910 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 734.944077][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 734.944091][ T4910] Workqueue: hci1 hci_rx_work [ 734.944274][ T4910] Call Trace: [ 734.944290][ T4910] [ 734.944307][ T4910] dump_stack_lvl+0xe8/0x150 [ 734.944446][ T4910] sysfs_create_dir_ns+0x271/0x2a0 [ 734.944504][ T4910] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 734.944572][ T4910] ? rt_spin_unlock+0x165/0x200 [ 734.944660][ T4910] kobject_add_internal+0x62c/0xce0 [ 734.944748][ T4910] kobject_add+0x163/0x240 [ 734.944767][ T4910] ? rt_spin_unlock+0x159/0x200 [ 734.944797][ T4910] ? __pfx_kobject_add+0x10/0x10 [ 734.944825][ T4910] ? get_device_parent+0x370/0x3a0 [ 734.944938][ T4910] device_add+0x3fa/0xb80 [ 734.944965][ T4910] hci_conn_add_sysfs+0xd5/0x210 [ 734.945060][ T4910] le_conn_complete_evt+0xfe3/0x16d0 [ 734.945144][ T4910] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 734.945175][ T4910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 734.945205][ T4910] ? rt_mutex_slowunlock+0x219/0x460 [ 734.945230][ T4910] ? skb_pull_data+0xf0/0x200 [ 734.945397][ T4910] hci_le_conn_complete_evt+0x187/0x470 [ 734.945433][ T4910] hci_event_packet+0x67a/0xf10 [ 734.945457][ T4910] ? reacquire_held_locks+0x117/0x1a0 [ 734.945516][ T4910] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 734.945541][ T4910] ? __pfx_hci_event_packet+0x10/0x10 [ 734.945563][ T4910] ? rt_spin_unlock+0x159/0x200 [ 734.945597][ T4910] ? hci_send_to_monitor+0xe2/0x590 [ 734.945632][ T4910] hci_rx_work+0x3ee/0x1020 [ 734.945663][ T4910] ? process_scheduled_works+0x97a/0x1630 [ 734.945708][ T4910] process_scheduled_works+0xc3d/0x1630 [ 734.945774][ T4910] ? __pfx_process_scheduled_works+0x10/0x10 [ 734.945812][ T4910] ? assign_work+0x3cf/0x5d0 [ 734.945847][ T4910] worker_thread+0xa47/0xfb0 [ 734.945909][ T4910] kthread+0x38b/0x470 [ 734.945933][ T4910] ? __pfx_worker_thread+0x10/0x10 [ 734.945961][ T4910] ? __pfx_kthread+0x10/0x10 [ 734.945985][ T4910] ret_from_fork+0x514/0xb70 [ 734.946019][ T4910] ? __pfx_ret_from_fork+0x10/0x10 [ 734.946043][ T4910] ? __switch_to+0xc89/0x1420 [ 734.946092][ T4910] ? __pfx_kthread+0x10/0x10 [ 734.946117][ T4910] ret_from_fork_asm+0x1a/0x30 [ 734.946158][ T4910] [ 734.946416][ T4910] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 734.946459][ T4910] Bluetooth: hci1: failed to register connection device [ 737.339414][T15673] veth1_macvtap: entered promiscuous mode [ 737.467651][T15673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.495632][T15673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.741047][T13962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.864689][T13962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.080326][T13960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.699250][T13962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.323343][ T3334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.323368][ T3334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.992269][ T3334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.992292][ T3334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.234205][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 743.234264][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 743.477892][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 743.477951][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 744.111151][ T4910] Bluetooth: hci5: command 0x0406 tx timeout [ 746.880039][ T4910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.930976][ T4910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.971030][ T4910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.987639][ T4910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.995176][ T4910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 747.157042][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.157126][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.205314][ T5596] Bluetooth: hci2: command tx timeout [ 751.240870][ T5596] Bluetooth: hci2: command tx timeout [ 753.362537][ T5596] Bluetooth: hci2: command tx timeout [ 755.086516][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 755.578502][ T5596] Bluetooth: hci2: command tx timeout [ 758.840923][T16352] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.841058][T16352] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.841235][T16352] bridge_slave_0: entered allmulticast mode [ 758.847067][T16352] bridge_slave_0: entered promiscuous mode [ 758.890487][T16352] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.892702][T16352] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.892888][T16352] bridge_slave_1: entered allmulticast mode [ 758.896928][T16352] bridge_slave_1: entered promiscuous mode [ 759.528443][T16352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.044413][T16352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.062561][T16492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3151'. [ 760.323878][ T3334] bridge_slave_1: left allmulticast mode [ 760.323909][ T3334] bridge_slave_1: left promiscuous mode [ 760.324078][ T3334] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.421872][ T3334] bridge_slave_0: left allmulticast mode [ 760.421900][ T3334] bridge_slave_0: left promiscuous mode [ 760.422073][ T3334] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.292163][ T3334] batman_adv: batadv0: Removing interface: gretap1 [ 761.371819][ T3334] bond2 (unregistering): (slave geneve2): Releasing active interface [ 761.371839][ T3334] geneve2 (unregistering): left promiscuous mode [ 761.751120][ T3334] bond1 (unregistering): (slave bond0): Releasing backup interface [ 761.813584][ T3334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.873196][ T3334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.931965][ T3334] bond0 (unregistering): (slave bond7): Releasing backup interface [ 761.972116][ T3334] bond0 (unregistering): Released all slaves [ 761.978319][ T3334] bond1 (unregistering): Released all slaves [ 762.001577][ T3334] bond2 (unregistering): Released all slaves [ 762.062591][ T3334] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 762.062613][ T3334] wireguard0: left promiscuous mode [ 762.091146][ T3334] bond3 (unregistering): Released all slaves [ 762.108146][ T3334] bond4 (unregistering): Released all slaves [ 762.136597][ T3334] bond5 (unregistering): Released all slaves [ 762.159136][ T3334] bond6 (unregistering): Released all slaves [ 762.178973][ T3334] bond7 (unregistering): Released all slaves [ 762.197797][ T3334] bond8 (unregistering): Released all slaves [ 762.217670][ T3334] bond9 (unregistering): Released all slaves [ 762.275961][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'. [ 762.459591][T16502] random: crng reseeded on system resumption [ 762.583632][T16505] netlink: 'syz.0.3156': attribute type 1 has an invalid length. [ 762.607852][T16502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.812300][T16352] team0: Port device team_slave_0 added [ 762.812597][ T3334] tipc: Left network mode [ 762.868078][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'. [ 762.904078][T16505] 8021q: adding VLAN 0 to HW filter on device bond8 [ 762.971826][T16507] bond6: (slave veth0_to_bond): Releasing backup interface [ 763.108770][T16507] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 763.120450][T16352] team0: Port device team_slave_1 added [ 763.719642][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 763.719670][ T36] audit: type=1326 audit(1791964187.968:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.754613][ T36] audit: type=1326 audit(1791964187.968:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.794877][ T36] audit: type=1326 audit(1791964188.048:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.795162][ T36] audit: type=1326 audit(1791964188.048:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.795734][ T36] audit: type=1326 audit(1791964188.048:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.797038][ T36] audit: type=1326 audit(1791964188.048:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.797161][ T36] audit: type=1326 audit(1791964188.048:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.797410][ T36] audit: type=1326 audit(1791964188.048:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.797535][ T36] audit: type=1326 audit(1791964188.048:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 763.797977][ T36] audit: type=1326 audit(1791964188.048:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16524 comm="syz.1.3162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d80be2d9 code=0x7ffc0000 [ 764.213539][T16352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.213554][T16352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.213568][T16352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.373292][T16352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.373305][T16352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.373319][T16352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.608293][T16535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3164'. [ 765.416504][T16352] hsr_slave_0: entered promiscuous mode [ 765.427986][T16352] hsr_slave_1: entered promiscuous mode [ 765.454514][T16352] debugfs: 'hsr0' already exists in 'hsr' [ 765.454542][T16352] Cannot create hsr debugfs directory [ 766.676112][T16566] netlink: 'syz.1.3170': attribute type 1 has an invalid length. [ 767.153885][T16566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.194420][T16567] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 768.253206][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 768.330246][T16578] netlink: 'syz.0.3173': attribute type 1 has an invalid length. [ 768.546265][T16578] 8021q: adding VLAN 0 to HW filter on device bond9 [ 768.581866][T16580] bond8: (slave veth0_to_bond): Releasing backup interface [ 768.653413][T16580] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 770.135243][T16604] tipc: Enabling of bearer rejected, failed to enable media [ 770.259016][T16617] netlink: 'syz.0.3186': attribute type 1 has an invalid length. [ 770.376825][T16617] 8021q: adding VLAN 0 to HW filter on device bond10 [ 770.604639][T16619] bond9: (slave veth0_to_bond): Releasing backup interface [ 771.552504][T16619] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 771.971037][ T31] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 772.003146][ T3334] hsr_slave_0: left promiscuous mode [ 772.005959][ T3334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.046993][ T3334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.181674][ T31] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 772.183496][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 772.183623][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 772.183652][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 772.183693][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.274044][ T31] usb 4-1: config 0 descriptor?? [ 772.294055][T16634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 774.283567][ T3334] team0 (unregistering): Port device team_slave_1 removed [ 774.321435][ T3334] team0 (unregistering): Port device team_slave_0 removed [ 774.717554][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 776.237065][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 776.237192][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 776.275767][ T31] usb 4-1: USB disconnect, device number 44 [ 776.994713][T16681] netlink: 'syz.3.3195': attribute type 1 has an invalid length. [ 778.843045][T16681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.038240][T16682] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 779.040057][T16685] tipc: Enabling of bearer rejected, failed to enable media [ 780.149919][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3198'. [ 780.197125][ T4910] Bluetooth: hci0: command 0x0406 tx timeout [ 780.915439][T16700] random: crng reseeded on system resumption [ 781.495944][T16700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.868141][T16734] netlink: 'syz.4.3209': attribute type 19 has an invalid length. [ 787.552070][T16767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3217'. [ 789.154589][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'. [ 792.503315][T16810] netlink: 'syz.0.3224': attribute type 1 has an invalid length. [ 792.864966][T16811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3224'. [ 793.610532][T16811] bond11: entered promiscuous mode [ 793.624476][T16811] 8021q: adding VLAN 0 to HW filter on device bond11 [ 795.084797][ T3334] IPVS: stop unused estimator thread 0... [ 796.150962][T16836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3229'. [ 797.362750][T16848] netlink: 'syz.0.3230': attribute type 19 has an invalid length. [ 798.284969][ T5596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 798.284996][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 798.285021][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 798.285034][ T5596] Workqueue: hci0 hci_rx_work [ 798.285060][ T5596] Call Trace: [ 798.285069][ T5596] [ 798.285079][ T5596] dump_stack_lvl+0xe8/0x150 [ 798.285115][ T5596] sysfs_create_dir_ns+0x271/0x2a0 [ 798.285148][ T5596] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 798.285180][ T5596] ? rt_spin_unlock+0x165/0x200 [ 798.285208][ T5596] kobject_add_internal+0x62c/0xce0 [ 798.285240][ T5596] kobject_add+0x163/0x240 [ 798.285257][ T5596] ? rt_spin_unlock+0x159/0x200 [ 798.285285][ T5596] ? __pfx_kobject_add+0x10/0x10 [ 798.285312][ T5596] ? get_device_parent+0x370/0x3a0 [ 798.285342][ T5596] device_add+0x3fa/0xb80 [ 798.285368][ T5596] hci_conn_add_sysfs+0xd5/0x210 [ 798.285404][ T5596] le_conn_complete_evt+0xfe3/0x16d0 [ 798.285438][ T5596] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 798.285469][ T5596] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 798.285498][ T5596] ? rt_mutex_slowunlock+0x219/0x460 [ 798.285522][ T5596] ? skb_pull_data+0xf0/0x200 [ 798.285558][ T5596] hci_le_conn_complete_evt+0x187/0x470 [ 798.285592][ T5596] hci_event_packet+0x67a/0xf10 [ 798.285614][ T5596] ? reacquire_held_locks+0x117/0x1a0 [ 798.285652][ T5596] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 798.285675][ T5596] ? __pfx_hci_event_packet+0x10/0x10 [ 798.285697][ T5596] ? rt_spin_unlock+0x159/0x200 [ 798.285731][ T5596] ? hci_send_to_monitor+0xe2/0x590 [ 798.285764][ T5596] hci_rx_work+0x3ee/0x1020 [ 798.285795][ T5596] ? process_scheduled_works+0x97a/0x1630 [ 798.285826][ T5596] process_scheduled_works+0xc3d/0x1630 [ 798.285886][ T5596] ? __pfx_process_scheduled_works+0x10/0x10 [ 798.285919][ T5596] ? assign_work+0x3cf/0x5d0 [ 798.285951][ T5596] worker_thread+0xa47/0xfb0 [ 798.286006][ T5596] kthread+0x38b/0x470 [ 798.286028][ T5596] ? __pfx_worker_thread+0x10/0x10 [ 798.286054][ T5596] ? __pfx_kthread+0x10/0x10 [ 798.286077][ T5596] ret_from_fork+0x514/0xb70 [ 798.286102][ T5596] ? __pfx_ret_from_fork+0x10/0x10 [ 798.286124][ T5596] ? __switch_to+0xc89/0x1420 [ 798.286160][ T5596] ? __pfx_kthread+0x10/0x10 [ 798.286184][ T5596] ret_from_fork_asm+0x1a/0x30 [ 798.286222][ T5596] [ 798.319675][ T5596] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 798.319725][ T5596] Bluetooth: hci0: failed to register connection device [ 800.813156][T16865] netlink: 'syz.3.3236': attribute type 1 has an invalid length. [ 801.068729][T16869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3236'. [ 801.407727][T16869] bond2: entered promiscuous mode [ 801.408195][T16869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.547943][T16873] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3238'. [ 801.548565][T16873] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3238'. [ 806.125443][T16352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 807.953782][T16352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.594292][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.594360][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.193257][T16919] netlink: 'syz.0.3248': attribute type 1 has an invalid length. [ 809.264125][T16921] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3248'. [ 809.356136][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3248'. [ 810.438985][T16926] bond12: entered promiscuous mode [ 810.439419][T16926] 8021q: adding VLAN 0 to HW filter on device bond12 [ 810.799762][T16932] fuse: Bad value for 'fd' [ 811.638489][T14743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 811.692597][T14743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 811.723302][T14743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 811.752384][T14743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 811.760053][T14743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 814.753365][T16942] Bluetooth: hci3: command tx timeout [ 815.870723][T16942] Bluetooth: hci4: command 0x0406 tx timeout [ 816.831772][T14743] Bluetooth: hci3: command tx timeout [ 818.911085][T14743] Bluetooth: hci3: command tx timeout [ 820.267027][T16993] netlink: 'syz.3.3262': attribute type 1 has an invalid length. [ 820.360302][T17000] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3262'. [ 820.495658][T16998] fuse: fd is not a fuse device [ 820.521112][T17001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3262'. [ 821.325237][T14743] Bluetooth: hci3: command tx timeout [ 822.250888][T17001] bond3: entered promiscuous mode [ 822.251310][T17001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 826.217090][T17035] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3272'. [ 826.623415][T17037] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3272'. [ 826.648715][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.690472][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.767878][T17037] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.768052][T17037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.768538][T17037] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.768686][T17037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.862256][T17037] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3272'. [ 826.945274][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.947261][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.719111][T17054] fuse: fd is not a fuse device [ 839.305638][T17108] 9p: Bad value for 'rfdno' [ 840.497928][T16929] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.503777][T16929] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.503977][T16929] bridge_slave_0: entered allmulticast mode [ 840.513448][T16929] bridge_slave_0: entered promiscuous mode [ 840.521692][T16929] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.521836][T16929] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.522000][T16929] bridge_slave_1: entered allmulticast mode [ 840.528154][T16929] bridge_slave_1: entered promiscuous mode [ 841.184370][T17117] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3295'. [ 841.341199][T16929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.810430][T16929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.212544][T17132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3298'. [ 846.093000][T16929] team0: Port device team_slave_0 added [ 846.117073][T16929] team0: Port device team_slave_1 added [ 846.434353][T17139] netlink: 'syz.4.3302': attribute type 1 has an invalid length. [ 848.687064][T17139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 849.194820][T16929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.194833][T16929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.194847][T16929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.211835][T16929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.211853][T16929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.211878][T16929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.047719][T16929] hsr_slave_0: entered promiscuous mode [ 851.049060][T16929] hsr_slave_1: entered promiscuous mode [ 851.075304][T16929] debugfs: 'hsr0' already exists in 'hsr' [ 851.075324][T16929] Cannot create hsr debugfs directory [ 860.812788][T17196] CIFS mount error: No usable UNC path provided in device string! [ 860.812788][T17196] [ 860.812914][T17196] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 862.495852][T17202] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3316'. [ 865.114517][ T3289] kworker/u8:13 (3289) used greatest stack depth: 14472 bytes left [ 870.041454][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.041529][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.430510][T16942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 871.504920][T16942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 871.533319][T16942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 871.539250][T16942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 871.543167][T16942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 874.031118][T16942] Bluetooth: hci2: command tx timeout [ 874.795250][T17253] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3328'. [ 876.384480][T16942] Bluetooth: hci2: command tx timeout [ 877.446525][T17270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.510742][T16942] Bluetooth: hci2: command tx timeout [ 880.590804][T16942] Bluetooth: hci2: command tx timeout [ 881.819815][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 883.407531][T17300] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3341'. [ 890.014428][T17341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.214420][T17339] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3352'. [ 890.735947][T17343] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3352'. [ 894.530930][T17358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.863380][T17371] 9p: Bad value for 'rfdno' [ 899.539276][T17394] netlink: 'syz.3.3361': attribute type 19 has an invalid length. [ 899.909327][T17396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.287192][T17244] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.335032][T17244] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.335261][T17244] bridge_slave_0: entered allmulticast mode [ 901.354522][T17244] bridge_slave_0: entered promiscuous mode [ 901.376307][T17244] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.376434][T17244] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.376675][T17244] bridge_slave_1: entered allmulticast mode [ 901.396778][T17244] bridge_slave_1: entered promiscuous mode [ 902.166253][T17244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.276123][T17244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.104792][T17244] team0: Port device team_slave_0 added [ 904.124206][T17244] team0: Port device team_slave_1 added [ 904.583790][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'. [ 905.771943][T17244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.771962][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.771989][T17244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.893146][T17244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.893166][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.893194][T17244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.481580][T17244] hsr_slave_0: entered promiscuous mode [ 907.490229][T17244] hsr_slave_1: entered promiscuous mode [ 907.495320][T17244] debugfs: 'hsr0' already exists in 'hsr' [ 907.495350][T17244] Cannot create hsr debugfs directory [ 909.334964][T17428] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3370'. [ 909.461516][T17429] fuse: fd is not a fuse device [ 913.350293][T17440] syz.1.3374 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 918.372353][T17472] netlink: 'syz.1.3382': attribute type 19 has an invalid length. [ 920.079349][T17473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.380066][T14743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 930.545638][T14743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 930.561182][T14743] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 930.583018][T14743] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 930.596871][T14743] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 930.816632][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'. [ 931.313025][T14743] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 931.354960][T14743] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 931.359105][T14743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 931.368890][T14743] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 931.370062][T14743] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 931.497289][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.497351][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.147228][T17516] fuse: fd is not a fuse device [ 932.750799][T14743] Bluetooth: hci6: command tx timeout [ 933.618200][T14743] Bluetooth: hci7: command tx timeout [ 934.845957][T16942] Bluetooth: hci6: command tx timeout [ 935.713202][T16942] Bluetooth: hci7: command tx timeout [ 936.911969][T16942] Bluetooth: hci6: command tx timeout [ 937.850647][T16942] Bluetooth: hci7: command tx timeout [ 938.676721][T16942] Bluetooth: hci3: command 0x0406 tx timeout [ 939.151400][T16942] Bluetooth: hci6: command tx timeout [ 939.936287][T16942] Bluetooth: hci7: command tx timeout [ 941.093583][T17559] netlink: 'syz.0.3402': attribute type 19 has an invalid length. [ 952.828616][T17589] ======================================================= [ 952.828616][T17589] WARNING: The mand mount option has been deprecated and [ 952.828616][T17589] and is ignored by this kernel. Remove the mand [ 952.828616][T17589] option from the mount to silence this warning. [ 952.828616][T17589] ======================================================= [ 975.850164][T17506] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.850379][T17506] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.852739][T17506] bridge_slave_0: entered allmulticast mode [ 975.863134][T17506] bridge_slave_0: entered promiscuous mode [ 976.496560][T17506] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.496710][T17506] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.496917][T17506] bridge_slave_1: entered allmulticast mode [ 976.509323][T17506] bridge_slave_1: entered promiscuous mode [ 979.208382][T17506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.247743][T17506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.551136][T17657] netlink: 'syz.1.3423': attribute type 19 has an invalid length. [ 980.609383][T17660] netlink: 'syz.0.3424': attribute type 12 has an invalid length. [ 981.643648][T17506] team0: Port device team_slave_0 added [ 982.593470][T17506] team0: Port device team_slave_1 added [ 984.248186][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 986.300785][T17506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.300804][T17506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.300838][T17506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.497848][T17506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.497867][T17506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.497894][T17506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.063957][T17701] netlink: 'syz.4.3433': attribute type 19 has an invalid length. [ 995.701552][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.701623][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.008694][ T4910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 996.124744][ T4910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 996.139600][ T4910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 996.157543][ T4910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 996.158575][ T4910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 997.070854][ T4910] Bluetooth: hci2: command 0x0406 tx timeout [ 997.236844][T16942] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 997.304646][T16942] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 997.323079][T16942] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 997.328787][T16942] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 997.331302][T16942] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 998.018854][T17734] netlink: 'syz.4.3439': attribute type 12 has an invalid length. [ 998.352285][T14743] Bluetooth: hci4: command tx timeout [ 999.871159][T14743] Bluetooth: hci8: command tx timeout [ 1000.431587][T14743] Bluetooth: hci4: command tx timeout [ 1001.956565][T14743] Bluetooth: hci8: command tx timeout [ 1002.290699][T17764] netlink: 'syz.4.3445': attribute type 19 has an invalid length. [ 1003.140801][T14743] Bluetooth: hci4: command tx timeout [ 1004.037416][T14743] Bluetooth: hci8: command tx timeout [ 1004.631805][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3446'. [ 1005.150956][T14743] Bluetooth: hci4: command tx timeout [ 1006.110596][T14743] Bluetooth: hci8: command tx timeout [ 1015.614894][T17818] netlink: 'syz.1.3455': attribute type 19 has an invalid length. [ 1024.885004][T17666] IPVS: starting estimator thread 0... [ 1025.230708][T17862] IPVS: using max 8 ests per chain, 19200 per kthread [ 1026.692162][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1027.104323][T17871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1027.531429][ T37] INFO: task syz-executor:16929 blocked for more than 153 seconds. [ 1027.531453][ T37] Not tainted syzkaller #0 [ 1027.531465][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1027.531475][ T37] task:syz-executor state:D stack:18880 pid:16929 tgid:16929 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1027.531523][ T37] Call Trace: [ 1027.531530][ T37] [ 1027.531545][ T37] __schedule+0x16d9/0x5700 [ 1027.531695][ T37] ? __pfx___schedule+0x10/0x10 [ 1027.531736][ T37] rt_mutex_schedule+0x76/0xf0 [ 1027.531766][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1027.531798][ T37] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1027.531824][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1027.531849][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1027.531872][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1027.531912][ T37] ? device_del+0xa9/0x8f0 [ 1027.531943][ T37] ? device_del+0xa9/0x8f0 [ 1027.531962][ T37] mutex_lock_nested+0x168/0x1d0 [ 1027.531990][ T37] device_del+0xa9/0x8f0 [ 1027.532012][ T37] ? ida_free+0x2ac/0x310 [ 1027.532042][ T37] ? __pfx_ida_free+0x10/0x10 [ 1027.532071][ T37] ? __pfx_device_del+0x10/0x10 [ 1027.532096][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1027.532127][ T37] device_unregister+0x21/0xf0 [ 1027.532151][ T37] del_device_store+0x2b5/0x370 [ 1027.532253][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1027.532276][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1027.532318][ T37] ? sysfs_kf_write+0x166/0x260 [ 1027.532347][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1027.532370][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 1027.532404][ T37] vfs_write+0x61e/0xbb0 [ 1027.532458][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1027.532487][ T37] ? do_sys_openat2+0x14e/0x200 [ 1027.532506][ T37] ? kmem_cache_free+0x187/0x6d0 [ 1027.532559][ T37] ksys_write+0x156/0x270 [ 1027.532589][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1027.532627][ T37] do_syscall_64+0x166/0x520 [ 1027.532709][ T37] ? trace_irq_disable+0x3b/0x140 [ 1027.532751][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.532817][ T37] ? clear_bhb_loop+0x70/0xc0 [ 1027.532842][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.532868][ T37] RIP: 0033:0x7f5a83f8eb0e [ 1027.532892][ T37] RSP: 002b:00007ffef1c74198 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1027.532952][ T37] RAX: ffffffffffffffda RBX: 000055557d7b8500 RCX: 00007f5a83f8eb0e [ 1027.532968][ T37] RDX: 0000000000000001 RSI: 00007ffef1c74220 RDI: 0000000000000005 [ 1027.532980][ T37] RBP: 00007f5a8406610b R08: 0000000000000000 R09: 0000000000000000 [ 1027.532993][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.533006][ T37] R13: 00007ffef1c74220 R14: 00007f5a84d84620 R15: 0000000000000003 [ 1027.533039][ T37] [ 1027.533076][ T37] [ 1027.533076][ T37] Showing all locks held in the system: [ 1027.533087][ T37] locks held by rcuc/1/28: 3, last CPU#1: [ 1027.533110][ T37] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1027.533201][ T37] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1027.533254][ T37] #2: ffffffff8f1c3e20 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 1027.533318][ T37] locks held by ktimers/1/29: 4, last CPU#1: [ 1027.533332][ T37] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1027.533385][ T37] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1027.533445][ T37] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 1027.533566][ T37] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1027.533692][ T37] locks held by khungtaskd/37: 1, last CPU#0: [ 1027.533707][ T37] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1027.533771][ T37] locks held by kworker/u8:4/67: 2, on CPU#0: [ 1027.533785][ T37] #0: ffff88801ef31138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.533840][ T37] #1: ffffc9000152fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.533913][ T37] locks held by kworker/u8:18/3334: 2, on CPU#0: [ 1027.533928][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.533982][ T37] #1: ffffc9000e017c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534038][ T37] locks held by getty/5347: 2, on CPU#0: [ 1027.534052][ T37] #0: ffff88803719e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1027.534182][ T37] #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1027.534242][ T37] locks held by kworker/0:5/5704: 3, last CPU#0: [ 1027.534256][ T37] #0: ffff88813ff2a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534309][ T37] #1: ffffc90005757c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534362][ T37] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1027.534421][ T37] locks held by kworker/u8:5/13954: 2, last CPU#0: [ 1027.534436][ T37] #0: ffff88801ef31138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534489][ T37] #1: ffffc900201bfc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534541][ T37] locks held by kworker/u8:9/13956: 2, last CPU#0: [ 1027.534556][ T37] #0: ffff88801ef31138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534609][ T37] #1: ffffc900201dfc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534663][ T37] locks held by kworker/u8:11/13957: 2, last CPU#0: [ 1027.534677][ T37] #0: ffff88801ef31138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534731][ T37] #1: ffffc900201efc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534786][ T37] locks held by kworker/u8:17/13960: 2, last CPU#1: [ 1027.534801][ T37] #0: ffff888034038138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534855][ T37] #1: ffffc9002015fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534910][ T37] locks held by kworker/u8:19/13961: 3, on CPU#1: [ 1027.534924][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.534978][ T37] #1: ffffc9002016fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.535031][ T37] #2: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1027.535080][ T37] locks held by kworker/u8:22/13964: 2, last CPU#1: [ 1027.535096][ T37] #0: ffff88801ef31138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.535149][ T37] #1: ffffc9002022fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.535203][ T37] locks held by kworker/u8:23/13965: 6, on CPU#1: [ 1027.535217][ T37] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.535270][ T37] #1: ffffc9002023fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.535324][ T37] #2: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1027.535433][ T37] #3: ffff88802d0f4160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1027.535527][ T37] #4: ffff888030ae0310 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1027.535581][ T37] #5: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1027.535634][ T37] locks held by syz-executor/15673: 1, on CPU#1: [ 1027.535648][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1027.535699][ T37] locks held by syz-executor/16929: 5, on CPU#0: [ 1027.535714][ T37] #0: ffff88803683e510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1027.535770][ T37] #1: ffff88803d44a878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1027.535819][ T37] #2: ffff88802a63e008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1027.535871][ T37] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1027.535920][ T37] #4: ffff88802d0f4160 (&dev->mutex){....}-{4:4}, at: device_del+0xa9/0x8f0 [ 1027.535968][ T37] locks held by syz-executor/17244: 4, on CPU#0: [ 1027.535983][ T37] #0: ffff88803683e510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1027.536038][ T37] #1: ffff888029f53878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1027.536086][ T37] #2: ffff88802a63e008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1027.536139][ T37] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1027.536187][ T37] locks held by kworker/u8:0/17397: 3, on CPU#1: [ 1027.536202][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.536256][ T37] #1: ffffc90005137c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.536310][ T37] #2: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1027.536358][ T37] locks held by syz-executor/17506: 1, on CPU#1: [ 1027.536373][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1027.536427][ T37] locks held by syz-executor/17511: 1, on CPU#0: [ 1027.536442][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1027.536490][ T37] locks held by kworker/u8:1/17526: 2, last CPU#0: [ 1027.536504][ T37] #0: ffff88801ef31138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.536558][ T37] #1: ffffc9000685fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.536614][ T37] locks held by kworker/u8:2/17666: 2, on CPU#0: [ 1027.536628][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.536682][ T37] #1: ffffc90005ccfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.536737][ T37] locks held by syz-executor/17719: 5, last CPU#1: [ 1027.536751][ T37] #0: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1027.536799][ T37] #1: ffffffff90320220 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 1027.536914][ T37] #2: ffffffff90320460 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 1027.536964][ T37] #3: ffff888036025208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 1027.537013][ T37] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1027.537063][ T37] locks held by syz-executor/17727: 3, last CPU#1: [ 1027.537077][ T37] #0: ffffffff90b250b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1027.537163][ T37] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1027.537213][ T37] #2: ffffffff8f062038 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 1027.537263][ T37] locks held by kworker/u8:7/17794: 2, last CPU#0: [ 1027.537277][ T37] #0: ffff88801ef31138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.537331][ T37] #1: ffffc900049f7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.537386][ T37] locks held by kworker/u8:8/17843: 2, on CPU#0: [ 1027.537407][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.537455][ T37] #1: ffffc900042b7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1027.537501][ T37] locks held by syz.4.3467/17866: 2, last CPU#0: [ 1027.537514][ T37] #0: ffff8880129337b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1027.537578][ T37] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 1027.537639][ T37] locks held by syz.0.3469/17873: 2, last CPU#0: [ 1027.537654][ T37] #0: ffff8880129310b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 1027.537711][ T37] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1027.537770][ T37] locks held by modprobe/17880: 1, last CPU#0: [ 1027.537784][ T37] #0: ffff8880387eb7b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 1027.537835][ T37] [ 1027.537841][ T37] ============================================= [ 1027.537841][ T37] [ 1027.537851][ T37] NMI backtrace for cpu 0 [ 1027.537870][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1027.537908][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1027.537920][ T37] Call Trace: [ 1027.537927][ T37] [ 1027.537936][ T37] dump_stack_lvl+0xe8/0x150 [ 1027.537966][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1027.537990][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1027.538013][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1027.538039][ T37] sys_info+0x135/0x170 [ 1027.538058][ T37] watchdog+0xfd7/0x1030 [ 1027.538100][ T37] ? watchdog+0x1c7/0x1030 [ 1027.538133][ T37] kthread+0x38b/0x470 [ 1027.538153][ T37] ? __pfx_watchdog+0x10/0x10 [ 1027.538177][ T37] ? __pfx_kthread+0x10/0x10 [ 1027.538199][ T37] ret_from_fork+0x514/0xb70 [ 1027.538222][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.538242][ T37] ? __switch_to+0xc89/0x1420 [ 1027.538274][ T37] ? __pfx_kthread+0x10/0x10 [ 1027.538295][ T37] ret_from_fork_asm+0x1a/0x30 [ 1027.538331][ T37] [ 1027.538339][ T37] Sending NMI from CPU 0 to CPUs 1: [ 1027.538371][ C1] NMI backtrace for cpu 1 [ 1027.538385][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1027.538408][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1027.538419][ C1] RIP: 0010:rt_spin_trylock+0x5/0x2b0 [ 1027.538444][ C1] Code: ff ff 48 89 df 5b e9 9a f3 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 10 49 89 fe 49 bc 00 00 00 00 [ 1027.538462][ C1] RSP: 0018:ffffc90000a3efc8 EFLAGS: 00000287 [ 1027.538479][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000246 [ 1027.538492][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcc6960 RDI: ffff8880b8546cd8 [ 1027.538508][ C1] RBP: ffff88801e2c3e80 R08: ffffffff90b2397f R09: 1ffffffff216472f [ 1027.538523][ C1] R10: dffffc0000000000 R11: fffffbfff2164730 R12: ffff8880b8546cd8 [ 1027.538538][ C1] R13: 00000000ffffffff R14: ffff88801def0c80 R15: 00000000ffffff01 [ 1027.538553][ C1] FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 1027.538569][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1027.538583][ C1] CR2: 00007f84f4110eb8 CR3: 000000002a4e0000 CR4: 00000000003526f0 [ 1027.538601][ C1] Call Trace: [ 1027.538608][ C1] [ 1027.538616][ C1] kmem_cache_alloc_node_noprof+0x22d/0x660 [ 1027.538647][ C1] ? __alloc_skb+0x1db/0x7a0 [ 1027.538670][ C1] ? __alloc_skb+0x1db/0x7a0 [ 1027.538696][ C1] __alloc_skb+0x1db/0x7a0 [ 1027.538720][ C1] synproxy_send_client_synack+0x175/0xde0 [ 1027.538803][ C1] ? lock_acquire+0x115/0x350 [ 1027.538830][ C1] ? synproxy_pernet+0x45/0x270 [ 1027.538948][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1027.538973][ C1] ? nft_tproxy_eval+0x8d0/0x1c80 [ 1027.538997][ C1] ? synproxy_pernet+0x45/0x270 [ 1027.539027][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 1027.539057][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1027.539085][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1027.539147][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 1027.539178][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1027.539208][ C1] ? __asan_memset+0x22/0x50 [ 1027.539240][ C1] nft_do_chain+0x48d/0x1b10 [ 1027.539298][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 1027.539323][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1027.539354][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 1027.539387][ C1] ? __lock_acquire+0x747/0x2de0 [ 1027.539417][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1027.539495][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1027.539521][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1027.539549][ C1] ? lock_acquire+0x115/0x350 [ 1027.539578][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1027.539605][ C1] nf_hook_slow+0xc5/0x220 [ 1027.539638][ C1] NF_HOOK+0x21f/0x3c0 [ 1027.539662][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1027.539687][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1027.539709][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1027.539732][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1027.539760][ C1] ? ip_local_deliver+0x113/0x190 [ 1027.539785][ C1] NF_HOOK+0x336/0x3c0 [ 1027.539810][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1027.539833][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1027.539855][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1027.539878][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1027.539910][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1027.539932][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1027.539954][ C1] ? process_backlog+0x261/0xc50 [ 1027.539975][ C1] process_backlog+0x564/0xc50 [ 1027.540000][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1027.540028][ C1] __napi_poll+0xae/0x550 [ 1027.540049][ C1] net_rx_action+0x621/0xd70 [ 1027.540077][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1027.540114][ C1] handle_softirqs+0x1da/0x6d0 [ 1027.540147][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1027.540176][ C1] run_ktimerd+0x6a/0x100 [ 1027.540205][ C1] smpboot_thread_fn+0x565/0xa70 [ 1027.540236][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1027.540270][ C1] kthread+0x38b/0x470 [ 1027.540289][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1027.540318][ C1] ? __pfx_kthread+0x10/0x10 [ 1027.540339][ C1] ret_from_fork+0x514/0xb70 [ 1027.540359][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.540378][ C1] ? __switch_to+0xc89/0x1420 [ 1027.540407][ C1] ? __pfx_kthread+0x10/0x10 [ 1027.540426][ C1] ret_from_fork_asm+0x1a/0x30 [ 1027.540453][ C1] [ 1027.557246][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1029.302782][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1029.312421][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1029.322483][ T37] Call Trace: [ 1029.325765][ T37] [ 1029.328707][ T37] vpanic+0x56d/0xa60 [ 1029.332711][ T37] ? __pfx___schedule+0x10/0x10 [ 1029.337574][ T37] ? __pfx_vpanic+0x10/0x10 [ 1029.342110][ T37] panic+0xc5/0xd0 [ 1029.345836][ T37] ? __pfx_panic+0x10/0x10 [ 1029.350252][ T37] ? preempt_schedule_common+0x7f/0xd0 [ 1029.355727][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 1029.361110][ T37] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1029.367277][ T37] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1029.373443][ T37] watchdog+0x1030/0x1030 [ 1029.377801][ T37] ? watchdog+0x1c7/0x1030 [ 1029.382240][ T37] kthread+0x38b/0x470 [ 1029.386320][ T37] ? __pfx_watchdog+0x10/0x10 [ 1029.391009][ T37] ? __pfx_kthread+0x10/0x10 [ 1029.395604][ T37] ret_from_fork+0x514/0xb70 [ 1029.400190][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.405291][ T37] ? __switch_to+0xc89/0x1420 [ 1029.409965][ T37] ? __pfx_kthread+0x10/0x10 [ 1029.414546][ T37] ret_from_fork_asm+0x1a/0x30 [ 1029.419312][ T37] [ 1029.422583][ T37] Kernel Offset: disabled [ 1029.426907][ T37] Rebooting in 86400 seconds..