last executing test programs: 8m52.642724723s ago: executing program 1 (id=319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x10000002, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x200204) 8m52.418533289s ago: executing program 1 (id=323): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20}, 0x122) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 8m51.943998627s ago: executing program 1 (id=326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000000}], 0x0, 0x0, 0x0}) 8m51.786763392s ago: executing program 1 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount$overlay(0x0, 0x0, 0x0, 0x1000040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 8m51.573371482s ago: executing program 1 (id=329): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 8m51.053196371s ago: executing program 1 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8m50.684982157s ago: executing program 32 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8m1.063948371s ago: executing program 5 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000380)={0x0, 0x5, 0x200d, 0x1}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 7m59.777309392s ago: executing program 5 (id=525): syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe6242, 0x4ebfac6bbaf7949) fcntl$lock(r0, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) 7m57.262738114s ago: executing program 5 (id=535): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000002c0)=[@uexit={0x0, 0x18, 0x1000000000000}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x8ac}}, @uexit={0x0, 0x18}, @cpuid={0x64, 0x18, {0x9, 0x4b1}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18}, @set_irq_handler={0xc8, 0x20, {0xb8, 0x2}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}], 0x140}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x54000, 0xd000, 0x2, 0x1, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m55.316265658s ago: executing program 5 (id=541): syz_emit_ethernet(0x12, 0x0, 0x0) io_uring_setup(0xcaa, 0x0) userfaultfd(0x801) open$dir(&(0x7f0000000140)='./file0\x00', 0x40000, 0x0) ptrace(0x10, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x4, 0x5, '\x00', 0x1}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) 7m53.793408195s ago: executing program 5 (id=545): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 7m51.871781451s ago: executing program 5 (id=548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0x4000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty, 0xc70}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008"], 0x6c}}, 0x0) 7m36.655864963s ago: executing program 33 (id=548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0x4000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty, 0xc70}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008"], 0x6c}}, 0x0) 5m24.382702498s ago: executing program 2 (id=825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e0d05"], 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x222102, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a050000000000000000000500fffd14260000060a010300000000000000000100000908000b4000000002f02504803800018008000100647570002c0002800800014000000016080002400000001d080002400000000108000240000000160800024000000012100001800b00010072656a65637400000c00018008000100667764000c00018008000100647570000c00018008000100636d7000100001800b0001007461726765740000002501800e000100696d6d656469617465000000ec2402801800028014000280080003400000000308000180fffffffd0800014000000013800002801800028008000340000000030900020073797a3000000000280002800900020073797a320000000008000180ffffffff080001800000000108000340000000020c000280080003400000000430000280080003400000000208000180fffffffd080003400000000408000340000000040900020073797a320000000028000280240002800900020073797a310000000008000180fffffffe0900020073797a3100000000202402800410010022503b22898ce9ee8ea7be8ebd6a1129147348deb88cb35558d67a2ca60b8b30a35c15151c724855f61220c5d8d7d7153fd16d477e9c9203fe914cd12e1208679ea436c8572ccaa1b0b3a9c63b67245a31f7e26f0c5c7d876366ff96f83bb0937873efca9811f5376b2e052a6178e23332466ae1a423f0198b1b65814a235698a2c52aab1a3f28b73e2dbeff4820e24d25c4cdd61f44f1506f106ccceb0d1645b6f8b72ddd78d3a6318cc9a0bd8c0ef5a23453c5b3ec38c57eab0e773e7a8ae2e4b92ab77b38e15b70e109d9b8f22cadd193d362766e53976689fd678635af552c0d1219b9742f51e1158512bac2a81acb7eb8d605bf6774eee50a4dbda10e44d8c115cd667e608e21bcc18bf1047b2507812380a108374c41b098fede6b674203b31899a5c659cda242de2669a56c9f4f3c23f55316341376da0f441fd873c5944ce8511fde4309a3195070506dafd09409cfd699ca6c46139b35b29b4c07d23c8b708f19d81ff4b7a110789221c97bf845042611e3046bba4918d7ac19e7e0782b87a0f127695a47345a4b1bc34144a6d1482337e5f888f65ad9eaa91d1eb30184291e88a09ee1b3752a651381867ae3692379699750020b6ed9f06d67b9d9c2489fae48ec4bb3855b55a2df31d95d07de3795e8caf9f408bbfbf5b01fcbc3b0fbd7f44987d47b6420ff3ca722535a591b2687c537fb564f94589e828dbc4aa7f737ff0cdaff4f268a2daecc4bedf65230fee5d73cb7b4dacaeb5c09534910f7aa8462015ace2baea4a47cbbc3b783db17fdeebeda9af1c02c625d36b9bd283e51c4c6d5026155d666f2507dc149f4c9b5cb4007e2c46cecf8c83060bb7fd221cf2c596383b8faedd12af31cad751b458469291bcc2e77cb31cdb7841d526dd70e5a20995938fb7dda0ef1ae842e27b2e572053c842b67ec9406895d242be0e8dd999f4f0186a93b9f211551cd784faae4f3367b05270248b20b23a0c315ffedd233bb8b5ecebc3011983b68509aeb202d2a43d23806d6ceeadc9fc536c97c22328952d511823721c6ba4316926cf0877ed2f6393bd8448cd0eceb4abd6809521148030099de2ce21934152b91825f7efbbdeaeb45a07efa35016b28572dd2b07ce8791db8972896e3a4a44e36011aa3ca0dfad154f134b5ac0c2bb16b19e390ee30b762ee2c7b06453f1d1fdfd489a7f627ca863c764f3ae1b3aff18c0522b6de8231be6771e529ad84ba34dce18653444fcd619acff9aa85d0085e84ef79cf5e1e0ef0759ad0b9aa58375cf0bca2a9fb04ad37ce6dafd58d1e2ec92249c2739a3692e47f8dcf803c0457f60df4bfeab8b4336abc479a447151bc61589fb4da1b740c0e9bfadfa3582b9d45693e0d44f2f9449f8fc9890549e8445450301317a8cd1b6a3b934e0b2936f763077a704d6b55c038ce997892fab0646034456e74b19d5a97d81d8bb9b635ff6cd0384b73758ab19b519be99abc09a27ce46b44a81da906d736f825d950d8e19d02b435b0e711d14416ad9fe491d954c319f9b1157bbf5781a6d05555b4e8b34e04c572ffb776f6ee5d447b105fe4c1aadc297b80def633a5858b9dd9678f80fbdf835752b4c35a6d761c4bb015098d0d7eedd831d7a7502730c57e9e4f018bcc1507cb91cd4cdde88a675afc1c088ef11a18faf36ec1d9af99234315c8de9cf0131712773eda3e75a8ec79c7496d651375df158f161117b622b6356b6e646e69d774e539444490d93c13c6117110afbb97d6161c9e12929ed88b4763143b97c88277e2f88aad0a9f95a380e311b2941b8ee7634de70aa4c2bf77d517b3100131d883f05268e71960bfdb653ec5dad6c381cf261ea631150f690dccfb32f771f217d08b72d2617b3ede0dc710b5ef9d17677fd667393ae7e2c64ece669fd4efe72f0a8130e872f8925aea5c26419f3371b70e188447bb778fcd892694447510532d3ba8773ec8e179450486d3dbd3b8d728b133d33b2ee113059fb32f54b958c40e9891a33fd278a519657b2aaa7bb3f7e5f997bac284aecb14066ea03c3a286dc5a3bff11a38471626e85d24c878cf29f535cdf1fa7099a6e68d16274b04a241f4fc335adee472b2861c61bb3b77c3f25951444458523506740dcc7069a86d9f77398011204b4a600b8760d5824304b91245eb7d2f1c92892d6524bce769a9a1104dd11c011a75600a59bb476870715ad18c5e0bc675f6b45b9f7ebe69621f40018f131817ebd0a5d9f31316e3774bc2222ae8333fedccb7d22c18f047ad53a492d7cc41bdfa72b57c3ee1c9160435242c9e7e32cd420ad1afe5a4135c400c03a903818e0ef956c92bb724e39de6f1f4be72e3c520449f18716bddd6abbc71bb8b5e611be50c72f8c0a5844409a97c71bdc0ae0c6296541f756fba2f135ecab8bc58f84f30b9730c0f9016cd84fde4049741249ee74eddcda2c4c2c5b44873afac4d8882b555de10c3323d2b30d911202ecd2e0b012f0ca37805bab1bcc743d8f924e21290353bbf6dce0ae978f79a87b8722deed3fafbe3844f9c29b31f3317d125bc2a576e923a76a72c6e2a4d7c1e8125dce82d19d197173fc52aacd7da49cfb7c6a250564e33c721b0f0ce181eb61618abb12aaa8aa930215627517b3fce39042372e1498d625b520f29a3dbc9e18cf524b44c61bd312d525595d918360da81df0e71ae6a2c9ac142469ed32038ed3cf2128c02409c0d7f8b257da0fd909c54ae4b5279c837d25387c93c649d4d83a61c59b55cdee38468e0b2419f990ac7b3ff0967e5b28ae0ad295fbcf47cf81c6d5dc400aa848409636255a42945111403fb86366c9c722d128979e996d1f9c60e020c3b09768e3b0776292e5889d20b9bf706ede7ad52508f330652c70be28d291dea5973f0150c5db6e4623a165602b786347271a1021cce27465a18348284d9e16b79af11479c88dce7772cd8e711bb580bbcca0cb57b479fa01a16fc9339a14fb1ef5855cc241949119993bb895f0972accfd750b963091f6d86a553552132581528f73d3bbc7800ff7924c7cd92e5d1126cec1c2c78be999be054a72079a0729b75c119afd682bd38dcc0c73051de7e7391490c9e2b3ea0e95ce26d1fb34ad7e24a3f35456aa3d29c34119ee66af07a38396c8826b77285721284f1dbc4afa72bed9882dd894aee5f13cdc4b78844763eb39607174f7ba19c34134890f842405d9a706e2398eafff435a0a28aafac2fb06cf238f298834bc6b3b61fa5be168ccd304329a4a94c32344c4f7287b81cbe00f5e0b4c10e1dca9f34408a6fca150164a9605e7b2e68ea729ae1432f575d621cc0c7802d8ab06b8ff5184edbd3e4ac082ebd844435d6e2ab7c8e448c3587d268c533145ca914c7d0a1133c370081d86fdc6f9588fe6ccbba9f79d6d0677d04fd9c021ae4a62f3ee39440f6afeff0b463f3fa059da0750134696e09442bf60a9790eab44611f191ba1a6eac3891ec99912e39e39fa0309125f100ef40b005720606e3155b0a8ba67cc9e0afa7a5cd4bbefe553fab0bdcdbd313a5e5dc5da3be28ca47c52d9edb817d324406a1e47a670230f4220486caa12f4d21b3e4f5a68da2c762b8407720a43c58d2ee2620cc05e51d3be5bd6b79359d564cb0e769ad2ff4b2f2de1a41c2abef28b9378ee505d0beab7a74be2470637ec88951ae63c5ab37d145e28b9da7e2c4196cdb093d59699d164745cb24f0d989e88eea5a77dafb89ffcc0fe4c368dd45727870d1b543723bdcc54810ba60093a1ab7793eee96b65ad18d61a24715a315c2c40c6bba58e87e9cbd59a76d7306b6106d38086b37fc712e00af80d530251b4b65f142f56bb7f9fff6a6e86f6b032b4dc5f80b42149959687ee356a8cf9e27db54660083082a9afd441ec1c30b7b2fa181be329d86dfa89b1a71a8599578cc37bac66f7cc03f23e9d3f7abb04c046e4e0974688052fdf84b4d925d4337a3fe01aa41772fdd98c7e1fca812f459bcd84df7b94926aaf43f419562ad3ff0fb58125818859710c90d8d35c057552021cfbced60cfd36b448454b291b439d61c9782012a59e0b41345b83f697b668dac1874bbf78ab55d19c69f4f39de5e70b79d300824a86104982bcd1970b930f59d1984e50038ee6344781c8186562e74ff3d8aa5174353effb6fbb3008901b31884df715e353b91c65b9462cdad467c902fbce5f491bed17401b3eb244d557c7eba1a98ff236dad7c47d2d04535ffd273bb43e8a0d088d1a7475c8fe07d1b3648a3da1b234cd7d87f5c6ad0828c4e101ef1f70a8319e2351ead392a0a8221d5ac9e22a410ef2658767d00eae2a199d41f62edcea32165519e41c223eed429dd46da50ef0faf17ca1d39faaf747b2ae9ad686b8edaf5f066259f28471306e7a0bd40efe082476294539935542635f32e6ad6413c38f554a3a6d858886c7288eeb0559c935e610007e66daa8608fd09c0aba04eb62e22856bb4226f2850ca557940e1dd9f0ef9e5590f94b2eab33b28bdce4c5c2cc73e54ecf11fff2814fbad691e3b7c6dc538b090f17cca59dbb9647fe05a1aad22f20bd22b98bf08bf7ffd54152eb7ab8b9c0e6e8913fe73ea7184e250d6e2a1a61a77a4d03a14275150dbff651567bb7c8eb9f436555f32aa05ee7668a4cf1be1def1666069273f6af9647f7b80f8cb8a0acc62fd318e442217d52426615482b83f46e1d7157d6b5868974a07d43f4c4f5742aee735c9b059586123c0c390965017df9a73cc0d3c9c91abe29ca880867204ce5e60af51d06198a03f2d80bc9c477a146686923775cee13ab3754eb6d882c1fb83832b8c31ad40a5032d906f40abd15ed994648c75083743a58e307fca4bc08c35aea83cc55224c9652ec2075f27676af2e9e8680ff0298d2bdaca1a3338c5750834376b284458990e33975c8e136444f1c44d00c0f091223e4168a5d926cd47dc6e958db3a6a46609cde82e3af511ac58f146e4957f7d81ddb3e92532a53400acec51032c8db4372af33dc0b92fb2cdb8aa320860bbabb807fa48162e501d70b7c1f4cbf5edb176f4af3765ed5c49db4063b01cb391779354de41fa54a525ecc328aae5c2a0583b0b054bbddf1cd729eaf544c5a92e758fa9c69bdeb3e327f05ff7de9c90c9eba1cad393b203a0553aec0c9ad95b52836e4ddd4f25cc8c6dd28ae3867c1a1668b65a16621d59fae7129ac5454f7b06d71eebdd7e807ff0c29b7c128f1401f03321f10dfabe5ac03c27b1d4d7ef4fcc3ac486a61ea389a68afbbd8b1f3c8f45e357f8011b0653298c681ce18dbfd89acc464963cf2bbbef136b2a5e6ed409befa52cede901ed4fcab39fbffdebddd7dfc1da7ebab873d33db6abceda33098d0a83b4f2a1015ec71f920f2cceb7a17283a1d56666fab85f1df42bf35748be31a1f2b996115f639205cef9b5080fd8b74ea058b2367e3f0896bb76453612306241659e42ac0e3a06e1ccabcfd3cd137127c57a1216c06396ed6cb603f55766fae1debf84e96b6c092d48e50c81f1d078a2d6b1c4acc5e3d0d6cb7371d9bdefb7328a895ae32d1dd0cd24eaaa060f2d583aeb2bd2f55af6cb13d95fad08ef6a8d467fadfaf6d15d096cf5d0f4820ccb0939b15bd998d80315e8e9b876026a751e86c79f10762bbea03bbf0824fc3950b717f97cc47b7f388142510eb476dbe6d1840d074dad310d68c4eedff8febe3dc4001a0e0fe5e5a699488e1e8a43ba3100147624c69f20aafa49dcd54a456b220c15ed3151944444eb2e60255293713bf70c24950edc2fdbfe935d0060c36041001000107ef1d0768395e30dd33a42fdbf4d37452a2d80236c4a9ab38f6a384a6f40dce4ff288d56ec9b60e00695fec4aa64bdfe12635eb3b8e759247b5321b6725e64164c507dd028c4f4594140bb800221a54b0b9bb86e8ac1ae73a4e6f72077d86d6a8867703f89577548622932dbeb9b708ec34cc43da278b3e9538251d6310c07a8d21f8f8872e54ede5b1959c3465e9504c912086987ba8213a82fad556b956412c2f4758d646d309ccddab7327d9ad2f6411ee7027bfd53196e9c444372cadf35a53009928caff8fa3edd40f61f3addabdb81aa6bb3ab5bf938b704ac6cd086b0c7bb139a05b5974e1e5f7041956d43020986eda1a02e3e2e810ae8cb60bac20187eedd355602f75e03ff377c70b3cfc1fdbebc94064383ceebab1a14d82df7efc8fd6b36df2b24cdbd0c74bbff51e1ee43c6381f66095a28818929909a00dba8b6617142efac4ea1e2bcf52460086fc379ee564cd9ddccf421f89f6be8c458237a043273e4d007c0b417385cceca746b948f494ceb592b426be340f8560da240e26a2a20f3b66e0b505e742095c5e57314db3cd86d7f7740bec3cc30751b0b5af899f8d3ecf9843ff36f5237dec6889130a3b19a680e633fba1605926e50902dfd0c32b06228f64283fbd2b3e16db1b082be9cff63713205b54806f241e8c3b5bee16a941439adc67e474dcc4b8d56b26f77f6c2922aa1c09ec56779ce69d8c24a8ac93eb064a51a15628ef5c2ae58030ef0b3cc055ef1a59bd7ff517a7099a56897073aa280874e0febcf80399ecd289ab347381c29608fffc92251ed50f626232ee4a844b89cdb5488854e25a8dd0b84a504de53507fa1f9ba00cb0b2018eeb54a54e9d2bceb902e64e65ea9100982410a37aebe7f83973aec51979d9baf639421d635d85c3931d85aa7fb5d03fbb4a4412de3185cdae96e8204e67f09dc31c392bb659d51c8b8816a53ce522a5606f6a10883a59b7d3926fa8fda003c2100f8a0e34af1ed56d568ece1f13ddedf537ab149d539161249c4d5c213cff91693d002370fe4b25f8d2f0f1b4d50e6fd8cd7c75af24e965d55e62bacb961bf9029a6e4f55b2fd2b77f9b5607e514915029e1219d452c038e13a669a601b0a1d40d330883307c0e492072dcce1e8c581c653712f2cad60e89b00504983c60b05f94e3ae5d5cfda3677eef601ab7cf3052ffbd10d094c672e72dd64d43e5f8f7aa64ea51da6ad14aae73912126717edaf216ad61ee6b2d667bc74b4879ce8ca0ffc28fbc4116c9d34d40a3afa850f98f89e339dc413c4f3274cabaf1fb41fc38bca22625840d9f56fecd9653a674feeecd561029df85436a55eaa120c63c82ba5dd01b3924ed63ad5c21405f575e9474a7c59031edde942d2fb2b8b9d537fee02fc1cd94e24d9b971162a848f667e9b56c3b7f1cea948f6c030e40eb3f80685c31e626d09b47fbd2c650b538537b7fea40d0dd687f6d6993127185a0f87635a4cf5d3613e1ff6e2246020f892d977f726266cbd007f6b1ae13fe7879df1ff7500ddb56a1a7170483c4f80742d0d3b9b772bf1cda70ef87af74064456d9d921a802ad8a864f81097b8d0c8065330694510ab9659e1defb9c2e04a5b9082a0e218805abdb4ac80ebb4b47ba31ac8b35d49c98a75c6f45d302a633d19c60195a1ffa5bd021e7485f4dc0dd943303020ead93431473af3e75e0ef8f877972eb1a517dd72a07503a2422f0a845f977f7f5c9c3caeda42d7d36cf744971d91f6f4fa43e83be77667c63acd5ef81d50a5324beaa4d402eb87fa9a66807ff4bd2f7561b5e73fce2a7277f648149478a4b991babe6338972f5430d3690bfd4b451263b790fb3971c0b3614ab0687b5e6792264515083a0e8fe91b05807c1ae7d1aced9096063278f2effcb9012b330d83c73006f4ece592b193e5ad51e9ab23a40c429359e119941225a0c24f1f0f5c5c3bee6a81c1e3df17cb7b84878f33663676f3b8786e4db1e8ce89ee02f3632729af0ef90e8db77db07f828f7574b9804b472963aceead38c323e1f0a7a942ad248dc0c604ff60f8b3d68af8ec09e41687263918954e2e832195d5220c828a29ae089d9c972e7ae48ed03118cde655ccd955fc105c5ebc5b1b5991b6aa37e846b5f2f0747427220828a2b6f8af8819fa0892a16af88cdaf996e91741993416d3ab222e542f1c0759adbfb5e24c32c5b54ee14c4c089e7e61bc1cc7ee3f9a4c4ca293a6e85f668b7b6f9f478e7a63113533af810674d6c5def0cd74b226e31453de4986930cc1754f53976f58bc1f7c1e4d142f8c48eb03b62df99fb873a29ee3872f7c3cd42abe82137f9f33d4b094b044c2719339def7f7b11739adda999ecc83cde6661aef2a1dc9df8037f1f16bed0649a66f06d9d45914c77416447d7c0c511f00e0d66bfb77b9b2ab8174adeda986fdaf78c8a289e90d63acb685e89a49599dca9a234ea3bca1015fa81246de1aac5efaa61cf1dc2f910fcbe5cd399960858cb345e9d6d4834f6899cc19e741ae484b94e02a2139308caea7830688db5a3a298d7aaf29d405fd7e47164a81bbbdf25cc73631a1bc8c5d5001e4ecc0926d34ce3dd878a768c1499f79bf22d6a7ee33a78dfad09b5e01e325ca14ed728071da75eb6bab58e9b156eb67eb32a6d7c18353ab4c8a3c9fafc1db8db76d408810c7deceedef7172231a6edd08b470fdd3f5ead71d281dac7f3584ca4fac501f0c427b17869b73ed77e0dc1cba19f5717069716e7c6c4d582d0db6888153350effa436409b4bec6c95fd0a74c5ffff91200893b25ac1f0000dad5a84fa90840a49d57568213aac7191a488f83435c95ec0c04d4632f861008c8b3aff529b857df7c9bb57f933d46f8caf139f315a86c9d4b7bef06024971fa7a7216931756c84663c1911a9df8cef1be3b7a7939ceaaf5270734212c8cdbcf5abd2904398d4bb69b69ff96e54ac963b5c9e68cfdb428d7bc320ee8a2724f2842aeb4623e71b1d6dd1342c0211f2a376b49a2e79acf76c99147be0d3f8765280aa6e3cf12f598a82f3a1b7da5891864d5f77bdd9fa32f5d6f2141ac77c6de33e3fd25d1c9300bda077acc32673b3890c1e8d1334b2cd8552abd3818c6d6142de45558e43ad3e495fb9f0146b4de19cbbb47d0f3490df435c03d3b289764f929a9f8cb2f8789ed3184f84c086758082138d4c9e69ab35345f0c47089200229432a8ee26c2cdc485e29ea6a35122228eca6c0b62e15407627431601a5ec3082d74541339e3aed6831af3b89fd6dc101ec95a52b2eddf53060b53eb81da4c5965fc7f906e3d7c2733f8f04b0d65616c8a6e070b7ab29a76ff67b8b146065030dc274b2874260964a302f87676c8610ba831fcb4a7600b38c965b9661456235b2320255c2d24f27851a6b291f6800dcc8c5ffee1848782db077cefcad7e98c051de39d616caa9a9c902a952fec836ed52f2cddb9818fe34aeef1480597a3b1c1b57c31d891f0a7333f6fc8974f3ce55712a9c9ad40c0ea850fdca3653cae97ed815e8742247c8528e01b2ac2b1a20af872ad097c9577696672d9031691f8a411ffc7a8478c3ab9ca3186ca13dd9405edaa750ec59840b83f44ff53fd231fae7a4f8c70f49cc626630716aa71fb564b3fae2a7ec8e929d33ff69baea60361d6dc1dcc23ef4d5361e9aceb70bc0ccc86cdfb1a8577c4a3f6dae7f446468e05d661f90598f65e0638087eb91310aa79dabfcd7b4ada59debcc3496ab1f8e69b5f70a35f6365f62cdc8f9ef57ecb0ff3d3126716e7dcefba0f91dad21a04b4bf4dbac238229f252d5c4e34ce1cd9293c8612407a82062137fd2808535b73ba13b861695a0813dd789af0b8b0257407b99665486a0650423ef813cc53eba97b37b337d7bd1806ae602a6507f37e5b4f85402e2ae0d6451c2eaf8b0fe22f459a3e1fee36b27f668938781716ea85d64d15ac3d2e0e44bb8c3ef84f1ced5a5ba03af558bbefda9d09457f019efeef785861013b25f3f980393d9569bf0aea6d0b71a5ddca4da731b161b8b65846207f3c88e258ffab08b248f8889638a932795e1cff2af0a3f8ac3a92787cbd769af997a028552c55110be7b21d9a7ca0193d6f7d820834119e74be08a54fde4d1351cfb2bb6e4a0db21643d58fe29af2d100a55c5d490ee6a7560a6be1339acb1d276a161bc818c9339d41bf944ba5fd7f62ef796d62498b92f63c2aaca03b00d9c24c1b1f60a3560ebf83e8a15456622649ca2b04c9857dc6237544b749ca8ee5d23979043f87c69e9c8e214b31e1e7be4644cb9a5e11c84232ffb6cb4fa595121bd909134f1b046c00e66c8357185ee02d7a0ee761a95fe6d6bc337237bee5849988858217f2859d2b5df3ca8ede32541c16f04e8289bd462dfcbe568584d9ddac1f067a188ad3ba4ca92ad83b8f5b6cc267d0aae22097e284fd02c2ca1d02bd001d53fa99a00f7990ecf2d1bd6c0163be09461a77e19d49add20e1514a127221483aaad3022a2da87ae9138abeb8cf326b3a68ec92a6decff69a5bf2cce0bbeedcd3c2a5863845e6bf9f136c937d1019b3d307814ddb1cf81a389b802f4b90e29dcca292add8465fcc4e8edf60aecf9b06d9b9bb2c006bc04dc50783059d53d363d9d3d7bd06d4ab5ed74e6822be483aa918733c677aa55c3b9da6f8ff00eb0e772cadddad893ce637aecdec3a30118cc2f816a7c9923284979815d3c174dc2e7d700643fdbafa03915b4574e8b9a9effd14bcd59c50a8c3b9b8868d2824c9d93a1572e79736ff2525cac396667b41f67da2ee4a0db0a3a33752141ef161521b9d8141dc8f065537ec3e541efb7775e6d4b12acb6898a9c82d66c0460bc4b89cc2f0a71407beb2d72db6777c41f9b843d963988777dd9d49be9674790e20c0c3fafa60f7e74332025f7f23be7c5f0850cfacc671afc6c30990e727df44fd2caa93b6595a469febdb743b11434b31df67d976ec25d3c6c0923f57a28cc331e4ec9631909d5b0722cffda5c3303332ae5e2829ae64c6277b34521ceb8715d390bfdc0bd5f4c9fab47a7735e16158d7f619050e03d27667b99fa9e178d09d47cd354d73ef20dc2a7e2ac321ae5b3ae3d878d12ebc9f9ada1d3158dcd0e11cd717cc878d58b452063a70a5ce6ba5aba4092d26f3bb54031b592f20917fbef0b79cfe860ed6e0fa5470b209ff8885a3e06329bb8cf85b718d74c0fa2362d00c53c00e6f2cd2aaf3c16b5fa76a0fad293006790bc6d9d0afdb2092a3131ecfcadfd3793340042035b28168db6b192d6ec5ece64104a88200656b81d38bacc58ea83009260e556072a760d2d9bd03fea05b380d3ef55dd7741b39c8fc558c5c55be5327a28449ef50016f3a7b53e1604493635026ff1e234439d7196958979011ee218b31ebce359d0b0e3bd466897e0426ed4493e48c22d0e6f3ceb213b611ade9b994e5a8a0b0aabdc686ee37c0d87f6de3d30f062e1b2147eacbf0caa5b4f98eb63c52a5067aa56e857c09a645f29f6511c0e4facabf2ff862760d4cc66aa597b2815ad4d168de3f0291deee7eb9ee01435ef79cb5a0722dd8084b1fd349f9800ee19ac2cff5166b91061c40984a89b643bd222b026ffb9c8424172ef737d2f30a408f7eae7006af01465d66a9854b0cd5501c228a12d0d855b9bbef890a8ec1e0896882e13788559d58c027a9a73c048e04bb51dabdf91b6f8d3999030ec258f7fbfee60a649526f3677f73d2ce560d012c8b3b0cc0ccee4b2dd1f0ccf08004565e4a86f60566763c36988d1614f0193ff037f75d7eff00010045cd7c31d080faec3ed2c1bcc16709c45702438c50930ad2ce74776a4f05de90c4840a63597a04a0a48a234316e771b4fad9e7a7ecdf65010acca221a3d799f42d5ac63025eecbbaef94b9e373daabefae1e429cb1b7905da647cf97dfac7257be1b01bc3791d1e7bd92caf0589c2af958b73fa7730566ee5eff527b0d2dd2f9e010576169cf349de9e2ec21b521a182cb4b7be05575350c2af282d3a3dbdc2030344ad2b18c60df21d7dc249a3de70b5c5ff2028566418b5fb844752deaf2ea9c1660dd52c5fd16987c22f7b6fbfd13fd318dfcce7f647a17f848472c3fc9d203c2d7b6b940b6b8967a9e439cad2987346d8f5c42724e572699ea1d3bb66deb9763f209f76a0056000100a5bc202366ff8c58cf255b33ee5b26f9e529b53e0f7658c3b2eefb85bdbd9621acc096b4f31853c11f76e6a5ca58bff108176db3807923c3e8c3fa5d804009440cc708321dca3336a7d8b05d773e237331800000e0000100c07aadb125ed62015b07fc309760310d5005961ecde3332f3d88e49047980002ded9b5bc4866cfae749be30e4c8516d106d855b0a68f28dfc11b336267c6153a0f4dd8ab1a77b9ed793a8d5e7b0406b3b0f18ff1bd0f5596139c804502f9159375b33f49d67f8b8d6faef9d3855ee555f3be560332d8146c816c3fba362934fdf76a04889145f0801920490a61817048bd6941fc15fd24248ea8837aa357f8a22d1ac807131622f5acfc96f753194429914d082ab7376bec8faa4b25deb7da4a51ea95e96c885e34bc3e20b03cf580bd59d8e26204318f6477bac2c311000100c11476ba25b0720d6dccfd0770000000f90001000d561d342507f9691527b13208ed4f807383f0ef6351346fa4102b9e7c3c14bbea446444e758903b692ea585bb549bfc5ea8b83aa1e25e94e73c8a2622f09d2dfc61a9951b87c2734e8fe273287b2c4a9bbd82a5f140222e22b6aaf4f3c0b2570a25d82f16ec45eed8ab4e8348d03b6414ce7198d0d31217eab6a75e650bdb73d0fb99bb41a8dae4dcbf4f25285c40e61ff9c98e22ef0a06b10989722d772e7b1419935bf6407a3fab5421d51e4863d4f222be6176b3dfd996597e086ea628c0578c50e09ee7320db3f697ef8f64a0a6da2f22e78cbd48566cb3a8cab565ace1b5cf8b738510247214ac3afd0f9178dda3742b12a1000000240002800800034000000004080001800000000008000180fffffffe0800034000000004a500010061aac768c2199a01fad1510cf125da9b4ca88f2b4d1c6c611ff4bc50b0cfa85462d8b7ab2500007f70dd37416d719d4ea58ca78537ba2485f36a6d0fee035866f8f486ff7624a1a5e6a0ba0b80e02c4783a51fe6fc5319679e1f97440bf97c601baa18ed958013225341437e6f349e50f55ffaadc6277ad803cf0efebae4c28457d11beb19d74bd991a6340193cde954bc7f455f0512641006732a89365be2bcb6000000480001800b00010064796e7365740000380002800900010073797a32000000000800024000000000080002"], 0x2650}}, 0x0) 5m23.314285804s ago: executing program 2 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x8100, 0x0, 0x40041}, 0x1800c85c) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r3 = fanotify_init(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000340)=""/16, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) 5m23.035935188s ago: executing program 2 (id=828): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRESOCT=0x0, @ANYRESHEX=r0], 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x8044) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x8000) clock_gettime(0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r3}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8000, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 5m19.581779603s ago: executing program 2 (id=837): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) r8 = creat(0x0, 0xecf86c37d53049cc) close(r8) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000540)={0xd, 0x0, 0x4, {0x7, 0x5000, 0x401, 0x582}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000800) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) 5m10.686287917s ago: executing program 2 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x80) wait4(0x0, 0x0, 0x8, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) 5m9.344262387s ago: executing program 2 (id=862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xbf0}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000140), 0x200007, 0x48cc82) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000380)={0x3ff, 0x1, 0x0, "eef1b7de005bd152f35ed734fc000000000000000000000000000000004000", 0x43353039}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) lchown(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4m53.100674171s ago: executing program 34 (id=862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xbf0}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000140), 0x200007, 0x48cc82) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000380)={0x3ff, 0x1, 0x0, "eef1b7de005bd152f35ed734fc000000000000000000000000000000004000", 0x43353039}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) lchown(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m2.357433496s ago: executing program 4 (id=2845): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m2.067991823s ago: executing program 4 (id=2849): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xffffffffffffffff, 0x0) 1m1.932690898s ago: executing program 4 (id=2851): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xfb60, 0x1c881, 0x5000, 0x295}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m1.76173185s ago: executing program 4 (id=2854): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m1.644463455s ago: executing program 4 (id=2856): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.108166688s ago: executing program 4 (id=2861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1400000009000000", 0x8) 1m0.902919691s ago: executing program 35 (id=2861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1400000009000000", 0x8) 24.879602963s ago: executing program 8 (id=3346): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="400000001200000303000000fddbdf253000e780040002803bf0396524943bbfcffab8d640eba22f18d1c25fd9913be4ed03b5a68f1ca0210900000088a6bc06"], 0x40}], 0x1, 0x0, 0x0, 0x8d0}, 0x40004) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)={0x3c, 0x1c, 0x400, 0x70bd28, 0x25dfdbfc, "", [@nested={0x1c, 0x91, 0x0, 0x1, [@typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x15}]}, @nested={0x10, 0x66, 0x0, 0x1, [@nested={0x4, 0x49}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x80}, 0x4004000) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 24.703612922s ago: executing program 8 (id=3349): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f00000002c0)=""/97, 0x61}], 0x2}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1}, 0x2) 24.529063903s ago: executing program 8 (id=3352): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 24.156224253s ago: executing program 8 (id=3359): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2c000, 0x0) 23.981874074s ago: executing program 8 (id=3362): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 22.847813456s ago: executing program 8 (id=3372): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') 22.48994917s ago: executing program 36 (id=3372): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') 17.411618371s ago: executing program 3 (id=3414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.259247215s ago: executing program 3 (id=3437): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xf2812000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x4c080) r0 = socket(0x8, 0x800, 0x7) bind$netrom(r0, 0x0, 0x0) 11.051715267s ago: executing program 3 (id=3467): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd206, 0x8, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000480)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r2, 0x6e69, 0x0, 0xe, 0x0, 0x0) 7.952247146s ago: executing program 3 (id=3511): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000008000008000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x401, 0x3, 0x0, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004001}, 0x20008000) 4.79767789s ago: executing program 3 (id=3545): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {0xfff1, 0xffff}, {0x91e8d5c924b6df0f}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x4000800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0x0, 0xffff}, {0xfff3, 0x43627175ca38a7f0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x40004) 2.706940532s ago: executing program 0 (id=3571): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = eventfd2(0x8, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r2, &(0x7f0000000480)=""/82, 0x52) 1.87661627s ago: executing program 6 (id=3576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x8, 0x9}, @window={0x3, 0x2, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @timestamp, @window={0x3, 0x2b36, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) 1.758360503s ago: executing program 0 (id=3578): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x100000005, 0x2, 0x3, 0x2, 0x5, 0x8, {0xffffffffffffffff, 0x8, 0x32e5b4cb, 0xff, 0x3, 0x0, 0x7fffffff, 0x5b, 0x3, 0xa000, 0x3ff, r2, r3, 0x1, 0x4}}, {0x0, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 1.644298757s ago: executing program 6 (id=3579): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 1.611907154s ago: executing program 3 (id=3581): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x7, 0x0, [{0xb34, 0x0, 0xffffffff}, {0xb21, 0x0, 0xffffffffffffff10}, {0x931}, {0xa60, 0x0, 0x66b}, {0x2b8, 0x0, 0x400}, {0x669, 0x0, 0x1ff}, {0x936, 0x0, 0x8001}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@uexit, @nested_create_vm={0x12d, 0x18, 0x2}, @uexit, @wrmsr={0x65, 0x20, {0x9af, 0x1000}}, @wrmsr={0x65, 0x20, {0x26d, 0x1}}, @enable_nested={0x12c, 0x18}, @uexit, @nested_create_vm={0x12d, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x32, 0x6b, 0x100000001, 0x5}}, @uexit, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x2}}, @wr_crn={0x67, 0x20, {0x4, 0x81}}, @set_irq_handler={0xc8, 0x20, {0xa1, 0x1}}, @wr_crn={0x67, 0x20, {0x4, 0x44c}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2401, 0x4, 0x2, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}], 0x290}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x9, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.523325083s ago: executing program 9 (id=3375): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000001300)='\x103q}2\xa18/\xd5\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7R\x00\x00\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2\xfe@\x88c5\x8a\xd3\x7f\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\x02\xeaQy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xdaxO\x99\x804m[ai\x13\x02\xf0\x84c2s\xf0P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) ftruncate(r2, 0x80079a0) splice(r2, 0x0, r1, 0x0, 0x1002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xa00000000, 0x2) 1.295122071s ago: executing program 6 (id=3585): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.23326287s ago: executing program 9 (id=3586): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x10d00, 0x0) 1.120124545s ago: executing program 9 (id=3588): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 1.057699802s ago: executing program 6 (id=3589): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40000033, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 984.331788ms ago: executing program 9 (id=3591): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x324) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000"], 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000600)=""/225, 0xe1) 884.281831ms ago: executing program 6 (id=3593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x7c, 0x1, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 845.680136ms ago: executing program 6 (id=3594): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) 809.546984ms ago: executing program 7 (id=3595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 747.071998ms ago: executing program 0 (id=3596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 742.811477ms ago: executing program 9 (id=3597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_type(r3, &(0x7f0000000240), 0x9) 667.053058ms ago: executing program 7 (id=3598): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600), 0x0) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 414.394594ms ago: executing program 7 (id=3599): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 413.302612ms ago: executing program 0 (id=3600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2004e085}, 0x4000810) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) 263.990253ms ago: executing program 7 (id=3601): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001580)=ANY=[], 0x3d0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="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", 0xc1d) write$char_usb(r0, &(0x7f0000000380)="93c8d8d65d", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 263.483403ms ago: executing program 0 (id=3602): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 168.722438ms ago: executing program 7 (id=3603): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x4, 0x0, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x10}}}, 0x0, 0x0, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xaf6, 0x0) io_uring_enter(r1, 0x3514, 0x9141, 0x69, 0x0, 0x0) 100.639291ms ago: executing program 0 (id=3604): socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x29d, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0xfff, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x4, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x5, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=3605): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): t: 23 [ 326.335708][ T8791] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2565134291 [ 326.335728][ T8791] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 326.338761][ T8803] ubi31: background thread "ubi_bgt31d" started, PID 8803 [ 331.682898][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 331.682915][ T37] audit: type=1326 audit(1774087253.360:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.683235][ T37] audit: type=1326 audit(1774087253.360:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.683379][ T37] audit: type=1326 audit(1774087253.360:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.684311][ T37] audit: type=1326 audit(1774087253.360:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.685698][ T37] audit: type=1326 audit(1774087253.360:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.685727][ T37] audit: type=1326 audit(1774087253.360:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.685953][ T37] audit: type=1326 audit(1774087253.360:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.686030][ T37] audit: type=1326 audit(1774087253.360:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.687391][ T37] audit: type=1326 audit(1774087253.360:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 331.687610][ T37] audit: type=1326 audit(1774087253.360:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 334.162945][ T8869] syz.2.825 (8869): attempted to duplicate a private mapping with mremap. This is not supported. [ 334.517485][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 335.849802][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.6.829'. [ 336.652524][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 337.791232][ T5114] Bluetooth: hci5: command 0x0406 tx timeout [ 339.846789][ T5810] Bluetooth: hci5: command 0x0406 tx timeout [ 341.528228][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.528425][ T8941] batadv_slave_0: entered promiscuous mode [ 342.752264][ T5964] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 343.914163][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 344.020719][ T5964] usb 5-1: device descriptor read/all, error -71 [ 349.314097][ T8990] net_ratelimit: 10 callbacks suppressed [ 349.314133][ T8990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 358.003140][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 358.930769][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.930855][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.930898][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.931018][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.931041][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.000973][ T9] usb 5-1: config 0 descriptor?? [ 364.042561][ T9069] 9p: Bad value for 'rfdno' [ 364.087161][ T5114] Bluetooth: hci5: link tx timeout [ 364.087179][ T5114] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 364.119064][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 364.119136][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 365.817185][ T9078] overlayfs: failed to clone lowerpath [ 366.297600][ T5810] Bluetooth: hci5: command 0x0406 tx timeout [ 366.397853][ T810] usb 5-1: USB disconnect, device number 11 [ 368.220619][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.874'. [ 368.535726][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.573840][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.578311][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.603958][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.604583][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.828078][ T9116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 371.065179][ T5114] Bluetooth: hci2: command tx timeout [ 371.304378][ T9017] syz_tun (unregistering): left allmulticast mode [ 373.492291][ T5114] Bluetooth: hci2: command tx timeout [ 373.495253][ T37] kauditd_printk_skb: 100 callbacks suppressed [ 373.495270][ T37] audit: type=1326 audit(1774087295.160:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.495310][ T37] audit: type=1326 audit(1774087295.160:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.496857][ T37] audit: type=1326 audit(1774087295.160:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.496884][ T37] audit: type=1326 audit(1774087295.160:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.496905][ T37] audit: type=1326 audit(1774087295.160:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.496925][ T37] audit: type=1326 audit(1774087295.160:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.496945][ T37] audit: type=1326 audit(1774087295.160:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.496966][ T37] audit: type=1326 audit(1774087295.160:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.496985][ T37] audit: type=1326 audit(1774087295.160:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 373.497006][ T37] audit: type=1326 audit(1774087295.170:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b8fcc799 code=0x7ffc0000 [ 374.281952][ T6450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.419821][ T9093] chnl_net:caif_netlink_parms(): no params data found [ 374.690716][ T6450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.522726][ T5114] Bluetooth: hci2: command tx timeout [ 377.354472][ T6450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.602775][ T5114] Bluetooth: hci2: command tx timeout [ 378.448734][ T9198] netlink: 52 bytes leftover after parsing attributes in process `syz.6.894'. [ 379.066024][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.066100][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.156363][ T6450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.294800][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 379.294819][ T37] audit: type=1326 audit(1774087300.960:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9203 comm="syz.6.898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x0 [ 379.431039][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.431235][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.431435][ T9093] bridge_slave_0: entered allmulticast mode [ 379.456521][ T9093] bridge_slave_0: entered promiscuous mode [ 379.459865][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.460058][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.460241][ T9093] bridge_slave_1: entered allmulticast mode [ 379.494038][ T9093] bridge_slave_1: entered promiscuous mode [ 381.670748][ T9093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.679511][ T9228] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 381.721695][ T9093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.974120][ T9093] team0: Port device team_slave_0 added [ 382.019116][ T9093] team0: Port device team_slave_1 added [ 382.120796][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 382.120817][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 382.212047][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.212062][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.212083][ T9093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.262468][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.262481][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.262504][ T9093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.327028][ T6450] bridge_slave_1: left allmulticast mode [ 382.327053][ T6450] bridge_slave_1: left promiscuous mode [ 382.340044][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.467936][ T6450] bridge_slave_0: left allmulticast mode [ 382.467955][ T6450] bridge_slave_0: left promiscuous mode [ 382.468104][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.793877][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 383.418171][ T31] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 383.418339][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.418383][ T31] usb 1-1: Product: syz [ 383.418420][ T31] usb 1-1: Manufacturer: syz [ 383.418477][ T31] usb 1-1: SerialNumber: syz [ 383.509081][ T31] usb 1-1: config 0 descriptor?? [ 383.521161][ T31] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 383.738490][ T31] sonixb 1-1:0.0: Error reading register 00: -71 [ 383.770593][ T31] usb 1-1: USB disconnect, device number 8 [ 384.526526][ T6450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.614665][ T6450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.659873][ T6450] bond0 (unregistering): Released all slaves [ 385.024800][ T9093] hsr_slave_0: entered promiscuous mode [ 385.039996][ T9093] hsr_slave_1: entered promiscuous mode [ 385.041860][ T9093] debugfs: 'hsr0' already exists in 'hsr' [ 385.041883][ T9093] Cannot create hsr debugfs directory [ 387.602480][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 387.644313][ T6450] hsr_slave_0: left promiscuous mode [ 387.702392][ T6450] hsr_slave_1: left promiscuous mode [ 387.720933][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.740559][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.756040][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.756066][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.878781][ T6450] veth1_macvtap: left promiscuous mode [ 387.878876][ T6450] veth0_macvtap: left promiscuous mode [ 388.544185][ T6450] team0 (unregistering): Port device team_slave_1 removed [ 388.582712][ T6450] team0 (unregistering): Port device team_slave_0 removed [ 388.758685][ T9331] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 389.605556][ T9093] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 389.722288][ T5966] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 390.467580][ T9093] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 390.582843][ T9093] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 390.604225][ T5966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.604274][ T5966] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 390.604296][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 390.604316][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50562, setting to 64 [ 390.604340][ T5966] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 390.604372][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 390.604391][ T5966] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 390.605477][ T5966] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 390.605503][ T5966] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 390.605521][ T5966] usb 1-1: Manufacturer: syz [ 390.610503][ T5966] usb 1-1: config 0 descriptor?? [ 390.611685][ T9359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 390.632309][ T9093] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 390.852738][ T5862] usb 1-1: USB disconnect, device number 9 [ 390.927768][ T9385] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 391.183731][ T6450] IPVS: stop unused estimator thread 0... [ 391.552551][ T9093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.587735][ T9093] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.153448][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.157614][ T1401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.329268][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.329418][ T1401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.640983][ T9424] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 394.500605][ T9462] netlink: 136 bytes leftover after parsing attributes in process `syz.4.973'. [ 394.500629][ T9462] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 394.596484][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.971685][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.980'. [ 397.070185][ T9093] veth0_vlan: entered promiscuous mode [ 397.094013][ T9093] veth1_vlan: entered promiscuous mode [ 397.182590][ T9093] veth0_macvtap: entered promiscuous mode [ 397.203902][ T9093] veth1_macvtap: entered promiscuous mode [ 397.315130][ T9093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.382999][ T9093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.403985][ T9522] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:286 [ 397.434383][ T145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.436278][ T145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.436901][ T145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.436938][ T145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.341790][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 398.735119][ T5114] Bluetooth: hci5: unexpected event for opcode 0x080b [ 398.777729][ T6767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.777748][ T6767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.961934][ T6450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.961954][ T6450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.002316][ T5966] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 399.302277][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 399.304440][ T5966] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 399.304467][ T5966] usb 5-1: config 251 has no interface number 0 [ 399.304510][ T5966] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 399.304534][ T5966] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 399.304555][ T5966] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 399.304580][ T5966] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 399.304602][ T5966] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 12150, setting to 1024 [ 399.304626][ T5966] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 399.304648][ T5966] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.304673][ T5966] usb 5-1: config 251 interface 202 has no altsetting 0 [ 400.098643][ T5966] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 400.098661][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.098671][ T5966] usb 5-1: Product: syz [ 400.098678][ T5966] usb 5-1: Manufacturer: syz [ 400.098685][ T5966] usb 5-1: SerialNumber: syz [ 400.126715][ T9538] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.127009][ T9538] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.463564][ T5966] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 400.463648][ T5966] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 400.464231][ T5966] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 400.497155][ T5966] usb 5-1: USB disconnect, device number 12 [ 402.317561][ T5114] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 402.395969][ T37] audit: type=1326 audit(1774087324.070:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 402.396017][ T37] audit: type=1326 audit(1774087324.070:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 402.412774][ T37] audit: type=1326 audit(1774087324.070:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 402.412819][ T37] audit: type=1326 audit(1774087324.090:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 402.414911][ T37] audit: type=1326 audit(1774087324.090:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 402.414950][ T37] audit: type=1326 audit(1774087324.090:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 402.414984][ T37] audit: type=1326 audit(1774087324.090:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 402.418612][ T37] audit: type=1326 audit(1774087324.090:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 402.418659][ T37] audit: type=1326 audit(1774087324.090:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 403.065089][ T9654] openvswitch: netlink: VXLAN extension message has 196 unknown bytes. [ 403.582285][ T810] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 403.617588][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1051'. [ 403.694785][ T9683] team0: entered allmulticast mode [ 403.694806][ T9683] team_slave_0: entered allmulticast mode [ 403.694820][ T9683] team_slave_1: entered allmulticast mode [ 403.695466][ T9683] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 403.732229][ T810] usb 8-1: Using ep0 maxpacket: 8 [ 403.734209][ T810] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 403.734234][ T810] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 403.734253][ T810] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 403.734272][ T810] usb 8-1: config 250 has no interface number 0 [ 403.734313][ T810] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 403.734338][ T810] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 403.734359][ T810] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.734377][ T810] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 403.734398][ T810] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 403.734422][ T810] usb 8-1: config 250 interface 228 has no altsetting 0 [ 403.736072][ T810] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 403.736095][ T810] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 403.736114][ T810] usb 8-1: Product: syz [ 403.736127][ T810] usb 8-1: SerialNumber: syz [ 403.752056][ T810] hub 8-1:250.228: bad descriptor, ignoring hub [ 403.759564][ T810] hub 8-1:250.228: probe with driver hub failed with error -5 [ 404.054551][ T810] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 404.125470][ T810] usb 8-1: USB disconnect, device number 2 [ 404.156298][ T810] usblp0: removed [ 404.268562][ T9695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.389561][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1062'. [ 405.442914][ T9718] netlink: 'syz.6.1063': attribute type 27 has an invalid length. [ 405.442937][ T9718] netlink: 'syz.6.1063': attribute type 3 has an invalid length. [ 405.442949][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1063'. [ 405.814320][ T9727] netlink: 'syz.6.1065': attribute type 1 has an invalid length. [ 405.814403][ T9727] netlink: 'syz.6.1065': attribute type 2 has an invalid length. [ 406.121855][ T9733] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1069'. [ 406.725270][ T9753] netlink: 'syz.7.1077': attribute type 10 has an invalid length. [ 406.828222][ T9756] netlink: 'syz.4.1078': attribute type 21 has an invalid length. [ 406.828244][ T9756] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1078'. [ 407.009266][ T9753] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 407.061090][ T9756] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1078'. [ 407.338547][ T9768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.460507][ T9770] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1083'. [ 409.740988][ T9807] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1096'. [ 411.215808][ T9840] netlink: get zone limit has 4 unknown bytes [ 414.551062][ T9895] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 414.551090][ T9895] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 414.957009][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1134'. [ 416.058795][ T9931] tmpfs: User quota inode hardlimit too large. [ 417.021442][ T9944] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1151'. [ 417.476179][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 417.705498][ T9972] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1162'. [ 417.828003][ T9981] autofs4:pid:9981:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.32), cmd(0xc018937e) [ 417.828066][ T9981] autofs4:pid:9981:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 417.962455][ T9986] openvswitch: netlink: Invalid VLAN frame [ 418.129085][ T9994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.197233][T10001] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1175'. [ 418.248655][T10002] 8021q: VLANs not supported on ipvlan0 [ 419.705343][T10031] IPVS: set_ctl: invalid protocol: 44 100.1.0.255:20000 [ 422.319595][T10067] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 424.145055][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1225'. [ 424.651231][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1235'. [ 426.596161][T10185] netlink: 'syz.6.1248': attribute type 2 has an invalid length. [ 426.638644][T10188] trusted_key: encrypted_key: insufficient parameters specified [ 426.681017][T10185] !©9: entered promiscuous mode [ 427.954857][T10228] netlink: 'syz.6.1265': attribute type 21 has an invalid length. [ 427.954918][T10228] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1265'. [ 428.201145][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1267'. [ 429.502847][T10282] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1277'. [ 429.622867][T10286] geneve2: entered promiscuous mode [ 429.699672][ T5114] Bluetooth: hci5: unexpected event for opcode 0x2028 [ 429.914421][T10295] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1280'. [ 430.513641][T10312] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1289'. [ 430.771925][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1295'. [ 430.928751][T10326] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1296'. [ 431.114341][T10332] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 431.661143][T10343] bond3 (unregistering): Released all slaves [ 431.785087][T10350] netlink: 'syz.7.1307': attribute type 20 has an invalid length. [ 431.785112][T10350] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.981418][T10355] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1309'. [ 432.354792][T10368] tmpfs: Bad value for 'mpol' [ 432.583336][T10375] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1321'. [ 433.439040][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1329'. [ 434.849590][T10420] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 434.860426][T10420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 435.828639][T10448] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 436.337940][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.803416][ T810] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 437.965837][ T810] usb 5-1: unable to get BOS descriptor or descriptor too short [ 437.968179][ T810] usb 5-1: config 1 has an invalid interface number: 118 but max is 0 [ 437.968204][ T810] usb 5-1: config 1 has no interface number 0 [ 437.968254][ T810] usb 5-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 437.968275][ T810] usb 5-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 437.968290][ T810] usb 5-1: config 1 interface 118 has no altsetting 0 [ 438.114656][ T810] usb 5-1: string descriptor 0 read error: -22 [ 438.114812][ T810] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 438.114835][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.149946][T10501] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 438.226071][ T810] kobil_sct 5-1:1.118: KOBIL USB smart card terminal converter detected [ 438.243160][ T810] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 438.410048][ T5862] usb 5-1: USB disconnect, device number 13 [ 438.462182][ T5862] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 438.465322][ T5862] kobil_sct 5-1:1.118: device disconnected [ 438.601051][T10514] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1382'. [ 439.022312][ T5966] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 439.172273][ T5966] usb 8-1: Using ep0 maxpacket: 8 [ 439.188098][ T5966] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 439.188115][ T5966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.188126][ T5966] usb 8-1: Product: syz [ 439.188133][ T5966] usb 8-1: Manufacturer: syz [ 439.188149][ T5966] usb 8-1: SerialNumber: syz [ 439.258924][ T5966] usb 8-1: config 0 descriptor?? [ 439.476257][ T5966] dvb_usb_rtl28xxu 8-1:0.0: chip type detection failed -71 [ 439.476479][ T5966] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 439.539348][ T5966] usb 8-1: USB disconnect, device number 3 [ 440.017088][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.017129][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.785453][T10565] QAT: failed to copy from user. [ 441.880166][ T5114] Bluetooth: hci4: unexpected event for opcode 0x080d [ 442.035610][T10571] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 442.512197][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 442.662612][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 442.666264][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.667781][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.667795][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 442.670506][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 442.670523][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.670533][ T9] usb 5-1: Product: syz [ 442.670541][ T9] usb 5-1: Manufacturer: syz [ 442.670548][ T9] usb 5-1: SerialNumber: syz [ 443.450313][ T9] usb 5-1: 0:2 : does not exist [ 444.108585][ T9] usb 5-1: USB disconnect, device number 14 [ 444.470512][ T9013] udevd[9013]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.797196][T10614] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1425'. [ 445.709993][T10627] misc userio: Invalid payload size [ 445.720283][T10627] misc userio: No port type given on /dev/userio [ 445.753906][T10625] xt_bpf: check failed: parse error [ 446.913490][T10642] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1437'. [ 448.645206][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1461'. [ 448.645403][T10697] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1461'. [ 449.003217][T10711] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1469'. [ 449.374273][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 450.206809][T10760] random: crng reseeded on system resumption [ 450.417340][T10766] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1496'. [ 450.645461][T10774] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1497'. [ 451.283669][T10794] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1506'. [ 451.563864][ T5114] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 453.073098][T10856] netlink: 'syz.7.1526': attribute type 3 has an invalid length. [ 453.073123][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1526'. [ 453.550960][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 453.917121][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 454.111914][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 454.229081][T10901] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 454.896424][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1553'. [ 455.024785][T10929] capability: warning: `syz.4.1554' uses 32-bit capabilities (legacy support in use) [ 456.057496][T10958] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1567'. [ 456.057522][T10958] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1567'. [ 456.057538][T10958] netlink: 'syz.7.1567': attribute type 5 has an invalid length. [ 456.057550][T10958] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1567'. [ 457.623425][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1598'. [ 458.314768][T11032] netlink: 'syz.0.1602': attribute type 3 has an invalid length. [ 458.314791][T11032] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1602'. [ 458.440728][T11037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1606'. [ 458.722267][ T5812] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 458.899216][ T5812] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 458.899254][ T5812] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 458.899274][ T5812] usb 8-1: config 220 has no interface number 2 [ 458.899339][ T5812] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 458.899366][ T5812] usb 8-1: config 220 interface 0 has no altsetting 0 [ 458.899383][ T5812] usb 8-1: config 220 interface 76 has no altsetting 0 [ 458.899400][ T5812] usb 8-1: config 220 interface 1 has no altsetting 0 [ 458.907077][ T5812] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 458.907116][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.907136][ T5812] usb 8-1: Product: syz [ 458.907150][ T5812] usb 8-1: Manufacturer: syz [ 458.907164][ T5812] usb 8-1: SerialNumber: syz [ 459.615395][ T5812] usb 8-1: selecting invalid altsetting 0 [ 459.616167][ T5812] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 459.616225][ T5812] uvcvideo 8-1:220.0: No valid video chain found. [ 459.679271][ T5812] usb 8-1: selecting invalid altsetting 0 [ 459.679307][ T5812] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 459.708128][ T5812] usb 8-1: USB disconnect, device number 4 [ 459.750833][T11064] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1617'. [ 460.975535][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 462.221569][T11114] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1640'. [ 462.243502][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 463.030330][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 463.790591][ T37] audit: type=1326 audit(1774087385.460:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 463.790722][ T37] audit: type=1326 audit(1774087385.460:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 463.790948][T11149] CUSE: info not properly terminated [ 463.798655][ T37] audit: type=1326 audit(1774087385.470:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 463.798927][ T37] audit: type=1326 audit(1774087385.470:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f309c14cfce code=0x7ffc0000 [ 463.800168][ T37] audit: type=1326 audit(1774087385.470:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 463.800210][ T37] audit: type=1326 audit(1774087385.470:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 463.801294][ T37] audit: type=1326 audit(1774087385.470:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 463.801336][ T37] audit: type=1326 audit(1774087385.470:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 463.803472][ T37] audit: type=1326 audit(1774087385.480:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 463.806298][ T37] audit: type=1326 audit(1774087385.470:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11147 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 466.158339][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1688'. [ 466.242687][ T5966] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 466.392273][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 466.394349][ T5966] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.394379][ T5966] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.394414][ T5966] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 466.394436][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.501951][T11221] netlink: 'syz.6.1691': attribute type 10 has an invalid length. [ 466.881760][ T5966] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 467.165116][ T5966] usb 5-1: USB disconnect, device number 15 [ 467.292321][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 467.455561][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 467.455602][ T31] usb 8-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 467.455625][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.463967][ T31] usb 8-1: config 0 descriptor?? [ 467.874134][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 467.935752][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935796][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935823][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935849][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935875][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935899][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935923][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935948][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935973][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 467.935997][ T31] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 468.028382][ T31] cherry 0003:046A:0027.0005: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.7-1/input0 [ 468.132948][ T31] usb 8-1: USB disconnect, device number 5 [ 468.338237][T11275] fido_id[11275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 469.220066][T11311] mac80211_hwsim hwsim17 wlan1: Device is already in use. [ 469.292252][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 469.454646][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 469.484322][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 469.484352][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.484371][ T31] usb 1-1: Product: syz [ 469.484385][ T31] usb 1-1: Manufacturer: syz [ 469.484398][ T31] usb 1-1: SerialNumber: syz [ 469.542427][ T31] usb 1-1: config 0 descriptor?? [ 469.566265][ T31] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 469.566311][ T31] dw2102: su3000_power_ctrl: 1, initialized 0 [ 469.589102][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 469.605643][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.607038][ T31] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 469.607173][ T31] usb 1-1: media controller created [ 469.608014][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 469.608031][ T31] dw2102: i2c transfer failed. [ 469.608079][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 469.608092][ T31] dw2102: i2c transfer failed. [ 469.608106][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 469.608119][ T31] dw2102: i2c transfer failed. [ 469.608133][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 469.608146][ T31] dw2102: i2c transfer failed. [ 469.608160][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 469.608173][ T31] dw2102: i2c transfer failed. [ 469.608187][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 469.608199][ T31] dw2102: i2c transfer failed. [ 469.608207][ T31] dvb-usb: MAC address: 02:02:02:02:02:02 [ 469.735487][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.778429][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 469.778452][ T31] dw2102: command 0x0e transfer failed. [ 469.778462][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 469.778475][ T31] dw2102: command 0x0e transfer failed. [ 469.814653][T11336] vivid-003: disconnect [ 469.824571][T11335] vivid-003: reconnect [ 469.900554][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 469.900573][ T37] audit: type=1326 audit(1774087391.570:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11341 comm="syz.4.1751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89b8fcc799 code=0x0 [ 470.040643][T11351] tipc: Enabled bearer , priority 10 [ 470.082617][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 470.082639][ T31] dw2102: command 0x0e transfer failed. [ 470.082649][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 470.082661][ T31] dw2102: command 0x0e transfer failed. [ 470.082669][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 470.082681][ T31] dw2102: command 0x51 transfer failed. [ 470.096303][T11314] dvb-usb: bulk message failed: -22 (4/0) [ 470.096326][T11314] dw2102: i2c transfer failed. [ 470.178514][ T31] DVB: Unable to find symbol ds3000_attach() [ 470.178530][ T31] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 470.312235][ T31] rc_core: IR keymap rc-su3000 not found [ 470.312254][ T31] Registered IR keymap rc-empty [ 470.313733][ T31] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 470.316916][ T31] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input13 [ 470.361077][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 470.361103][ T31] dw2102: su3000_power_ctrl: 0, initialized 1 [ 470.361117][ T31] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 470.398651][ T31] usb 1-1: USB disconnect, device number 10 [ 470.544993][T11366] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1760'. [ 470.644367][ T31] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 470.990413][T11374] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1764'. [ 471.382290][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 471.542222][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 471.545724][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.545742][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.545764][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.545781][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.561825][ T9] usb 5-1: config 0 descriptor?? [ 471.581614][ T9] hub 5-1:0.0: USB hub found [ 471.782756][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 471.990087][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 471.990164][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 472.033509][ T9] usb 5-1: USB disconnect, device number 16 [ 472.136606][T11398] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1775'. [ 472.826920][ T37] audit: type=1326 audit(1774087394.470:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.830900][ T37] audit: type=1326 audit(1774087394.500:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.859554][ T37] audit: type=1326 audit(1774087394.530:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.877173][ T37] audit: type=1326 audit(1774087394.550:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.882901][ T37] audit: type=1326 audit(1774087394.550:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.884001][ T37] audit: type=1326 audit(1774087394.560:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.885134][ T37] audit: type=1326 audit(1774087394.560:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.887366][ T37] audit: type=1326 audit(1774087394.560:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.887701][ T37] audit: type=1326 audit(1774087394.560:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 472.966519][ T5114] Bluetooth: hci4: unknown advertising packet type: 0x82 [ 472.966563][ T5114] Bluetooth: hci4: Dropping invalid advertising data [ 472.966590][ T5114] Bluetooth: hci4: Malformed LE Event: 0x02 [ 473.118398][T11426] mmap: syz.0.1788 (11426) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 473.399651][T11432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1791'. [ 474.040012][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 474.040036][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'. [ 475.418366][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1813'. [ 479.940563][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1862'. [ 481.625752][ T5966] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 481.802276][ T5966] usb 8-1: Using ep0 maxpacket: 16 [ 481.805721][ T5966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.805755][ T5966] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.805801][ T5966] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 481.805825][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.862389][ T5966] usb 8-1: config 0 descriptor?? [ 482.318161][ T5966] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring [ 482.507865][ T5966] usb 8-1: USB disconnect, device number 6 [ 482.632323][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1886'. [ 484.128589][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 484.783315][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 484.783332][ T37] audit: type=1326 audit(1774087406.460:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.786081][ T37] audit: type=1326 audit(1774087406.460:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.792472][ T37] audit: type=1326 audit(1774087406.460:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.792517][ T37] audit: type=1326 audit(1774087406.470:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.831648][ T37] audit: type=1326 audit(1774087406.500:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.831696][ T37] audit: type=1326 audit(1774087406.500:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.831742][ T37] audit: type=1326 audit(1774087406.500:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.834379][ T37] audit: type=1326 audit(1774087406.510:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.834427][ T37] audit: type=1326 audit(1774087406.510:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 484.834645][ T37] audit: type=1326 audit(1774087406.510:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11719 comm="syz.6.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f7c37bec799 code=0x7ffc0000 [ 486.867538][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'. [ 487.654245][T11803] vivid-003: ================= START STATUS ================= [ 487.654402][T11803] vivid-003: Radio HW Seek Mode: Bounded [ 487.654451][T11803] vivid-003: Radio Programmable HW Seek: false [ 487.654461][T11803] vivid-003: RDS Rx I/O Mode: Block I/O [ 487.654471][T11803] vivid-003: Generate RBDS Instead of RDS: false [ 487.654481][T11803] vivid-003: RDS Reception: true [ 487.654513][T11803] vivid-003: RDS Program Type: 0 inactive [ 487.656964][T11803] vivid-003: RDS PS Name: inactive [ 487.656991][T11803] vivid-003: RDS Radio Text: inactive [ 487.657012][T11803] vivid-003: RDS Traffic Announcement: false inactive [ 487.657032][T11803] vivid-003: RDS Traffic Program: false inactive [ 487.657052][T11803] vivid-003: RDS Music: false inactive [ 487.657064][T11803] vivid-003: ================== END STATUS ================== [ 487.976403][T11815] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 488.016003][T11817] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 1 [ 490.217280][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1987'. [ 490.905299][ T5862] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 491.084564][ T5862] usb 8-1: Using ep0 maxpacket: 16 [ 491.089070][ T5862] usb 8-1: unable to get BOS descriptor or descriptor too short [ 491.091836][ T5862] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 491.096304][ T5862] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 491.096332][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.096351][ T5862] usb 8-1: Product: syz [ 491.096365][ T5862] usb 8-1: Manufacturer: syz [ 491.096378][ T5862] usb 8-1: SerialNumber: syz [ 491.281422][T11940] lo speed is unknown, defaulting to 1000 [ 491.294011][T11940] lo speed is unknown, defaulting to 1000 [ 491.295432][T11940] lo speed is unknown, defaulting to 1000 [ 491.415974][ T5862] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 491.416826][ T5862] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 491.668032][ T5966] lo speed is unknown, defaulting to 1000 [ 491.668249][T11940] infiniband sqz0: set down [ 491.668272][T11940] infiniband sqz0: added lo [ 491.738093][T11940] RDS/IB: sqz0: added [ 491.750806][T11940] smc: adding ib device sqz0 with port count 1 [ 491.751206][T11940] smc: ib device sqz0 port 1 has no pnetid [ 491.770645][ T5966] lo speed is unknown, defaulting to 1000 [ 491.784667][T11940] lo speed is unknown, defaulting to 1000 [ 491.910356][ T5862] usb 8-1: USB disconnect, device number 7 [ 491.997768][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 491.997792][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'. [ 492.201283][ T9087] udevd[9087]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.503371][T11940] lo speed is unknown, defaulting to 1000 [ 492.608739][ T5812] kernel write not supported for file /dsp1 (pid: 5812 comm: kworker/1:4) [ 492.997981][T11940] lo speed is unknown, defaulting to 1000 [ 493.446406][T11940] lo speed is unknown, defaulting to 1000 [ 494.556566][T11940] lo speed is unknown, defaulting to 1000 [ 495.080632][T12026] xt_policy: neither incoming nor outgoing policy selected [ 496.759661][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 496.759695][T12073] netlink: 'syz.6.2066': attribute type 29 has an invalid length. [ 496.759708][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2066'. [ 496.802306][ T5114] Bluetooth: hci2: command tx timeout [ 497.619903][T12095] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2077'. [ 498.872343][T12127] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2092'. [ 499.132250][ T5812] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 499.285532][ T5812] usb 8-1: unable to get BOS descriptor or descriptor too short [ 499.286109][ T5812] usb 8-1: not running at top speed; connect to a high speed hub [ 499.287388][ T5812] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.287409][ T5812] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.290865][ T5812] usb 8-1: string descriptor 0 read error: -22 [ 499.290983][ T5812] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.290996][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.312226][ T5966] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 499.369985][ T5812] usb 8-1: 0:2 : does not exist [ 499.488679][ T5966] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 499.488709][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.488779][ T5966] usb 5-1: Product: syz [ 499.488793][ T5966] usb 5-1: Manufacturer: syz [ 499.488807][ T5966] usb 5-1: SerialNumber: syz [ 499.506594][ T5966] usb 5-1: config 0 descriptor?? [ 499.547004][ T5966] usb 5-1: selecting invalid altsetting 1 [ 499.547025][ T5966] technisat-usb2: could not set alternate setting to 0 [ 499.549178][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2101'. [ 499.730206][ T5966] technisat-usb2: firmware version: 0.0 [ 499.730232][ T5966] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 500.037865][ T5966] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 500.043659][ T5812] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 500.049821][ T5966] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 500.058353][ T5812] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 500.071922][ T5966] usb 5-1: USB disconnect, device number 17 [ 500.075727][ T5812] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 500.258452][ T5812] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 500.296383][ T5812] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 500.355290][ T5812] usb 8-1: USB disconnect, device number 8 [ 500.557127][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.853504][T12172] program syz.4.2114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.455610][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455676][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.817034][T12220] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2132'. [ 502.833856][T12220] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2132'. [ 503.634276][T12233] tipc: New replicast peer: 255.255.255.255 [ 503.663248][T12233] tipc: Enabled bearer , priority 10 [ 505.228749][T12255] openvswitch: netlink: EtherType 50a is less than min 600 [ 506.136582][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'. [ 506.182587][ T810] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 506.334619][ T810] usb 5-1: config 0 has no interfaces? [ 506.381113][ T810] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 506.381143][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.381162][ T810] usb 5-1: Product: syz [ 506.381176][ T810] usb 5-1: Manufacturer: syz [ 506.381190][ T810] usb 5-1: SerialNumber: syz [ 506.425931][ T810] usb 5-1: config 0 descriptor?? [ 506.649729][ T5862] usb 5-1: USB disconnect, device number 18 [ 511.221433][T12360] IPVS: length: 24 != 49176 [ 512.311537][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.835220][ T810] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 514.002183][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 514.004797][ T810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.004820][ T810] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.006985][ T810] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 514.007011][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.007029][ T810] usb 1-1: Product: syz [ 514.007036][ T810] usb 1-1: Manufacturer: syz [ 514.007044][ T810] usb 1-1: SerialNumber: syz [ 514.044831][ T810] usb 1-1: config 0 descriptor?? [ 514.157630][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2201'. [ 514.157669][T12386] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2201'. [ 514.281439][ T36] usb 1-1: USB disconnect, device number 11 [ 514.439322][T12395] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.384739][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2213'. [ 515.542208][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 515.606220][T12423] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2216'. [ 515.724009][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.724041][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.724061][ T9] usb 8-1: Product: syz [ 515.724075][ T9] usb 8-1: Manufacturer: syz [ 515.724089][ T9] usb 8-1: SerialNumber: syz [ 515.793332][ T9] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 516.024823][ T5854] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 518.439336][ T5854] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 518.440064][ T5854] ath9k_htc: Failed to initialize the device [ 519.548532][ T5966] usb 8-1: USB disconnect, device number 9 [ 519.564000][T12443] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2223'. [ 519.601188][ T5966] usb 8-1: ath9k_htc: USB layer deinitialized [ 519.921465][T12455] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.322560][ T5854] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 520.472405][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 520.481486][ T5114] Bluetooth: hci2: adv larger than maximum supported [ 520.481505][ T5114] Bluetooth: hci2: Malformed LE Event: 0x0d [ 520.508247][ T5854] usb 8-1: unable to get BOS descriptor or descriptor too short [ 520.523797][ T5854] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 520.523822][ T5854] usb 8-1: can't read configurations, error -71 [ 521.092151][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 521.162171][ T810] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 521.262248][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 521.273582][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.273613][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.273648][ T31] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 521.273670][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.278218][ T31] usb 5-1: config 0 descriptor?? [ 521.354522][ T810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.354568][ T810] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 521.354590][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.359574][ T810] usb 1-1: config 0 descriptor?? [ 521.459959][T12493] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2242'. [ 521.761741][ T31] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 521.794687][ T810] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 521.898513][ T810] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input14 [ 521.993748][ T31] corsair 0003:1B1C:1B02.0007: Read invalid backlight brightness: bf. [ 522.115014][T12506] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2247'. [ 522.192664][ T5854] usb 5-1: USB disconnect, device number 19 [ 522.377158][ T810] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 522.422537][ T810] usb 1-1: USB disconnect, device number 12 [ 522.547175][T12511] fido_id[12511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 523.352274][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 523.509452][ T31] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 523.509469][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.509480][ T31] usb 5-1: Product: syz [ 523.509487][ T31] usb 5-1: Manufacturer: syz [ 523.509494][ T31] usb 5-1: SerialNumber: syz [ 523.526501][ T31] usb 5-1: config 0 descriptor?? [ 523.969958][ T31] usb 5-1: Firmware: major: 232, minor: 169, hardware type: HULUSB (4) [ 524.209149][ T31] usb 5-1: failed to fetch extended address, random address set [ 524.630270][ T31] usb 5-1: USB disconnect, device number 20 [ 525.034389][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'. [ 526.359010][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.399199][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.305654][T12590] batman_adv: batadv0: Adding interface: macvtap1 [ 528.305673][T12590] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.305702][T12590] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 531.350816][T12624] netlink: 'syz.0.2293': attribute type 8 has an invalid length. [ 531.723455][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 531.723473][ T37] audit: type=1800 audit(1774087453.400:242): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2295" name="nullb0" dev="tmpfs" ino=2668 res=0 errno=0 [ 531.960893][T12639] program syz.7.2297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.952217][ T9] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 535.130332][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.130362][ T9] usb 1-1: config 0 has no interface number 0 [ 535.130411][ T9] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 535.130439][ T9] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.130461][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 535.130492][ T9] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 535.130515][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.219046][ T9] usb 1-1: config 0 descriptor?? [ 535.572166][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 535.725533][ T31] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 535.725560][ T31] usb 5-1: config 0 has no interface number 0 [ 535.725603][ T31] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.728405][ T31] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 535.728435][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.728453][ T31] usb 5-1: Product: syz [ 535.728467][ T31] usb 5-1: Manufacturer: syz [ 535.728481][ T31] usb 5-1: SerialNumber: syz [ 535.739315][ T31] usb 5-1: config 0 descriptor?? [ 535.845301][ T31] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 535.859724][ T9] uclogic 0003:2179:0053.0009: pen parameters not found [ 535.859745][ T9] uclogic 0003:2179:0053.0009: interface is invalid, ignoring [ 535.882240][ T9] usb 1-1: USB disconnect, device number 13 [ 536.068001][ T31] usb 5-1: USB disconnect, device number 21 [ 536.094436][ T31] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 536.230061][T12741] kvm: kvm [12740]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xd [ 536.582281][T12752] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 536.582281][T12752] The task syz.7.2352 (12752) triggered the difference, watch for misbehavior. [ 536.832329][T12762] syzkaller0: tun_chr_ioctl cmd 35111 [ 537.642179][ T5863] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 537.811583][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.811634][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 537.811654][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.811690][ T5863] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 537.811709][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.873852][ T5863] usb 5-1: config 0 descriptor?? [ 538.094953][ T5966] usb 5-1: USB disconnect, device number 22 [ 538.349227][T12813] 9p: Bad value for 'rfdno' [ 539.597479][T12840] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2394'. [ 539.693121][T12848] overlayfs: failed to clone lowerpath [ 539.776799][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2400'. [ 539.806022][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2400'. [ 539.842330][ T5810] Bluetooth: hci3: command 0x1003 tx timeout [ 539.845407][ T5114] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 540.761107][T12868] 9p: Bad value for 'rfdno' [ 541.353934][T12889] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2416'. [ 541.405012][T12894] __vm_enough_memory: pid: 12894, comm: syz.6.2419, bytes: 11727122264064 not enough memory for the allocation [ 541.852226][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 542.004768][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.004794][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.006004][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 542.006027][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.006046][ T31] usb 5-1: SerialNumber: syz [ 542.285201][ T31] usb 5-1: 0:2 : does not exist [ 542.415252][ T31] usb 5-1: USB disconnect, device number 23 [ 542.428593][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 542.517384][ T9087] udevd[9087]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.582294][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 542.589032][ T9] usb 8-1: config 0 has no interfaces? [ 542.608709][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 542.608736][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.608754][ T9] usb 8-1: Product: syz [ 542.608768][ T9] usb 8-1: Manufacturer: syz [ 542.608781][ T9] usb 8-1: SerialNumber: syz [ 542.649297][T12933] syzkaller1: entered promiscuous mode [ 542.649323][T12933] syzkaller1: entered allmulticast mode [ 542.665964][ T9] usb 8-1: config 0 descriptor?? [ 542.882403][ T36] usb 8-1: USB disconnect, device number 12 [ 543.122211][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 543.272196][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 543.276399][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 543.276417][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 543.276428][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 543.276455][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 543.276466][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 543.276479][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 543.276501][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 543.276513][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.082751][ T31] usb 5-1: config 0 descriptor?? [ 544.327528][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 544.543170][ T31] usb 5-1: USB disconnect, device number 24 [ 544.560828][ T31] usblp0: removed [ 546.202582][ T31] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 546.352397][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 546.354396][ T31] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 546.354430][ T31] usb 8-1: config 0 has no interface number 0 [ 546.354471][ T31] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 546.354495][ T31] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 546.354518][ T31] usb 8-1: config 0 interface 41 has no altsetting 0 [ 546.357006][ T31] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 546.357033][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.357052][ T31] usb 8-1: Product: syz [ 546.357065][ T31] usb 8-1: Manufacturer: syz [ 546.357078][ T31] usb 8-1: SerialNumber: syz [ 546.445561][ T31] usb 8-1: config 0 descriptor?? [ 546.450721][T13006] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 546.450901][T13006] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 546.662643][T13006] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 546.662837][T13006] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 546.852291][ T36] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 547.002178][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 547.006869][ T36] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 547.007000][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 547.007028][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 547.007051][ T36] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.007142][ T36] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 547.007166][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.092465][ T31] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 547.093088][ T31] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 547.922517][ T31] usb 8-1: USB disconnect, device number 13 [ 548.155514][ T36] usb 5-1: usb_control_msg returned -32 [ 548.155561][ T36] usbtmc 5-1:16.0: can't read capabilities [ 549.610214][ T5854] usb 5-1: USB disconnect, device number 25 [ 549.714771][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2490'. [ 551.653094][T13103] macsec0: entered promiscuous mode [ 551.654167][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2507'. [ 552.395709][ T5854] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 552.481164][T13103] veth1_macvtap: left promiscuous mode [ 552.547143][T13110] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2510'. [ 552.591026][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 552.597789][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.597821][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.597863][ T5854] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 552.597886][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.607929][ T5854] usb 1-1: config 0 descriptor?? [ 553.702288][T13122] fuse: Bad value for 'fd' [ 553.841803][ T5854] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 554.080189][ T5854] usb 1-1: USB disconnect, device number 14 [ 555.644936][T13161] fuse: Bad value for 'fd' [ 556.246571][T13178] netlink: 'syz.0.2534': attribute type 4 has an invalid length. [ 558.389848][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2551'. [ 558.402239][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 558.452208][T13214] hsr_slave_0: left promiscuous mode [ 558.502075][T13214] hsr_slave_1: left promiscuous mode [ 558.586554][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.586588][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 558.586614][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.586638][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 558.586679][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 558.586701][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.654649][ T31] usb 5-1: config 0 descriptor?? [ 558.656262][T13210] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.081090][ T31] hid_parser_main: 28 callbacks suppressed [ 559.081176][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 559.081204][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 559.081231][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 559.081256][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 559.081281][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 559.171795][ T31] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 561.126544][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb80400: rx timeout, send abort [ 561.130409][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fb80400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 561.261402][ T36] usb 5-1: USB disconnect, device number 26 [ 562.072317][ T5862] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 562.232160][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 562.237645][ T5862] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 562.237695][ T5862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.237708][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 562.237720][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 562.237734][ T5862] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.237757][ T5862] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 562.237769][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.569204][ T5862] usb 1-1: usb_control_msg returned -32 [ 562.569233][ T5862] usbtmc 1-1:16.0: can't read capabilities [ 562.599613][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2569'. [ 562.888429][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.888495][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.990444][T13262] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 563.190395][T12996] usb 1-1: USB disconnect, device number 15 [ 565.049084][ T5114] Bluetooth: hci2: command 0x0406 tx timeout [ 565.852171][ T5862] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 566.005382][ T5862] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.005410][ T5862] usb 8-1: config 0 has no interface number 0 [ 566.005456][ T5862] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 566.005478][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.055421][ T5862] usb 8-1: config 0 descriptor?? [ 566.074642][ T5862] usb 8-1: selecting invalid altsetting 1 [ 566.076155][ T5862] dvb_ttusb_budget: ttusb_init_controller: error [ 566.076175][ T5862] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 566.336732][ T5862] DVB: Unable to find symbol cx22700_attach() [ 566.439153][ T5862] DVB: Unable to find symbol tda10046_attach() [ 566.439169][ T5862] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 566.460266][ T5862] usb 8-1: USB disconnect, device number 14 [ 569.009412][T13378] binder: 13374:13378 ioctl c0306201 0 returned -14 [ 569.010423][T13378] binder: 13374:13378 ioctl 40087602 0 returned -22 [ 570.299768][ T37] audit: type=1326 audit(1774087491.930:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.299818][ T37] audit: type=1326 audit(1774087491.970:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.348017][ T37] audit: type=1326 audit(1774087492.020:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.348065][ T37] audit: type=1326 audit(1774087492.020:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.349108][ T37] audit: type=1326 audit(1774087492.020:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.349160][ T37] audit: type=1326 audit(1774087492.020:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.349199][ T37] audit: type=1326 audit(1774087492.020:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.374030][ T37] audit: type=1326 audit(1774087492.050:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.374080][ T37] audit: type=1326 audit(1774087492.050:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 570.385036][ T37] audit: type=1326 audit(1774087492.050:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13394 comm="syz.0.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f309c18c799 code=0x7ffc0000 [ 572.084347][T12996] kernel read not supported for file /mdstat (pid: 12996 comm: kworker/0:1) [ 574.262536][T13463] fuse: Bad value for 'fd' [ 574.602190][T12996] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 574.773083][T12996] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.773110][T12996] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.774888][T12996] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 574.774915][T12996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 574.774934][T12996] usb 8-1: SerialNumber: syz [ 575.058583][T13489] netlink: 400 bytes leftover after parsing attributes in process `syz.6.2665'. [ 575.073107][T12996] usb 8-1: 0:2 : does not exist [ 575.150712][T12996] usb 8-1: USB disconnect, device number 15 [ 575.339256][ T9087] udevd[9087]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.394288][T13525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.005600][T13553] loop7: detected capacity change from 0 to 7 [ 577.035496][T13553] Dev loop7: unable to read RDB block 7 [ 577.035540][T13553] loop7: unable to read partition table [ 577.035861][T13553] loop7: partition table beyond EOD, truncated [ 577.035898][T13553] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 577.050941][ C1] blk_print_req_error: 5 callbacks suppressed [ 577.050959][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 577.450208][T13569] loop8: detected capacity change from 0 to 8 [ 577.462265][T13569] Dev loop8: unable to read RDB block 8 [ 577.462311][T13569] loop8: unable to read partition table [ 577.462511][T13569] loop8: partition table beyond EOD, truncated [ 577.462538][T13569] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–) failed (rc=-5) [ 578.324788][T13583] input: syz0 as /devices/virtual/input/input17 [ 578.949406][T13601] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2712'. [ 578.949430][T13601] nbd: must specify at least one socket [ 579.662242][T12996] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 579.709992][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2721'. [ 579.833448][T12996] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 579.833479][T12996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.833498][T12996] usb 1-1: Product: syz [ 579.833511][T12996] usb 1-1: Manufacturer: syz [ 579.833525][T12996] usb 1-1: SerialNumber: syz [ 579.842943][T13026] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 579.995872][T13026] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 579.995919][T13026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.995944][T13026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.995965][T13026] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 579.997660][T13026] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 579.997687][T13026] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 579.997706][T13026] usb 5-1: Manufacturer: syz [ 580.049933][T13026] usb 5-1: config 0 descriptor?? [ 580.156399][T12996] rtl8150 1-1:1.0: couldn't reset the device [ 580.156841][T12996] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 580.191818][T12996] usb 1-1: USB disconnect, device number 16 [ 580.499353][T13026] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 580.551255][T13026] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 580.792705][ T5964] usb 5-1: USB disconnect, device number 27 [ 581.202435][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 581.205647][ T31] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 581.205669][ T31] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 582.605219][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2737'. [ 583.808922][T13744] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2749'. [ 584.323242][ T31] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 584.323267][ T31] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 584.332298][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 584.660016][ T37] kauditd_printk_skb: 449 callbacks suppressed [ 584.660033][ T37] audit: type=1326 audit(1774087506.330:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13769 comm="syz.7.2757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d57a8c799 code=0x0 [ 586.606687][T13779] lo speed is unknown, defaulting to 1000 [ 588.562293][ T5810] Bluetooth: hci5: command 0x0406 tx timeout [ 588.563106][ T31] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 588.563126][ T31] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 590.779819][T13883] hsr0: entered promiscuous mode [ 590.837416][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2795'. [ 591.368141][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'. [ 591.368170][T13891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2799'. [ 591.392882][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'. [ 591.392913][T13891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2799'. [ 591.715867][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2805'. [ 591.762166][T13847] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 591.922299][T13847] usb 1-1: Using ep0 maxpacket: 32 [ 591.937545][T13847] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 591.937572][T13847] usb 1-1: config 0 has no interface number 0 [ 591.937614][T13847] usb 1-1: config 0 interface 12 has no altsetting 0 [ 591.957596][T13904] team0: Port device team_slave_0 removed [ 591.960049][T13847] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 591.960077][T13847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.960096][T13847] usb 1-1: Product: syz [ 591.960110][T13847] usb 1-1: Manufacturer: syz [ 591.960124][T13847] usb 1-1: SerialNumber: syz [ 591.990908][T13847] usb 1-1: config 0 descriptor?? [ 592.562593][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 592.562959][ T31] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 592.562975][ T31] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 593.267069][T13847] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 593.267199][T13847] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 593.267258][T13847] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 593.267345][T13847] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 593.370440][T13847] usb 1-1: USB disconnect, device number 17 [ 594.327195][T13996] bridge0: entered allmulticast mode [ 594.340649][T13996] bridge_slave_1: left promiscuous mode [ 594.366925][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.469814][T13996] bridge_slave_0: left allmulticast mode [ 594.469843][T13996] bridge_slave_0: left promiscuous mode [ 594.470166][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.619759][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2828'. [ 594.621243][T14002] netlink: 'syz.7.2828': attribute type 22 has an invalid length. [ 594.621264][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2828'. [ 594.979514][T14004] netlink: 'syz.4.2829': attribute type 12 has an invalid length. [ 594.979538][T14004] netlink: 'syz.4.2829': attribute type 29 has an invalid length. [ 594.979550][T14004] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2829'. [ 594.979619][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2828'. [ 594.979645][T14002] netlink: 'syz.7.2828': attribute type 22 has an invalid length. [ 595.043409][ T1401] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.043961][ T1401] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.050901][ T1401] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.050955][ T1401] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.502229][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 596.652200][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 596.653814][ T31] usb 1-1: config 0 has no interfaces? [ 596.653847][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 596.653865][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.657761][ T31] usb 1-1: config 0 descriptor?? [ 596.895359][T14040] netlink: 'syz.0.2846': attribute type 11 has an invalid length. [ 596.999803][ T31] usb 1-1: USB disconnect, device number 18 [ 597.327207][T14068] netlink: 'syz.7.2860': attribute type 1 has an invalid length. [ 597.327224][T14068] netlink: 'syz.7.2860': attribute type 2 has an invalid length. [ 597.903374][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.940877][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.944510][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.964297][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.965138][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 597.988209][ T5854] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 598.008317][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.008700][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.009046][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.010066][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.010704][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.114689][T14083] lo speed is unknown, defaulting to 1000 [ 598.189417][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.189444][ T5854] usb 1-1: config 0 has no interfaces? [ 598.189472][ T5854] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.189495][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.269742][ T5854] usb 1-1: config 0 descriptor?? [ 598.730106][ T5854] usb 1-1: USB disconnect, device number 19 [ 598.832822][ T5863] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 598.968993][T14083] chnl_net:caif_netlink_parms(): no params data found [ 598.996859][ T5863] usb 8-1: Using ep0 maxpacket: 8 [ 599.001185][ T5863] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 599.001238][ T5863] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 599.001260][ T5863] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 599.001284][ T5863] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 599.001306][ T5863] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.001344][ T5863] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 599.001365][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.249991][T14083] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.250225][T14083] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.250416][T14083] bridge_slave_0: entered allmulticast mode [ 599.253767][T14083] bridge_slave_0: entered promiscuous mode [ 599.257138][T14083] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.257317][T14083] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.257791][T14083] bridge_slave_1: entered allmulticast mode [ 599.260240][T14083] bridge_slave_1: entered promiscuous mode [ 599.305306][T14083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.310658][T14083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.360840][ T5863] usb 8-1: usb_control_msg returned -32 [ 599.360887][ T5863] usbtmc 8-1:16.0: can't read capabilities [ 599.367866][T14083] team0: Port device team_slave_0 added [ 599.371168][T14083] team0: Port device team_slave_1 added [ 599.464187][T14083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.464204][T14083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.464228][T14083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.472831][T14083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.472846][T14083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.472870][T14083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.530704][ T36] usb 8-1: USB disconnect, device number 16 [ 599.726967][T14083] hsr_slave_0: entered promiscuous mode [ 599.728181][T14083] hsr_slave_1: entered promiscuous mode [ 599.728996][T14083] debugfs: 'hsr0' already exists in 'hsr' [ 599.729017][T14083] Cannot create hsr debugfs directory [ 600.092248][ T5810] Bluetooth: hci3: command tx timeout [ 600.782656][T14151] fuse: Bad value for 'fd' [ 600.919659][T14083] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 600.991213][T14083] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 601.026602][T14083] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 601.112643][T14083] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 601.534922][T14083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.559258][T14083] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.571397][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.571601][ T8714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.930560][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.930830][ T8714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.162613][ T5810] Bluetooth: hci3: command tx timeout [ 602.569989][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.594762][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 602.600009][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 602.622654][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 602.623475][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 603.260162][T14223] __nla_validate_parse: 2 callbacks suppressed [ 603.260261][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2928'. [ 603.391132][T14201] lo speed is unknown, defaulting to 1000 [ 603.851450][T14083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.245259][ T5810] Bluetooth: hci3: command tx timeout [ 604.652285][ T5810] Bluetooth: hci0: command tx timeout [ 604.749246][ T1401] bridge_slave_1: left allmulticast mode [ 604.749273][ T1401] bridge_slave_1: left promiscuous mode [ 604.749501][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.825399][ T1401] bridge_slave_0: left allmulticast mode [ 604.825447][ T1401] bridge_slave_0: left promiscuous mode [ 604.827807][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.958925][ T1401] vlan2: left allmulticast mode [ 604.958947][ T1401] bridge0: left allmulticast mode [ 604.959241][ T1401] vlan2: left promiscuous mode [ 604.959253][ T1401] bridge0: left promiscuous mode [ 604.959622][ T1401] bridge1: port 1(vlan2) entered disabled state [ 606.174164][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.266886][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.295028][ T1401] bond0 (unregistering): Released all slaves [ 606.307011][ T1401] bond1 (unregistering): Released all slaves [ 606.322207][ T5810] Bluetooth: hci3: command tx timeout [ 606.492231][T14083] veth0_vlan: entered promiscuous mode [ 606.534636][T14083] veth1_vlan: entered promiscuous mode [ 606.729692][T14083] veth0_macvtap: entered promiscuous mode [ 606.745238][ T5810] Bluetooth: hci0: command tx timeout [ 606.769230][T14083] veth1_macvtap: entered promiscuous mode [ 606.808238][T14083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.866754][ T1401] IPVS: stopping backup sync thread 11817 ... [ 606.880818][T14083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.887228][ T1401] IPVS: stopping backup sync thread 11815 ... [ 606.924274][T14201] chnl_net:caif_netlink_parms(): no params data found [ 606.957692][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.989866][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.057813][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.325309][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.411264][ T37] audit: type=1326 audit(1774087530.080:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14416 comm="syz.6.3004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c37bec799 code=0x0 [ 608.495743][T14201] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.495849][T14201] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.496102][T14201] bridge_slave_0: entered allmulticast mode [ 608.576427][T14201] bridge_slave_0: entered promiscuous mode [ 608.612369][T14201] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.612456][T14201] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.612663][T14201] bridge_slave_1: entered allmulticast mode [ 608.670731][T14201] bridge_slave_1: entered promiscuous mode [ 608.802707][ T5810] Bluetooth: hci0: command tx timeout [ 608.930738][T14201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.073064][ T1401] hsr_slave_0: left promiscuous mode [ 609.113706][ T1401] hsr_slave_1: left promiscuous mode [ 609.114352][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.156443][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.497689][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3030'. [ 610.929412][ T5810] Bluetooth: hci0: command tx timeout [ 611.762893][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 611.812478][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 612.594066][ T8715] smc: removing ib device sqz0 [ 612.637802][T14201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.650361][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.650381][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.182576][T14201] team0: Port device team_slave_0 added [ 613.204846][T14201] team0: Port device team_slave_1 added [ 613.211009][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.211027][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.694171][T14201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.694188][T14201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.694212][T14201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.696322][T14201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.696335][T14201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.696356][T14201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.478019][T14201] hsr_slave_0: entered promiscuous mode [ 614.528952][T14201] hsr_slave_1: entered promiscuous mode [ 615.317756][T14607] overlayfs: failed to clone lowerpath [ 615.351318][T14607] overlayfs: failed to clone lowerpath [ 616.552218][ T5863] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 616.702169][ T5863] usb 9-1: Using ep0 maxpacket: 16 [ 616.705274][ T5863] usb 9-1: config 0 has no interfaces? [ 616.705308][ T5863] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 616.705331][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.804810][ T5863] usb 9-1: config 0 descriptor?? [ 617.068212][ T5863] usb 9-1: USB disconnect, device number 2 [ 619.758431][ T1401] IPVS: stop unused estimator thread 0... [ 620.415512][ T31] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 620.564689][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 620.566805][ T31] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.566834][ T31] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.566854][ T31] usb 9-1: config 0 interface 0 has no altsetting 0 [ 620.566881][ T31] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 620.566900][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.635796][ T31] usb 9-1: config 0 descriptor?? [ 620.694338][T14201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 620.814222][T14201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 620.885805][T14201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 620.996706][T14201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 621.104965][ T31] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 621.105000][ T31] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 621.105020][ T31] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 621.105040][ T31] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 621.105062][ T31] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 621.125425][ T31] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 621.429232][ T31] usb 9-1: USB disconnect, device number 3 [ 621.530585][T14201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.603808][T14201] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.650821][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.651498][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.671006][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.671131][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.734080][T14831] fido_id[14831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 622.696917][T14201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.769941][T12996] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 622.824609][T12996] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 623.052701][T14201] veth0_vlan: entered promiscuous mode [ 623.106474][T14201] veth1_vlan: entered promiscuous mode [ 623.359686][T14201] veth0_macvtap: entered promiscuous mode [ 623.416586][T14201] veth1_macvtap: entered promiscuous mode [ 623.489482][T14201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.553601][T14201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.616771][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.633296][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.633341][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.633373][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.196485][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.196508][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.329756][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.329823][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.397687][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.397706][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.652143][ T5854] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 625.826789][ T5854] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 625.826820][ T5854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.840817][ T5854] usb 9-1: config 0 descriptor?? [ 625.846397][ T5854] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 626.255548][ T5854] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 626.669937][ T5854] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 626.882694][ T36] usb 9-1: USB disconnect, device number 4 [ 628.020465][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3246'. [ 629.844218][T15111] overlayfs: failed to clone upperpath [ 630.662625][T15150] loop2: detected capacity change from 0 to 7 [ 630.683131][T15150] loop2: [ 630.683164][T15150] loop2: partition table partially beyond EOD, truncated [ 632.601435][T15226] fuse: Bad value for 'fd' [ 634.432234][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 634.562595][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 634.592351][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 634.606255][ T31] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 634.606287][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.606307][ T31] usb 1-1: Product: syz [ 634.606321][ T31] usb 1-1: Manufacturer: syz [ 634.606336][ T31] usb 1-1: SerialNumber: syz [ 634.635056][ T31] usb 1-1: config 0 descriptor?? [ 634.876597][ T31] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 635.326608][ T31] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 635.432223][ T31] usb 1-1: USB disconnect, device number 20 [ 636.535959][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.757561][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 636.874785][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.306198][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 637.307411][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 637.606492][ T43] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.648997][ T43] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.064937][T15348] can0: slcan on ttyS3. [ 639.342835][T15347] can0 (unregistered): slcan off ttyS3. [ 639.362268][ T5810] Bluetooth: hci3: command tx timeout [ 639.600157][ T43] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.435569][ T43] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.684272][T15330] chnl_net:caif_netlink_parms(): no params data found [ 641.172228][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 641.345151][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 641.354220][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.354246][ T9] usb 1-1: config 0 has no interfaces? [ 641.366708][ T9] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 641.366736][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.366754][ T9] usb 1-1: Product: syz [ 641.366768][ T9] usb 1-1: Manufacturer: syz [ 641.366782][ T9] usb 1-1: SerialNumber: syz [ 641.411881][ T9] usb 1-1: config 0 descriptor?? [ 641.442382][ T5810] Bluetooth: hci3: command tx timeout [ 641.538651][T15330] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.538768][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.539027][T15330] bridge_slave_0: entered allmulticast mode [ 641.558051][T15330] bridge_slave_0: entered promiscuous mode [ 641.645599][T15330] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.645801][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.646272][T15330] bridge_slave_1: entered allmulticast mode [ 641.669292][T15330] bridge_slave_1: entered promiscuous mode [ 642.095938][T15433] loop2: detected capacity change from 0 to 7 [ 642.113381][T15433] Dev loop2: unable to read RDB block 7 [ 642.113418][T15433] loop2: AHDI p1 p2 p3 [ 642.113447][T15433] loop2: partition table partially beyond EOD, truncated [ 642.113717][T15433] loop2: p1 start 1818582900 is beyond EOD, truncated [ 642.113737][T15433] loop2: p3 start 335544320 is beyond EOD, truncated [ 642.143575][ T43] bridge_slave_1: left allmulticast mode [ 642.143604][ T43] bridge_slave_1: left promiscuous mode [ 642.143867][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.304139][ T43] bridge_slave_0: left allmulticast mode [ 642.304160][ T43] bridge_slave_0: left promiscuous mode [ 642.304338][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.523734][ T5810] Bluetooth: hci3: command tx timeout [ 644.074686][ T5863] usb 1-1: USB disconnect, device number 21 [ 644.301649][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'. [ 644.564627][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.712967][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.771028][ T43] bond0 (unregistering): Released all slaves [ 644.866930][T15330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.081531][T15330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.287129][T15330] team0: Port device team_slave_0 added [ 645.294602][T15330] team0: Port device team_slave_1 added [ 645.602587][ T5810] Bluetooth: hci3: command tx timeout [ 645.905757][T15330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.905774][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.905798][T15330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.102997][T15330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.103015][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.103041][T15330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.349267][T15330] hsr_slave_0: entered promiscuous mode [ 646.367808][T15330] hsr_slave_1: entered promiscuous mode [ 646.369185][T15330] debugfs: 'hsr0' already exists in 'hsr' [ 646.369211][T15330] Cannot create hsr debugfs directory [ 648.063320][T15590] fuse: Bad value for 'fd' [ 648.323594][ T43] hsr_slave_0: left promiscuous mode [ 648.374439][ T43] hsr_slave_1: left promiscuous mode [ 648.375505][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.375528][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.454422][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.454453][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.591944][ T43] veth1_macvtap: left promiscuous mode [ 648.618260][ T43] veth0_macvtap: left promiscuous mode [ 648.618449][ T43] veth1_vlan: left promiscuous mode [ 648.618553][ T43] veth0_vlan: left promiscuous mode [ 650.233081][ T43] team0 (unregistering): Port device team_slave_1 removed [ 650.369933][ T43] team0 (unregistering): Port device team_slave_0 removed [ 652.389941][T15330] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 652.485284][T15330] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 652.559489][T15330] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 652.689112][T15330] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 653.374539][T15330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.459643][T15330] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.484849][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.486959][ T8714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.533161][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.533287][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.335174][T15330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.504630][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 655.621660][T15330] veth0_vlan: entered promiscuous mode [ 655.665002][T15330] veth1_vlan: entered promiscuous mode [ 655.792725][T15330] veth0_macvtap: entered promiscuous mode [ 655.815602][T15330] veth1_macvtap: entered promiscuous mode [ 655.876470][T15330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.898320][T15330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.921682][ T8714] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.925650][ T8714] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.925692][ T8714] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.925725][ T8714] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.609590][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.609609][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.715409][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.715429][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.992860][ T37] audit: type=1326 audit(1774087578.670:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 656.993107][ T37] audit: type=1326 audit(1774087578.670:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 657.006338][ T37] audit: type=1326 audit(1774087578.680:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 657.014635][ T37] audit: type=1326 audit(1774087578.690:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 657.022229][ T37] audit: type=1326 audit(1774087578.690:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 657.022277][ T37] audit: type=1326 audit(1774087578.690:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 657.022315][ T37] audit: type=1326 audit(1774087578.690:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 657.022351][ T37] audit: type=1326 audit(1774087578.690:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 657.022388][ T37] audit: type=1326 audit(1774087578.690:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 657.022426][ T37] audit: type=1326 audit(1774087578.690:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15877 comm="syz.9.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f043a82c799 code=0x7ffc0000 [ 658.477475][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 658.477527][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.477562][ T5810] Tainted: [L]=SOFTLOCKUP [ 658.477570][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.477570][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.477586][ T5810] Workqueue: hci0 hci_rx_work [ 658.477777][ T5810] Call Trace: [ 658.477786][ T5810] [ 658.477796][ T5810] dump_stack_lvl+0xe8/0x150 [ 658.477899][ T5810] sysfs_create_dir_ns+0x271/0x2a0 [ 658.478007][ T5810] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 658.478128][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 658.478156][ T5810] ? rt_spin_unlock+0x160/0x200 [ 658.478180][ T5810] kobject_add_internal+0x631/0xd10 [ 658.478250][ T5810] kobject_add+0x163/0x240 [ 658.478277][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 658.478306][ T5810] ? get_device_parent+0x370/0x3a0 [ 658.478391][ T5810] device_add+0x408/0xb80 [ 658.478419][ T5810] hci_conn_add_sysfs+0xd5/0x210 [ 658.478512][ T5810] le_conn_complete_evt+0xf1d/0x1430 [ 658.478576][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 658.478599][ T5810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.478628][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.478705][ T5810] ? skb_pull_data+0xfb/0x200 [ 658.478764][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 658.478781][ T5810] hci_event_packet+0x7af/0x12c0 [ 658.478799][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 658.478836][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 658.478850][ T5810] ? rt_spin_unlock+0x14f/0x200 [ 658.478867][ T5810] ? hci_send_to_monitor+0xe2/0x590 [ 658.478881][ T5810] hci_rx_work+0x3ee/0x1030 [ 658.478901][ T5810] ? process_scheduled_works+0xa8d/0x18c0 [ 658.478930][ T5810] process_scheduled_works+0xb6e/0x18c0 [ 658.478960][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 658.478978][ T5810] ? assign_work+0x3d5/0x5e0 [ 658.478999][ T5810] worker_thread+0xa53/0xfc0 [ 658.479027][ T5810] kthread+0x388/0x470 [ 658.479038][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 658.479051][ T5810] ? __pfx_kthread+0x10/0x10 [ 658.479062][ T5810] ret_from_fork+0x51e/0xb90 [ 658.479085][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 658.479098][ T5810] ? __switch_to+0xc7d/0x1450 [ 658.479122][ T5810] ? __pfx_kthread+0x10/0x10 [ 658.479133][ T5810] ret_from_fork_asm+0x1a/0x30 [ 658.479153][ T5810] [ 658.479425][ T5810] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 658.479468][ T5810] Bluetooth: hci0: failed to register connection device [ 658.588325][ T5810] ================================================================== [ 658.588439][ T5810] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x86a/0x1390 [ 658.588512][ T5810] Read of size 8 at addr ffff88802a434500 by task kworker/u9:4/5810 [ 658.588532][ T5810] [ 658.588555][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.588584][ T5810] Tainted: [L]=SOFTLOCKUP [ 658.588591][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.588606][ T5810] Workqueue: hci0 hci_rx_work [ 658.588638][ T5810] Call Trace: [ 658.588647][ T5810] [ 658.588656][ T5810] dump_stack_lvl+0xe8/0x150 [ 658.588688][ T5810] print_report+0xba/0x230 [ 658.588720][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 658.588744][ T5810] kasan_report+0x117/0x150 [ 658.588810][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 658.588837][ T5810] l2cap_connect_cfm+0x86a/0x1390 [ 658.588865][ T5810] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 658.588889][ T5810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.588917][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.588946][ T5810] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.588975][ T5810] ? mutex_lock_nested+0x152/0x1d0 [ 658.588996][ T5810] ? hci_connect_cfm+0x2c/0x140 [ 658.589015][ T5810] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 658.589040][ T5810] hci_connect_cfm+0x95/0x140 [ 658.589061][ T5810] le_conn_complete_evt+0xf65/0x1430 [ 658.589086][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 658.589109][ T5810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.589138][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.589168][ T5810] ? skb_pull_data+0xfb/0x200 [ 658.589189][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 658.589209][ T5810] hci_event_packet+0x7af/0x12c0 [ 658.589235][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 658.589253][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 658.589275][ T5810] ? rt_spin_unlock+0x14f/0x200 [ 658.589300][ T5810] ? hci_send_to_monitor+0xe2/0x590 [ 658.589324][ T5810] hci_rx_work+0x3ee/0x1030 [ 658.589356][ T5810] ? process_scheduled_works+0xa8d/0x18c0 [ 658.589384][ T5810] process_scheduled_works+0xb6e/0x18c0 [ 658.589425][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 658.589455][ T5810] ? assign_work+0x3d5/0x5e0 [ 658.589493][ T5810] worker_thread+0xa53/0xfc0 [ 658.589533][ T5810] kthread+0x388/0x470 [ 658.589555][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 658.589581][ T5810] ? __pfx_kthread+0x10/0x10 [ 658.589602][ T5810] ret_from_fork+0x51e/0xb90 [ 658.589632][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 658.589658][ T5810] ? __switch_to+0xc7d/0x1450 [ 658.589683][ T5810] ? __pfx_kthread+0x10/0x10 [ 658.589703][ T5810] ret_from_fork_asm+0x1a/0x30 [ 658.589730][ T5810] [ 658.589737][ T5810] [ 658.589742][ T5810] Allocated by task 5810: [ 658.589752][ T5810] kasan_save_track+0x3e/0x80 [ 658.589820][ T5810] __kasan_kmalloc+0x93/0xb0 [ 658.589846][ T5810] __kmalloc_cache_noprof+0x3a6/0x690 [ 658.589922][ T5810] l2cap_chan_create+0x51/0x7a0 [ 658.589945][ T5810] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 658.589970][ T5810] l2cap_connect_cfm+0x368/0x1390 [ 658.590116][ T5810] hci_connect_cfm+0x95/0x140 [ 658.590139][ T5810] le_conn_complete_evt+0xf65/0x1430 [ 658.590205][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 658.590224][ T5810] hci_event_packet+0x7af/0x12c0 [ 658.590250][ T5810] hci_rx_work+0x3ee/0x1030 [ 658.590275][ T5810] process_scheduled_works+0xb6e/0x18c0 [ 658.590300][ T5810] worker_thread+0xa53/0xfc0 [ 658.590325][ T5810] kthread+0x388/0x470 [ 658.590340][ T5810] ret_from_fork+0x51e/0xb90 [ 658.590361][ T5810] ret_from_fork_asm+0x1a/0x30 [ 658.590376][ T5810] [ 658.590381][ T5810] Freed by task 15929: [ 658.590391][ T5810] kasan_save_track+0x3e/0x80 [ 658.590415][ T5810] kasan_save_free_info+0x46/0x50 [ 658.590464][ T5810] __kasan_slab_free+0x5c/0x80 [ 658.590488][ T5810] kfree+0x1c1/0x6c0 [ 658.590513][ T5810] l2cap_sock_cleanup_listen+0xf0/0x440 [ 658.590537][ T5810] l2cap_sock_release+0x6e/0x270 [ 658.590561][ T5810] sock_close+0xc3/0x240 [ 658.590654][ T5810] __fput+0x461/0xa90 [ 658.590711][ T5810] task_work_run+0x1d9/0x270 [ 658.590730][ T5810] exit_to_user_mode_loop+0xed/0x480 [ 658.590767][ T5810] do_syscall_64+0x32d/0xf80 [ 658.590827][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.590861][ T5810] [ 658.590867][ T5810] The buggy address belongs to the object at ffff88802a434000 [ 658.590867][ T5810] which belongs to the cache kmalloc-2k of size 2048 [ 658.590885][ T5810] The buggy address is located 1280 bytes inside of [ 658.590885][ T5810] freed 2048-byte region [ffff88802a434000, ffff88802a434800) [ 658.590938][ T5810] [ 658.590944][ T5810] The buggy address belongs to the physical page: [ 658.590964][ T5810] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a435000 pfn:0x2a430 [ 658.591004][ T5810] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 658.591022][ T5810] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 658.591044][ T5810] page_type: f5(slab) [ 658.591068][ T5810] raw: 0080000000000240 ffff88813fe1d000 ffffea0000d5a210 ffffea000174e210 [ 658.591087][ T5810] raw: ffff88802a435000 0000000800080005 00000000f5000000 0000000000000000 [ 658.591106][ T5810] head: 0080000000000240 ffff88813fe1d000 ffffea0000d5a210 ffffea000174e210 [ 658.591126][ T5810] head: ffff88802a435000 0000000800080005 00000000f5000000 0000000000000000 [ 658.591145][ T5810] head: 0080000000000003 ffffea0000a90c01 00000000ffffffff 00000000ffffffff [ 658.591163][ T5810] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 658.591175][ T5810] page dumped because: kasan: bad access detected [ 658.591190][ T5810] page_owner tracks the page as allocated [ 658.591197][ T5810] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15930, tgid 15929 (syz.0.3604), ts 658459485423, free_ts 658193823237 [ 658.591235][ T5810] post_alloc_hook+0x231/0x280 [ 658.591291][ T5810] get_page_from_freelist+0x28bb/0x2950 [ 658.591311][ T5810] __alloc_frozen_pages_noprof+0x18d/0x380 [ 658.591330][ T5810] allocate_slab+0x77/0x660 [ 658.591376][ T5810] refill_objects+0x334/0x3c0 [ 658.591397][ T5810] __pcs_replace_empty_main+0x35c/0x710 [ 658.591422][ T5810] __kmalloc_cache_noprof+0x44e/0x690 [ 658.591450][ T5810] l2cap_chan_create+0x51/0x7a0 [ 658.591476][ T5810] l2cap_sock_create+0x1e7/0x330 [ 658.591497][ T5810] bt_sock_create+0x163/0x240 [ 658.591514][ T5810] __sock_create+0x4b2/0x9d0 [ 658.591565][ T5810] __sys_socket+0xd6/0x1b0 [ 658.591589][ T5810] __x64_sys_socket+0x7a/0x90 [ 658.591613][ T5810] do_syscall_64+0x14d/0xf80 [ 658.591641][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.591660][ T5810] page last free pid 14201 tgid 14201 stack trace: [ 658.591672][ T5810] __free_frozen_pages+0xfe3/0x1170 [ 658.591700][ T5810] __slab_free+0x24f/0x2a0 [ 658.591715][ T5810] qlist_free_all+0x97/0x100 [ 658.591739][ T5810] kasan_quarantine_reduce+0x148/0x160 [ 658.591764][ T5810] __kasan_slab_alloc+0x22/0x80 [ 658.591791][ T5810] kmem_cache_alloc_noprof+0x33b/0x680 [ 658.591819][ T5810] do_getname+0x2e/0x250 [ 658.591865][ T5810] user_path_at+0x2a/0x160 [ 658.591888][ T5810] __x64_sys_umount+0xf6/0x170 [ 658.591939][ T5810] do_syscall_64+0x14d/0xf80 [ 658.591966][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.591995][ T5810] [ 658.591999][ T5810] Memory state around the buggy address: [ 658.592043][ T5810] ffff88802a434400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.592056][ T5810] ffff88802a434480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.592075][ T5810] >ffff88802a434500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.592085][ T5810] ^ [ 658.592094][ T5810] ffff88802a434580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.592108][ T5810] ffff88802a434600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.592119][ T5810] ================================================================== [ 658.592233][ T5810] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 658.592252][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.592281][ T5810] Tainted: [L]=SOFTLOCKUP [ 658.592288][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.592301][ T5810] Workqueue: hci0 hci_rx_work [ 658.592332][ T5810] Call Trace: [ 658.592341][ T5810] [ 658.592350][ T5810] vpanic+0x56c/0xa60 [ 658.592382][ T5810] ? __pfx_vpanic+0x10/0x10 [ 658.592412][ T5810] panic+0xc5/0xd0 [ 658.592439][ T5810] ? __pfx_panic+0x10/0x10 [ 658.592468][ T5810] ? preempt_schedule_thunk+0x16/0x30 [ 658.592491][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 658.592513][ T5810] ? preempt_schedule_thunk+0x16/0x30 [ 658.592536][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 658.592558][ T5810] check_panic_on_warn+0x89/0xb0 [ 658.592599][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 658.592621][ T5810] end_report+0x73/0x180 [ 658.592639][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 658.592660][ T5810] kasan_report+0x128/0x150 [ 658.592679][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 658.592705][ T5810] l2cap_connect_cfm+0x86a/0x1390 [ 658.592732][ T5810] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 658.592755][ T5810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.592785][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.592814][ T5810] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.592844][ T5810] ? mutex_lock_nested+0x152/0x1d0 [ 658.592866][ T5810] ? hci_connect_cfm+0x2c/0x140 [ 658.592885][ T5810] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 658.592909][ T5810] hci_connect_cfm+0x95/0x140 [ 658.592929][ T5810] le_conn_complete_evt+0xf65/0x1430 [ 658.592955][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 658.592987][ T5810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.593018][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.593047][ T5810] ? skb_pull_data+0xfb/0x200 [ 658.593073][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 658.593097][ T5810] hci_event_packet+0x7af/0x12c0 [ 658.593127][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 658.593146][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 658.593171][ T5810] ? rt_spin_unlock+0x14f/0x200 [ 658.593200][ T5810] ? hci_send_to_monitor+0xe2/0x590 [ 658.593223][ T5810] hci_rx_work+0x3ee/0x1030 [ 658.593254][ T5810] ? process_scheduled_works+0xa8d/0x18c0 [ 658.593282][ T5810] process_scheduled_works+0xb6e/0x18c0 [ 658.593322][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 658.593352][ T5810] ? assign_work+0x3d5/0x5e0 [ 658.593380][ T5810] worker_thread+0xa53/0xfc0 [ 658.593419][ T5810] kthread+0x388/0x470 [ 658.593439][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 658.593464][ T5810] ? __pfx_kthread+0x10/0x10 [ 658.593483][ T5810] ret_from_fork+0x51e/0xb90 [ 658.593511][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 658.593537][ T5810] ? __switch_to+0xc7d/0x1450 [ 658.593562][ T5810] ? __pfx_kthread+0x10/0x10 [ 658.593582][ T5810] ret_from_fork_asm+0x1a/0x30 [ 658.593607][ T5810] [ 658.593961][ T5810] Kernel Offset: disabled