last executing test programs: 18.65634307s ago: executing program 0 (id=640): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7feed1b87b730c1188af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000091"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x200000000000029c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004c62443f67d7e0af5479ea00000000dd9b9e23c000000000a7d5"], 0x50) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept(r5, 0x0, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x87fffff, 0x0, 0xff, 0x3, 0x4}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) 18.563136718s ago: executing program 1 (id=641): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7feed1b87b730c1188af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000091"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x200000000000029c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004c62443f67d7e0af5479ea00000000dd9b9e23c000000000a7d5"], 0x50) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept(r5, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) 14.90356236s ago: executing program 0 (id=646): r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}) (fail_nth: 1) 14.747801422s ago: executing program 1 (id=647): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fc080c26a0040000008c82b8af00", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3202}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES64=r2], 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000001c0)=0x1) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001400050126bd70007bdbdf25282811e292"], 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x40) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009ff1f5a500aaaaaaaa88a8600081"], 0x3a) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0xa0000, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r8}}], 0x20, 0xc005}], 0x1, 0x10) r9 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x208241) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}) 14.424050374s ago: executing program 2 (id=649): getpid() (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000100000a0000000000000004000400"], 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xfffffffd}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900090400000000000000000a000000000000000002000008001e0001"], 0x24}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair(0x25, 0x100000005, 0xfffff391, &(0x7f0000000000)) 14.221155295s ago: executing program 0 (id=650): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) socket$alg(0x26, 0x5, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/186, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 14.220893062s ago: executing program 2 (id=651): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000a40)={0x18, 0xf, {0x5, @struct={0x7fffffff, 0x10}, 0x0, 0x9, 0x6, 0x100, 0x1, 0xfffffffffffffff7, 0x20, @usage=0xbf7, 0x5, 0x5, [0x80000001, 0x1, 0x3, 0x64, 0xdb, 0x80000000003]}, {0x7, @struct={0x2, 0x2}, 0x0, 0x6, 0x3, 0x800, 0xfc74000000000000, 0x6, 0x0, @struct={0x0, 0xc15e}, 0x80, 0xc879, [0x0, 0x6, 0x0, 0x2, 0x1, 0x5]}, {0xffff, @usage=0x8000000000000000, 0x0, 0x400000000000009, 0x9, 0x8001, 0x7, 0x7, 0x41, @struct={0x6}, 0x40ebe, 0x6, [0xff, 0x4bd, 0x2, 0x7fff, 0x3, 0x8000000000000001]}, {0x4000000000001, 0x7, 0x7fffffffffffffff}}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x12) socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000002140)={{}, 0x7, 0x6, 0x4}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) 13.02034809s ago: executing program 3 (id=652): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xd}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x100, 0x1, 0xaef}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 12.975659141s ago: executing program 0 (id=653): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x1, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xd}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) accept4$llc(r6, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x100, 0x1, 0xaef}) dup(r1) 12.530779286s ago: executing program 3 (id=654): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410e9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={r5, 0x400}, 0x8) 12.367524487s ago: executing program 2 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0xee, 0x2, 0xffffff80, 0x0, 0x6, 0x10001, 0x950bd19, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x44) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xfffffffe}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.508463542s ago: executing program 0 (id=656): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7feed1b87b730c1188af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000091"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x200000000000029c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004c62443f67d7e0af5479ea00000000dd9b9e23c000000000a7d5"], 0x50) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept(r5, 0x0, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x87fffff, 0x0, 0xff, 0x3, 0x4}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) 10.807934126s ago: executing program 4 (id=657): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '0', ':', '5', '.', '0'}}, 0x13) 10.393405505s ago: executing program 4 (id=658): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0xff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000530b0000020020000002000085000000a7765832558fca6e6b970e007e29257c4cb584b511675940fcd5048eccc3c384eabeb07ef2509259246701a2c3b212f788bcb6aad341acdb4a5ab8ff2e7972ae3cb859"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000040007800c000800000000000000000008000a000000000044000780080001"], 0x90}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$KVM_CREATE_VM(r0, 0x8000552c, 0x0) 10.214737521s ago: executing program 3 (id=659): mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140), 0x40, &(0x7f0000000480)={[{@mode}, {@mode={'mode', 0x3d, 0x10001}}], [{@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'workdir'}}, {@fsmagic}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_gt={'euid>', 0xee01}}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'upperdir'}}, {@smackfsroot={'smackfsroot', 0x3d, '[]^'}}]}) 9.652951432s ago: executing program 3 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$tty20(0xc, 0x4, 0x1) 9.538494878s ago: executing program 2 (id=661): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x40001, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffffff7, 0xaa802) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x13) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 9.364410776s ago: executing program 4 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x104, r1, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1aeb, 0x2, 0x9, 0x6, 0xf055, 0x2, 0x4, 0x6]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x0, 0x7, 0x200, 0xa, 0xad, 0x51]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x16, 0xc, 0xc, 0xc, 0x9, 0x60, 0x1b, 0x1]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x3}, {0x4, 0x9}, {0x7, 0xa}, {0x2, 0x2}, {0x4, 0x7}, {0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0x1}, {0x4, 0x3}, {0x6, 0x5}, {0x1, 0x1c}, {0x1, 0x5}, {0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x60, 0x60, 0x5, 0x12, 0x36, 0xc, 0x2, 0x0, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x4}, {0x6, 0x1}, {0x0, 0x9}, {0x5}, {0x7, 0x7}, {0x4, 0x5}, {0x7, 0x4}, {0x6}, {0x1, 0x3}, {0x7}, {0x5, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0x6}, {0x5, 0x6}, {0x6, 0x2}, {0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x9}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x8}, {0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x7}, {0x2, 0x3}, {0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x5}]}]}]}]}, 0x104}}, 0x0) 9.196523179s ago: executing program 1 (id=663): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f1ff5ce76d94cb76666029bc7f698b25f2e587c720faab5137671af6a02fdd00b54fe1e2e0e7863ae8fcf5dfa68a93343e2e537382a812a99ef495ec878e957ca1eb43606557ea77b88c9e011a1a34bfb817f2796c27c17a15a9a17e799facaf55f65c616d7ccead23c51007e2735f763785412b594d5da5c022d85640a07cc17ddcd050ec71d61c0e6b0911e50a7ebb2f951db4daa5d23981fe30c5b152368520c978e112ef3fb01ef9a659e20ee766c72ce6721cb9e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003300010326bd7002fcdbdf25030ec1ee2a359298e104f67297"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000035810c574229a85d0000000000000000040000000000a62ef573f3f306f40a1717702b69180915e798d9fce09d073e9c1e495199809a86e45ae9441ef6552bd1eb47f6ca39347914809d420bb38fb9bbdf2dd0f6f9ed4e150fae3aed7a9ca01ec10559920714f5677ce686a5808218687eaa", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="f7ffffff000000e5ffffffffdfffff001811000010e0b87e162bb1081e1dc5fcea2231dccb82f9738553855ddc61a84470aeaa988c06bd5c76544b9d381c5f5eb5e0d5e3b353ccac143b97c8fb9fbb593370683ad95a92e8a797b3b2c404e8f67f9eab97507a7d7f32f5c0a84548a18995de88416e3fd982c6945dbcd1a0d9cd584a39cf24b431a80471f9105ac8ec4780dff12d71730cf6eb251bf1bfb0b28550da0b31b3e0d75493", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x8b) ioctl$sock_TIOCOUTQ(r8, 0x5411, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.055043066s ago: executing program 3 (id=664): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180f0000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x200}, 0x8) 7.831339548s ago: executing program 1 (id=665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 7.726684137s ago: executing program 4 (id=666): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x100, 0x1, 0xaef}) close_range(r0, 0xffffffffffffffff, 0x0) 7.680566926s ago: executing program 2 (id=667): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) socket$alg(0x26, 0x5, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/186, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) 6.265795871s ago: executing program 3 (id=668): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', 0x0}) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 5.547740044s ago: executing program 4 (id=669): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xd}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 5.489597097s ago: executing program 2 (id=670): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140), 0x40, &(0x7f0000000480)={[{@mode}, {@mode={'mode', 0x3d, 0x10001}}], [{@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'workdir'}}, {@fsmagic}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_gt={'euid>', 0xee01}}, {@euid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, 'upperdir'}}, {@smackfsroot={'smackfsroot', 0x3d, '[]^'}}]}) 5.485062002s ago: executing program 0 (id=671): syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x1e}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x9, 0x40000003, 0x20001815}, {@private=0xa0100ff, 0x4e23, 0x0, 0x100000a, 0xf, 0x12d5c}}, 0x44) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) 5.471583167s ago: executing program 1 (id=672): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_GET_SECUREBITS(0x1b) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x5}}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x3, 0xffffffff, @mcast2, 0x5}, 0x1c) close(r3) sendmmsg$unix(r1, &(0x7f00000099c0)=[{{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000640)="6acb8a4f3581c7c3849ab99d396d6b6109dab8a44a6fea8fece06a5c724352ab66a8b4ab0f53382aa582bf261b56983eac8278e0ac645d60b546f69f0a5d80091c953d69c5a51dba389376cc06f2209acbbef4000000c829b0a202369156ba60d88611092c908c3d", 0x68}, {&(0x7f00000006c0)="83a550ec4a889eb1e3843a798a020bc55b0c06314d320464621a1d7098e9433abe3dbc85a50a20ab9cd20c19e437b120e79b17528ae6f61048493c82a1f8b115d4ebe01524a14e9be780caa80b175302f197968b59a5b16257ad0bebd18839e71559e9a49a8a6e27b75adce5841133b4798abafc13349a09a9903c6b18e3f7962f4830c3a64be5cb141e21fca9b1b45431b3dc2c700532c0c4b382d36c3b116e3eceab1534ca0451", 0xa8}], 0x2, 0x0, 0x0, 0x20000850}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000000800)="5bede7813e4ac74166d9f6f0b58d89d36d4bae4f50966f9eab02a696fcbbeebd1bf42d80040171a3c5319e6923fbd1541fc251f604aa92a7ee3fff7d4ca40273f674e3d45020f82255f2a5c758f73041180b0ea942215c6c308e50bf01d9c59012193124", 0x64}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="0d0ffcd673a799b200313dce95ef3e9d5401d417d24f058532ce4df0161b9101d540bf32ce39d236499eb35b9a7e4eab651a6ef27ecbddccf959dab68e7e1e79750243dbd3b8afc696c775580d05307f925e5ea4e09d6727a6972a93bdb69741cad0a4998bf8b6da60c26febc82ab5fd56e3be85023c62115c19da00f2136d250dc7c18bff6152c50b4784412c56c3f3cafc8f84d152", 0x96}, {&(0x7f0000001940)="76cd5b3796b933cc11406453a3c4630e3ee0c90bfce6affe540dc20302b6f22f0ec2187329c623a0abf9b6981886bcad2f6aaf7e2d5db3bb37f5f3325c604874529f73b1d97fef4e92d1ef316a6037fd1da1c110bae5ee183eb1883b7d36521f0a52d71bd8", 0x65}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="9e0c", 0x2}, {&(0x7f0000002a00)="9904258f09d3b79ddcebcd9084531b280c94b7fb27d568000577e34c1974f1dd4c9c4d982c87317b0a8ac6dbebb2d0212382d3e3bdc371388fb1e8d578f73d45d0dfe6dd2b83e068ec83eaff1e560f072851e7d5d03d938ef3cd9fe5558d0e36fd70a223bacf57211cafbd117562c33eca16f1bc6f4940d9044127380fe5780c4d7960c3a47bb62026ac03c7ac2ee869124788a3193f228904b0d6", 0x9b}], 0x7, &(0x7f00000030c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r1, r1, r2]}}], 0x48, 0x15}}, {{&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002c00)="0ded979957a11dd84f0e81f69a40bca863b15d6a8671601d7fbd5f5afe2b72c6ba00544ea6fce1c7499c838a1a88f58bea8e76604c73df1a740f8e7f27a2d77e765006cec3db062c8b841f33ce815a9ab967315be85701060796497f83c87de70d0b65049fa02beaa363e9a880f6c80c8b6fbaa00e9a150b2a12b1e93f3acd7d8107239cb8dabd9427d12b7a9a3ab00abbb9d769fb2d9d2ca8db9f732d013108fb76afa19ceeea46fd1bbc05e5d144ba71ac1e", 0xb3}, {&(0x7f0000002cc0)="4f08f442c8721947e7f6d4700873e5d2887d71c3a87269f133567c70795ab2c28d2ab5447fcfe6e986f6636d8d448189e1c7ff70cb5194dfef9d06d5a6f8c0fc5cea571f4e029cf85e350f8719332a5985d289e2c83f4a1e2352dec5a1042ff6b7e9bbb8e5f2517235c7b4f63e1574737180bd21e3a89ff265f9453eb1fe2f0460c05fa7c1d57fdeb1f5e2ba608da9134ae2b07ff42902133b006c692b0a9408e48e575f13cbf5a792199697e0d811e3d870f786f15fb676289ba73c97e6df7af5b186f6c808b581259d1a53bbcd87", 0xcf}, {&(0x7f0000002dc0)="dffdad4bed64cad65039a5ff87866a41e843fa370e5135d7e024badce0df7ab6a1", 0x21}, {&(0x7f0000002e00)="107a995e8f2df1ba2c62c9d6f9cd3ce087b8b4017de2e5ae092aa4c80031879852ff24137ab4d9f4f6d0d1a7d480cad1c351c603930fff6d2752a7e3b8c37a7c3f890d40c5bb8fa9f33e9b572ac3ae9667859b5ee746aeab39e7356ccfd02c9b7cfcbb02b1c5a740df2e203201714bdb86d3c23d92014ea5b5056250fe25390f9265eb81e4a9bbf934c0956aaec49732a4bad5d0f9fb2056b0e29ce9c42797db9df1eca22d5825313a3e46bde47b83cc8c6bc648ee040282abb1e1339cd955ad0cb24ff6cbf302674a7200572d56e0ef8a293ce29bfc8b3de3c1423e4e0980e390aa0c102c91b40741672bae", 0xec}, {&(0x7f0000002f00)="d4eec4e24027560769da8eb3f6c50876c8b868ecef3f117fa333e1e5824ceb1a3cb58d61a769f531905a574d6d39e376bcd74fc540713783f4491e35cfdab11ac7d31f7da51b9d5191cfb464f879fffa640b745c81bc6a78fa9bc47f50bf5736a87e719108b6755c2b98de849872e7c89467ac400c0b059ff07b89f029", 0x7d}], 0x5, &(0x7f00000072c0)=[@rights={{0x20, 0x1, 0x1, [r1, r3, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x2c, 0x1, 0x1, [r1, r3, r3, r1, r2, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0xf0, 0x8000}}, {{&(0x7f00000073c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000007640)=[{&(0x7f0000007440)="5d627b143fbaf05dfaccc4789f078f61a374f7fd9c8e94b0d08ca8e4e4c85e87af2346b414a10d291b30761f1c4aa159d6e64df3dc40cb88b8152c2db211074f9609adbfcdee7b8c9cb44ff274111b271514e82e7814cf92b63ea8239d0b1bcc94a218fd2fdcc5912ca9b441caf516273ab3c4b20bc7e6c1c6cacf525640f32a532931a4c19fcb801c41ecde6ce299c41d8b924c295fc9dab153b7309cdecd6839e0a7ed85d46960b38c0ba3ea23b6a89cb72eba1fca16e750eced95ab6a0124dd384de4f16f7349ecd4736404e635bccee9c7d0afd76ea1d00d6360de2986302ba387", 0xe3}, {&(0x7f0000007540)="91cecd99d661344bc48b8a4fadd2baebdc45e171a88569eec03e2b97a6526efaed44201f5a443a5942597b45f692bc6aded7bade1991b75a845f1ecbf214b5f1854aa9ae5d01b192829c93c7950bc0f762a46c968a9fdfc8243a70a1a6f0d4c3724f86124c82f8b897025bf22677e922c2b23c49753cdb6e4512428dffefc5c62482d55a2dd3203408ca789462e42ffa1c1a68d543c461262a1eedf7f13d5d3cda2d383ec229ef74679bafbc43606b9ccd1899e0a0d4ec571e64e229ac94cfcd7b7d5d1ef6ddb08bfe0ee31edfccff0b29595cf5822c47105fc95da52ba9353e556df35a62e7b73d31e19d2ef522fcdb65fa8e", 0xf3}], 0x2, &(0x7f0000003000)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="00000072c777d38da4255c20b4f24a896e5c"], 0x28, 0x8000}}, {{&(0x7f0000007700)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000007780)="80399322e55ca4ecfd428a232863e4828ef1ce06f029a0a0d71e0c1caacd2fe87bbc125669173f955e697b27ccd6457cb474ae", 0x33}], 0x1, &(0x7f0000009880)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r1, r2, r3, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108, 0x8000}}], 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESDEC, @ANYRES16=r6, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r7, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20800040}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000071400042bbd7000fcdbdf2505005400010000000900020073797a3080000000e4a185b6c3bb5fe4b66b32bad26330db3789"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x83343, 0x0) 4.027312358s ago: executing program 1 (id=673): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) fchmod(r1, 0x20049549e2a2d659) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200)=0x4, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x1a, &(0x7f00000000c0)={0x0}}, 0x40891) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x4000000) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg0\x00'}) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002080eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffff0100ffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@delqdisc={0x1bc, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff2, 0xffff}, {0x0, 0x3}, {0x16}}, [@TCA_RATE={0x6, 0x5, {0x18, 0x97}}, @TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xfd, 0xa, 0x3ff, 0x0, 0xfff, 0x8, 0x4}}, {0xc, 0x2, [0x6, 0x6, 0x0, 0x1]}}, {{0x1c, 0x1, {0x8, 0x2, 0x4, 0x7ff, 0x0, 0x1, 0x5, 0x6}}, {0x10, 0x2, [0xf29, 0x4800, 0x1, 0x6, 0x8001, 0x101]}}, {{0x1c, 0x1, {0x3, 0xe2, 0x401, 0x2, 0x2, 0x6, 0xa99, 0x2}}, {0x8, 0x2, [0x9, 0x1ff]}}, {{0x1c, 0x1, {0xf3, 0xd, 0xe, 0x5, 0x2, 0x9, 0x4182, 0x5}}, {0xe, 0x2, [0xa, 0x10, 0x3, 0x93c, 0x1]}}, {{0x1c, 0x1, {0x6, 0xfc, 0x0, 0xa0, 0x1, 0x8001, 0x6, 0xa}}, {0x18, 0x2, [0xffff, 0x0, 0xffff, 0x9, 0xedab, 0xeb3, 0x5, 0xfffa, 0x0, 0x42f1]}}, {{0x1c, 0x1, {0x1, 0xda, 0x1, 0x6, 0x0, 0xb, 0x3, 0x5}}, {0xe, 0x2, [0x0, 0x2, 0x7, 0x96d6, 0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x4, 0xf, 0x0, 0x8b82, 0x0, 0x7}}, {0x12, 0x2, [0xfe6f, 0x3, 0x7, 0x5, 0xee7, 0x4, 0x3]}}, {{0x1c, 0x1, {0x0, 0xc7, 0x25f0, 0x7, 0x1, 0x8, 0x2, 0x4}}, {0xc, 0x2, [0xd, 0xe, 0x7f, 0xc]}}, {{0x1c, 0x1, {0x9, 0x5c, 0x7ff, 0xffff, 0x1, 0x7ff, 0x945, 0x3}}, {0xa, 0x2, [0xd196, 0x0, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x4d, 0x65}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8801, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xa}}]}}]}, 0x7c}}, 0x24040084) 0s ago: executing program 4 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$tty20(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 73.793207][ T5823] cgroup: Unknown subsys name 'net' [ 73.923420][ T5823] cgroup: Unknown subsys name 'cpuset' [ 73.931940][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.291305][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.585866][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.621716][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.629634][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.632165][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.638258][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.644810][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.651840][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.660052][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.666924][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.672744][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.680200][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.702872][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.710377][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.710958][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.725975][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.752186][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.760631][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.769897][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.778938][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.786874][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.808997][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.819169][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.827399][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.836456][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.845817][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.416330][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 80.520253][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 80.605860][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 80.691768][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 80.775775][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.786487][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.794086][ T5840] bridge_slave_0: entered allmulticast mode [ 80.802134][ T5840] bridge_slave_0: entered promiscuous mode [ 80.839901][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.847114][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.854355][ T5840] bridge_slave_1: entered allmulticast mode [ 80.861671][ T5840] bridge_slave_1: entered promiscuous mode [ 80.909430][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.917017][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.924435][ T5848] bridge_slave_0: entered allmulticast mode [ 80.931782][ T5848] bridge_slave_0: entered promiscuous mode [ 80.965671][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.972973][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.980629][ T5833] bridge_slave_0: entered allmulticast mode [ 80.987579][ T5833] bridge_slave_0: entered promiscuous mode [ 80.995080][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 81.005838][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.013176][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.020653][ T5848] bridge_slave_1: entered allmulticast mode [ 81.027646][ T5848] bridge_slave_1: entered promiscuous mode [ 81.063571][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.070896][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.078051][ T5833] bridge_slave_1: entered allmulticast mode [ 81.085526][ T5833] bridge_slave_1: entered promiscuous mode [ 81.128044][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.163433][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.185548][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.210769][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.247508][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.255132][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.262828][ T5834] bridge_slave_0: entered allmulticast mode [ 81.270205][ T5834] bridge_slave_0: entered promiscuous mode [ 81.280687][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.292949][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.322028][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.329227][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.336480][ T5834] bridge_slave_1: entered allmulticast mode [ 81.343920][ T5834] bridge_slave_1: entered promiscuous mode [ 81.409156][ T5840] team0: Port device team_slave_0 added [ 81.418213][ T5840] team0: Port device team_slave_1 added [ 81.483051][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.497155][ T5833] team0: Port device team_slave_0 added [ 81.506262][ T5848] team0: Port device team_slave_0 added [ 81.515408][ T5848] team0: Port device team_slave_1 added [ 81.547321][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.560088][ T5833] team0: Port device team_slave_1 added [ 81.604460][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.611965][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.639253][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.675558][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.682700][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.708750][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.721119][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.728338][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.739470][ T5846] bridge_slave_0: entered allmulticast mode [ 81.748014][ T5846] bridge_slave_0: entered promiscuous mode [ 81.757713][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.765288][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.791337][ T5837] Bluetooth: hci1: command tx timeout [ 81.795123][ T5839] Bluetooth: hci2: command tx timeout [ 81.797090][ T5837] Bluetooth: hci0: command tx timeout [ 81.803152][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.859938][ T5837] Bluetooth: hci3: command tx timeout [ 81.872646][ T5834] team0: Port device team_slave_0 added [ 81.914246][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.929848][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.956055][ T5837] Bluetooth: hci4: command tx timeout [ 81.968879][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.981415][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.988381][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.016000][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.035570][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.044906][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.052550][ T5846] bridge_slave_1: entered allmulticast mode [ 82.060808][ T5846] bridge_slave_1: entered promiscuous mode [ 82.087287][ T5834] team0: Port device team_slave_1 added [ 82.094866][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.102304][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.128436][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.231301][ T5848] hsr_slave_0: entered promiscuous mode [ 82.237806][ T5848] hsr_slave_1: entered promiscuous mode [ 82.248083][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.261878][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.272383][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.279329][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.305340][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.318011][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.325121][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.351745][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.381836][ T5840] hsr_slave_0: entered promiscuous mode [ 82.388474][ T5840] hsr_slave_1: entered promiscuous mode [ 82.394885][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.402828][ T5840] Cannot create hsr debugfs directory [ 82.478621][ T5846] team0: Port device team_slave_0 added [ 82.487615][ T5846] team0: Port device team_slave_1 added [ 82.571512][ T5833] hsr_slave_0: entered promiscuous mode [ 82.577735][ T5833] hsr_slave_1: entered promiscuous mode [ 82.585315][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.593300][ T5833] Cannot create hsr debugfs directory [ 82.609591][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.616766][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.642936][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.655870][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.664543][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.691214][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.764131][ T5834] hsr_slave_0: entered promiscuous mode [ 82.772070][ T5834] hsr_slave_1: entered promiscuous mode [ 82.778067][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.786764][ T5834] Cannot create hsr debugfs directory [ 82.929997][ T5846] hsr_slave_0: entered promiscuous mode [ 82.936710][ T5846] hsr_slave_1: entered promiscuous mode [ 82.944357][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.952062][ T5846] Cannot create hsr debugfs directory [ 83.413822][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.439624][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.452944][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.473518][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.535809][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.545829][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.565301][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.598590][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.655419][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.681640][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.695369][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.711492][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.836056][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.849009][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.860481][ T5837] Bluetooth: hci2: command tx timeout [ 83.860505][ T51] Bluetooth: hci0: command tx timeout [ 83.865899][ T5837] Bluetooth: hci1: command tx timeout [ 83.898177][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.913746][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.932412][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.941317][ T5837] Bluetooth: hci3: command tx timeout [ 83.970721][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.020426][ T5837] Bluetooth: hci4: command tx timeout [ 84.042933][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.067770][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.077573][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.096268][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.111222][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.125314][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.144040][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.151367][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.178355][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.185539][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.195889][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.203049][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.251185][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.258342][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.305717][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.417411][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.442054][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.464697][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.472330][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.485604][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.492793][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.612625][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.683185][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.690392][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.703968][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.711190][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.784246][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.926083][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.957687][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.001822][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.008992][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.024250][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.031637][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.083029][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.162361][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.334190][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.414077][ T5848] veth0_vlan: entered promiscuous mode [ 85.479541][ T5848] veth1_vlan: entered promiscuous mode [ 85.496532][ T5833] veth0_vlan: entered promiscuous mode [ 85.517560][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.538004][ T5833] veth1_vlan: entered promiscuous mode [ 85.581069][ T5840] veth0_vlan: entered promiscuous mode [ 85.646247][ T5840] veth1_vlan: entered promiscuous mode [ 85.659032][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.680744][ T5848] veth0_macvtap: entered promiscuous mode [ 85.705880][ T5848] veth1_macvtap: entered promiscuous mode [ 85.754837][ T5834] veth0_vlan: entered promiscuous mode [ 85.769379][ T5833] veth0_macvtap: entered promiscuous mode [ 85.794081][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.815794][ T5840] veth0_macvtap: entered promiscuous mode [ 85.825132][ T5833] veth1_macvtap: entered promiscuous mode [ 85.838339][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.871806][ T5840] veth1_macvtap: entered promiscuous mode [ 85.883307][ T5834] veth1_vlan: entered promiscuous mode [ 85.905192][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.915650][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.924658][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.933817][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.944623][ T5837] Bluetooth: hci1: command tx timeout [ 85.950625][ T5839] Bluetooth: hci0: command tx timeout [ 85.951410][ T51] Bluetooth: hci2: command tx timeout [ 85.969538][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.013263][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.021170][ T51] Bluetooth: hci3: command tx timeout [ 86.046173][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.056131][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.072012][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.086496][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.103068][ T51] Bluetooth: hci4: command tx timeout [ 86.134176][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.172091][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.186557][ T5834] veth0_macvtap: entered promiscuous mode [ 86.209507][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.218896][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.228262][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.237033][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.250649][ T5834] veth1_macvtap: entered promiscuous mode [ 86.263815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.277980][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.329485][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.340447][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.428721][ T5846] veth0_vlan: entered promiscuous mode [ 86.438025][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.474651][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.502197][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.547615][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.558131][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.562224][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.576173][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.586408][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.597031][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.629710][ T5846] veth1_vlan: entered promiscuous mode [ 86.641311][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.649171][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.730467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.750405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.759488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.793525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.817078][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.831950][ T9] cfg80211: failed to load regulatory.db [ 86.839675][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.958202][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.968396][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.973264][ T5846] veth0_macvtap: entered promiscuous mode [ 87.054191][ T5846] veth1_macvtap: entered promiscuous mode [ 87.094374][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.127438][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.167579][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.190096][ T5959] kvm: user requested TSC rate below hardware speed [ 87.200560][ T5959] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 87.228124][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.441617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.442614][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 87.472562][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 87.488212][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.522708][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.548086][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.788870][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.808067][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.852907][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.906049][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.920029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 87.921492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.950521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.033428][ T51] Bluetooth: hci1: command tx timeout [ 88.039074][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057ea2c00: rx timeout, send abort [ 88.048364][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057ea2c00: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 88.069405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 88.078351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 88.198638][ T51] Bluetooth: hci0: command tx timeout [ 88.205014][ T51] Bluetooth: hci2: command tx timeout [ 88.210963][ T51] Bluetooth: hci3: command tx timeout [ 88.216882][ T51] Bluetooth: hci4: command tx timeout [ 89.942047][ T5975] can0: slcan on ttyS3. [ 90.852360][ T5975] can0 (unregistered): slcan off ttyS3. [ 91.520247][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.528828][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.655631][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'. [ 91.824189][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.906985][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.788325][ T6026] kvm: user requested TSC rate below hardware speed [ 95.797561][ T6026] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 96.973059][ T6039] warning: `syz.1.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.296737][ T6075] overlayfs: missing 'lowerdir' [ 108.271585][ T5919] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.643112][ T5919] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.659867][ T5919] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.680731][ T5919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.689768][ T5919] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 108.732701][ T5919] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 108.953321][ T5919] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.261616][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.269673][ T5919] usb 1-1: Product: syz [ 109.289907][ T5919] usb 1-1: Manufacturer: syz [ 109.347351][ T5919] cdc_wdm 1-1:1.0: skipping garbage [ 109.369999][ T5919] cdc_wdm 1-1:1.0: skipping garbage [ 109.499957][ T979] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.581687][ T5919] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 109.588354][ T5919] cdc_wdm 1-1:1.0: Unknown control protocol [ 110.176296][ T6130] kvm: user requested TSC rate below hardware speed [ 110.194220][ T6130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 110.225963][ T6132] nvme_fabrics: missing parameter 'transport=%s' [ 110.232645][ T6132] nvme_fabrics: missing parameter 'nqn=%s' [ 110.259969][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 110.741732][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.814922][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.843642][ T979] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 111.149072][ T6141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.167119][ T6141] netlink: 'syz.1.51': attribute type 12 has an invalid length. [ 111.174915][ T6141] netlink: 'syz.1.51': attribute type 29 has an invalid length. [ 111.182648][ T6141] netlink: 148 bytes leftover after parsing attributes in process `syz.1.51'. [ 111.191683][ T6141] netlink: 'syz.1.51': attribute type 2 has an invalid length. [ 111.199296][ T6141] netlink: 'syz.1.51': attribute type 3 has an invalid length. [ 111.207142][ T6141] netlink: 3 bytes leftover after parsing attributes in process `syz.1.51'. [ 111.932711][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.972620][ T979] usb 5-1: config 0 descriptor?? [ 111.973901][ T30] audit: type=1326 audit(1755169256.354:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6138 comm="syz.3.52" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d0578ebe9 code=0x0 [ 112.448359][ T979] usbhid 5-1:0.0: can't add hid device: -71 [ 112.501806][ T979] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.538561][ T5937] usb 1-1: USB disconnect, device number 2 [ 112.546020][ T6147] overlayfs: missing 'lowerdir' [ 112.592722][ T979] usb 5-1: USB disconnect, device number 2 [ 114.169045][ T6164] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.56'. [ 114.178389][ T6164] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.56'. [ 114.187449][ T6164] netlink: 640 bytes leftover after parsing attributes in process `syz.0.56'. [ 115.254877][ T6181] overlayfs: overlapping lowerdir path [ 116.709618][ T6190] nvme_fabrics: missing parameter 'transport=%s' [ 116.716141][ T6190] nvme_fabrics: missing parameter 'nqn=%s' [ 117.728493][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 118.731141][ T5912] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.719423][ T6226] netlink: 'syz.0.71': attribute type 12 has an invalid length. [ 119.727305][ T6226] netlink: 'syz.0.71': attribute type 29 has an invalid length. [ 119.735074][ T6226] netlink: 148 bytes leftover after parsing attributes in process `syz.0.71'. [ 119.744072][ T6226] netlink: 'syz.0.71': attribute type 2 has an invalid length. [ 119.751721][ T6226] netlink: 'syz.0.71': attribute type 3 has an invalid length. [ 119.759326][ T6226] netlink: 3 bytes leftover after parsing attributes in process `syz.0.71'. [ 120.311934][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.359882][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.369675][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.550505][ T5912] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.560334][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.595326][ T5912] usb 3-1: config 0 descriptor?? [ 120.602966][ T5912] usb 3-1: can't set config #0, error -71 [ 120.612565][ T5912] usb 3-1: USB disconnect, device number 2 [ 121.121507][ T6239] sp0: Synchronizing with TNC [ 121.377875][ T6238] [U] è` [ 122.379642][ T6257] Zero length message leads to an empty skb [ 123.325301][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 123.689575][ T6277] netlink: 'syz.0.84': attribute type 12 has an invalid length. [ 123.697399][ T6277] netlink: 'syz.0.84': attribute type 29 has an invalid length. [ 123.705322][ T6277] netlink: 148 bytes leftover after parsing attributes in process `syz.0.84'. [ 123.715024][ T6277] netlink: 'syz.0.84': attribute type 2 has an invalid length. [ 123.722725][ T6277] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 123.730356][ T6277] netlink: 3 bytes leftover after parsing attributes in process `syz.0.84'. [ 124.655506][ T5919] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.915267][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.939551][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.954497][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.974596][ T5919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.987002][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.059571][ T5919] usb 2-1: config 0 descriptor?? [ 125.116313][ T6299] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.267131][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888033122400: rx timeout, send abort [ 126.279943][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888033122400: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 128.239581][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 128.257964][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 128.313904][ T5919] usb 2-1: USB disconnect, device number 2 [ 128.934442][ T6326] netlink: 'syz.1.96': attribute type 12 has an invalid length. [ 128.942254][ T6326] netlink: 'syz.1.96': attribute type 29 has an invalid length. [ 128.950094][ T6326] netlink: 148 bytes leftover after parsing attributes in process `syz.1.96'. [ 128.959029][ T6326] netlink: 'syz.1.96': attribute type 2 has an invalid length. [ 128.966669][ T6326] netlink: 'syz.1.96': attribute type 3 has an invalid length. [ 128.974314][ T6326] netlink: 3 bytes leftover after parsing attributes in process `syz.1.96'. [ 132.170470][ T6348] kvm: user requested TSC rate below hardware speed [ 132.178128][ T6348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 133.038105][ T6358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.104'. [ 133.238058][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.244661][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.852125][ T5919] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 135.268194][ T6379] netlink: 'syz.4.109': attribute type 12 has an invalid length. [ 135.276131][ T6379] netlink: 'syz.4.109': attribute type 29 has an invalid length. [ 135.283964][ T6379] netlink: 148 bytes leftover after parsing attributes in process `syz.4.109'. [ 135.293096][ T6379] netlink: 'syz.4.109': attribute type 2 has an invalid length. [ 135.300812][ T6379] netlink: 'syz.4.109': attribute type 3 has an invalid length. [ 135.308473][ T6379] netlink: 3 bytes leftover after parsing attributes in process `syz.4.109'. [ 135.695265][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.394153][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.404337][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.417630][ T5919] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.427028][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.438234][ T5919] usb 4-1: config 0 descriptor?? [ 140.012493][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.119'. [ 141.958698][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 141.976690][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 142.010459][ T5919] usb 4-1: USB disconnect, device number 2 [ 142.662916][ T6420] kvm: user requested TSC rate below hardware speed [ 142.670964][ T6420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 145.357297][ T6446] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.124'. [ 145.367479][ T6446] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.124'. [ 145.376593][ T6446] netlink: 640 bytes leftover after parsing attributes in process `syz.1.124'. [ 145.423840][ T6444] netlink: 6 bytes leftover after parsing attributes in process `syz.0.125'. [ 145.606303][ T6449] netlink: 'syz.2.126': attribute type 12 has an invalid length. [ 145.614209][ T6449] netlink: 'syz.2.126': attribute type 29 has an invalid length. [ 145.622063][ T6449] netlink: 148 bytes leftover after parsing attributes in process `syz.2.126'. [ 145.631234][ T6449] netlink: 'syz.2.126': attribute type 2 has an invalid length. [ 145.638949][ T6449] netlink: 'syz.2.126': attribute type 3 has an invalid length. [ 145.646700][ T6449] netlink: 3 bytes leftover after parsing attributes in process `syz.2.126'. [ 147.555527][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.130'. [ 147.789934][ T5912] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.015289][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.053525][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.424526][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.504992][ T5912] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.554897][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.754456][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 148.887958][ T5912] usb 1-1: config 0 descriptor?? [ 152.295632][ T6500] netlink: 'syz.3.140': attribute type 12 has an invalid length. [ 152.303730][ T6500] netlink: 'syz.3.140': attribute type 29 has an invalid length. [ 152.311621][ T6500] netlink: 148 bytes leftover after parsing attributes in process `syz.3.140'. [ 152.320880][ T6500] netlink: 'syz.3.140': attribute type 2 has an invalid length. [ 152.328651][ T6500] netlink: 'syz.3.140': attribute type 3 has an invalid length. [ 152.337562][ T6500] netlink: 3 bytes leftover after parsing attributes in process `syz.3.140'. [ 153.174807][ T6507] netlink: 6 bytes leftover after parsing attributes in process `syz.1.141'. [ 153.199571][ T5912] usbhid 1-1:0.0: can't add hid device: -71 [ 153.209516][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 153.241657][ T5912] usb 1-1: USB disconnect, device number 3 [ 153.737514][ T6510] syz.1.144 uses obsolete (PF_INET,SOCK_PACKET) [ 154.186712][ T6512] syzkaller0: entered promiscuous mode [ 154.193040][ T6512] syzkaller0: entered allmulticast mode [ 155.405605][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 155.414662][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 155.657056][ T6524] kvm: user requested TSC rate below hardware speed [ 156.186247][ T6544] netlink: 'syz.0.153': attribute type 12 has an invalid length. [ 156.194242][ T6544] netlink: 'syz.0.153': attribute type 29 has an invalid length. [ 156.202097][ T6544] netlink: 148 bytes leftover after parsing attributes in process `syz.0.153'. [ 156.211186][ T6544] netlink: 'syz.0.153': attribute type 2 has an invalid length. [ 156.218872][ T6544] netlink: 'syz.0.153': attribute type 3 has an invalid length. [ 156.227225][ T6544] netlink: 3 bytes leftover after parsing attributes in process `syz.0.153'. [ 156.864077][ T6547] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.734711][ T6555] block nbd2: NBD_DISCONNECT [ 160.494878][ T6578] overlayfs: overlapping lowerdir path [ 161.421382][ T6588] netlink: 'syz.0.166': attribute type 12 has an invalid length. [ 161.429243][ T6588] netlink: 'syz.0.166': attribute type 29 has an invalid length. [ 161.437242][ T6588] netlink: 148 bytes leftover after parsing attributes in process `syz.0.166'. [ 161.447413][ T6588] netlink: 'syz.0.166': attribute type 2 has an invalid length. [ 161.455198][ T6588] netlink: 'syz.0.166': attribute type 3 has an invalid length. [ 161.463022][ T6588] netlink: 3 bytes leftover after parsing attributes in process `syz.0.166'. [ 162.039668][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034299800: rx timeout, send abort [ 162.049903][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888034299800: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 164.934467][ T6603] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.170'. [ 164.943738][ T6603] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.170'. [ 164.953688][ T6603] netlink: 640 bytes leftover after parsing attributes in process `syz.3.170'. [ 165.025591][ T6605] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.943394][ T6636] netlink: 'syz.0.178': attribute type 12 has an invalid length. [ 168.951273][ T6636] netlink: 'syz.0.178': attribute type 29 has an invalid length. [ 168.959139][ T6636] netlink: 148 bytes leftover after parsing attributes in process `syz.0.178'. [ 168.968223][ T6636] netlink: 'syz.0.178': attribute type 2 has an invalid length. [ 168.976100][ T6636] netlink: 'syz.0.178': attribute type 3 has an invalid length. [ 168.984264][ T6636] netlink: 3 bytes leftover after parsing attributes in process `syz.0.178'. [ 171.461119][ T6651] tipc: Started in network mode [ 171.466813][ T6651] tipc: Node identity 261655ddd1f4, cluster identity 4711 [ 171.467367][ T6651] tipc: Enabled bearer , priority 0 [ 171.588257][ T6651] tipc: Resetting bearer [ 171.676984][ T6659] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.185'. [ 171.677125][ T6659] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.185'. [ 171.677141][ T6659] netlink: 640 bytes leftover after parsing attributes in process `syz.0.185'. [ 171.925487][ T6647] tipc: Disabling bearer [ 172.814077][ T6653] tty tty28: ldisc open failed (-12), clearing slot 27 [ 173.410047][ T5937] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.620052][ T5937] usb 1-1: device descriptor read/64, error -71 [ 173.970296][ T5937] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.771414][ T5937] usb 1-1: device descriptor read/64, error -71 [ 174.960772][ T6694] Can't find ip_set type has [ 174.984567][ T5937] usb usb1-port1: attempt power cycle [ 175.457411][ T6696] netlink: 'syz.3.194': attribute type 12 has an invalid length. [ 175.465265][ T6696] netlink: 'syz.3.194': attribute type 29 has an invalid length. [ 175.474059][ T6696] netlink: 148 bytes leftover after parsing attributes in process `syz.3.194'. [ 175.483122][ T6696] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 175.490841][ T6696] netlink: 'syz.3.194': attribute type 3 has an invalid length. [ 175.498495][ T6696] netlink: 3 bytes leftover after parsing attributes in process `syz.3.194'. [ 175.739906][ T5937] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 175.802749][ T5937] usb 1-1: device descriptor read/8, error -71 [ 175.834160][ T6703] kvm: user requested TSC rate below hardware speed [ 175.842017][ T6703] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 176.116224][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 176.126532][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 176.342052][ T5937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 176.378817][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 176.397633][ T5937] usb 1-1: device descriptor read/8, error -32 [ 176.522405][ T5937] usb usb1-port1: unable to enumerate USB device [ 181.630707][ T6758] kvm: user requested TSC rate below hardware speed [ 181.638874][ T6758] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 181.971358][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 181.988307][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 182.080044][ T5944] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.343335][ T5944] usb 4-1: device descriptor read/64, error -71 [ 183.230047][ T5944] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.249865][ T5944] usb 4-1: device descriptor read/64, error -71 [ 184.399946][ T5944] usb usb4-port1: attempt power cycle [ 184.449016][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'. [ 184.769980][ T5944] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 185.000093][ T5944] usb 4-1: device not accepting address 5, error -71 [ 187.461350][ T6816] overlayfs: overlapping lowerdir path [ 188.888822][ T6828] kvm: user requested TSC rate below hardware speed [ 188.896666][ T6828] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 189.160197][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 189.170431][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 194.601069][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.607910][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.037331][ T6879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.247'. [ 195.120029][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'. [ 195.251843][ T6879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.247'. [ 195.386864][ T6879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.247'. [ 196.081930][ T6893] overlayfs: overlapping lowerdir path [ 196.937662][ T6901] netlink: 'syz.3.251': attribute type 12 has an invalid length. [ 196.945701][ T6901] netlink: 'syz.3.251': attribute type 29 has an invalid length. [ 196.953549][ T6901] netlink: 148 bytes leftover after parsing attributes in process `syz.3.251'. [ 196.962619][ T6901] netlink: 59 bytes leftover after parsing attributes in process `syz.3.251'. [ 206.656938][ T6951] kvm: user requested TSC rate below hardware speed [ 206.666702][ T6951] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 207.081114][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 207.091512][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 207.860066][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 207.866174][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 207.872915][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 207.877039][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 208.386956][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 210.462900][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056e72000: rx timeout, send abort [ 210.472273][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056e72000: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 218.900415][ T7043] kvm: user requested TSC rate below hardware speed [ 218.908041][ T7043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 219.261085][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 219.273112][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 220.994142][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059701000: rx timeout, send abort [ 221.009939][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059701000: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 224.556980][ T7087] kvm: user requested TSC rate below hardware speed [ 224.567134][ T7087] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 224.771719][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 224.784894][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 224.899861][ T5937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 225.204024][ T5937] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 225.326571][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.779940][ T5937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.820047][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.857537][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.887162][ T5937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.909397][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.919088][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.960006][ T5937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.983820][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.995291][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.018023][ T5937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.154858][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.176065][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.740038][ T5937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.796406][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.826554][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.868356][ T5937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.922070][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.998988][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.024030][ T5937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.074951][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.099093][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.149091][ T5937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.225909][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.249560][ T5937] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 227.309911][ T5937] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 227.339076][ T5937] usb 5-1: Product: syz [ 227.418605][ T5937] usb 5-1: Manufacturer: syz [ 227.513890][ T5937] usb 5-1: SerialNumber: syz [ 227.894455][ T5937] usb 5-1: config 0 descriptor?? [ 227.978772][ T5937] usb 5-1: can't set config #0, error -71 [ 228.103042][ T5937] usb 5-1: USB disconnect, device number 3 [ 230.104556][ T7132] syzkaller0: entered promiscuous mode [ 230.131490][ T7132] syzkaller0: entered allmulticast mode [ 241.733241][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034694800: rx timeout, send abort [ 241.749874][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888034694800: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 252.496701][ T7315] netlink: 'syz.0.372': attribute type 12 has an invalid length. [ 252.504681][ T7315] netlink: 'syz.0.372': attribute type 29 has an invalid length. [ 252.512524][ T7315] netlink: 148 bytes leftover after parsing attributes in process `syz.0.372'. [ 252.521938][ T7315] netlink: 59 bytes leftover after parsing attributes in process `syz.0.372'. [ 255.806316][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.812898][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.875550][ T7353] netlink: 'syz.0.381': attribute type 12 has an invalid length. [ 257.883510][ T7353] netlink: 'syz.0.381': attribute type 29 has an invalid length. [ 257.891388][ T7353] netlink: 148 bytes leftover after parsing attributes in process `syz.0.381'. [ 257.900479][ T7353] netlink: 59 bytes leftover after parsing attributes in process `syz.0.381'. [ 260.657766][ T7370] netlink: 'syz.1.386': attribute type 12 has an invalid length. [ 260.665653][ T7370] netlink: 'syz.1.386': attribute type 29 has an invalid length. [ 260.674719][ T7370] netlink: 148 bytes leftover after parsing attributes in process `syz.1.386'. [ 260.683713][ T7370] netlink: 59 bytes leftover after parsing attributes in process `syz.1.386'. [ 262.110985][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802525a400: rx timeout, send abort [ 262.119517][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802525a400: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 264.880726][ T30] audit: type=1326 audit(1755169409.914:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7396 comm="syz.0.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fceafd8ebe9 code=0x0 [ 265.685771][ T7417] netlink: 'syz.3.400': attribute type 12 has an invalid length. [ 265.695277][ T7417] netlink: 'syz.3.400': attribute type 29 has an invalid length. [ 265.703141][ T7417] netlink: 148 bytes leftover after parsing attributes in process `syz.3.400'. [ 265.712155][ T7417] netlink: 59 bytes leftover after parsing attributes in process `syz.3.400'. [ 267.047120][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888142b7d000: rx timeout, send abort [ 267.056369][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888142b7d000: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 268.581102][ T7440] overlayfs: overlapping lowerdir path [ 270.657884][ T30] audit: type=1326 audit(1755169415.724:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.1.412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbebab8ebe9 code=0x0 [ 272.526081][ T7461] netlink: 'syz.2.416': attribute type 12 has an invalid length. [ 272.533968][ T7461] netlink: 'syz.2.416': attribute type 29 has an invalid length. [ 272.541791][ T7461] netlink: 148 bytes leftover after parsing attributes in process `syz.2.416'. [ 272.551739][ T7461] netlink: 59 bytes leftover after parsing attributes in process `syz.2.416'. [ 274.028501][ T7484] netlink: 'syz.4.418': attribute type 12 has an invalid length. [ 274.036370][ T7484] netlink: 'syz.4.418': attribute type 29 has an invalid length. [ 274.044188][ T7484] netlink: 148 bytes leftover after parsing attributes in process `syz.4.418'. [ 274.053201][ T7484] netlink: 59 bytes leftover after parsing attributes in process `syz.4.418'. [ 274.973737][ T7491] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 274.980506][ T7491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.115344][ T7492] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.309522][ T7491] vhci_hcd vhci_hcd.0: Device attached [ 275.411520][ T7491] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 275.418192][ T7491] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.433800][ T30] audit: type=1326 audit(1755169420.494:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7499 comm="syz.3.425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d0578ebe9 code=0x0 [ 275.532803][ T7491] vhci_hcd vhci_hcd.0: Device attached [ 275.560104][ T5937] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 275.649694][ T7498] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 275.656351][ T7498] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.939964][ T7491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.949137][ T7491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.958323][ T7491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.973697][ T7498] vhci_hcd vhci_hcd.0: Device attached [ 276.049197][ T7491] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(27) [ 276.055900][ T7491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.118603][ T7492] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 276.125274][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.139471][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 276.146774][ T7491] vhci_hcd vhci_hcd.0: Device attached [ 276.180956][ T7504] vhci_hcd: connection closed [ 276.181631][ T7493] vhci_hcd: connection reset by peer [ 276.192277][ T154] vhci_hcd: stop threads [ 276.197215][ T154] vhci_hcd: release socket [ 276.216162][ T7501] vhci_hcd: connection closed [ 276.218287][ T154] vhci_hcd: disconnect device [ 276.251249][ T154] vhci_hcd: stop threads [ 276.255549][ T154] vhci_hcd: release socket [ 276.283148][ T154] vhci_hcd: disconnect device [ 276.296788][ T7508] vhci_hcd: connection closed [ 276.380134][ T154] vhci_hcd: stop threads [ 276.409994][ T154] vhci_hcd: release socket [ 276.486256][ T7510] vhci_hcd: connection closed [ 276.496025][ T154] vhci_hcd: disconnect device [ 276.526478][ T154] vhci_hcd: stop threads [ 276.566487][ T154] vhci_hcd: release socket [ 276.625319][ T154] vhci_hcd: disconnect device [ 276.755566][ T154] vhci_hcd: stop threads [ 276.885560][ T154] vhci_hcd: release socket [ 277.002706][ T154] vhci_hcd: disconnect device [ 278.081154][ T7526] netlink: 'syz.2.429': attribute type 12 has an invalid length. [ 278.088987][ T7526] netlink: 'syz.2.429': attribute type 29 has an invalid length. [ 278.096835][ T7526] netlink: 148 bytes leftover after parsing attributes in process `syz.2.429'. [ 278.106009][ T7526] netlink: 59 bytes leftover after parsing attributes in process `syz.2.429'. [ 278.476299][ T7536] tipc: Started in network mode [ 278.489364][ T7536] tipc: Node identity caaebec3cd84, cluster identity 4711 [ 278.504036][ T7536] tipc: Enabled bearer , priority 0 [ 278.522170][ T7536] syzkaller0: entered promiscuous mode [ 278.538361][ T7536] syzkaller0: entered allmulticast mode [ 278.610759][ T7536] tipc: Resetting bearer [ 278.822934][ T7534] tipc: Resetting bearer [ 278.858244][ T7534] tipc: Disabling bearer [ 278.984456][ T7543] netlink: 'syz.2.434': attribute type 12 has an invalid length. [ 278.992354][ T7543] netlink: 'syz.2.434': attribute type 29 has an invalid length. [ 279.000732][ T7543] netlink: 148 bytes leftover after parsing attributes in process `syz.2.434'. [ 279.010252][ T7543] netlink: 'syz.2.434': attribute type 2 has an invalid length. [ 279.017943][ T7543] netlink: 23 bytes leftover after parsing attributes in process `syz.2.434'. [ 280.890377][ T5937] vhci_hcd: vhci_device speed not set [ 281.904097][ T7559] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 281.910665][ T7559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.061813][ T7564] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.073030][ T7559] vhci_hcd vhci_hcd.0: Device attached [ 282.082683][ T7559] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 282.089320][ T7559] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 282.188772][ T7559] vhci_hcd vhci_hcd.0: Device attached [ 282.674777][ T48] usb usb36-port1: attempt power cycle [ 283.091815][ T7564] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 283.098481][ T7564] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 283.321525][ T7564] vhci_hcd vhci_hcd.0: Device attached [ 283.364846][ T7564] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.887797][ T7559] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 283.894466][ T7559] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 283.909651][ T7559] vhci_hcd vhci_hcd.0: Device attached [ 283.938671][ T7564] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.731411][ T7586] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.842683][ T48] usb 36-1: SetAddress Request (5) to port 0 [ 284.876639][ T7559] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(28) [ 284.883303][ T7559] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 285.136839][ T7559] vhci_hcd vhci_hcd.0: Device attached [ 285.371483][ T7589] netlink: 'syz.0.445': attribute type 12 has an invalid length. [ 285.379300][ T7589] netlink: 'syz.0.445': attribute type 29 has an invalid length. [ 285.387081][ T7589] netlink: 148 bytes leftover after parsing attributes in process `syz.0.445'. [ 285.396106][ T7589] netlink: 59 bytes leftover after parsing attributes in process `syz.0.445'. [ 285.398819][ T7587] vhci_hcd: connection closed [ 285.407444][ T48] usb 36-1: new SuperSpeed USB device number 5 using vhci_hcd [ 285.413623][ T7574] vhci_hcd: connection closed [ 285.424000][ T7565] vhci_hcd: connection closed [ 285.432331][ T49] vhci_hcd: stop threads [ 285.447513][ T7580] vhci_hcd: connection closed [ 285.834254][ T7584] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 285.845045][ T7561] vhci_hcd: connection closed [ 285.873503][ T49] vhci_hcd: release socket [ 285.883269][ T49] vhci_hcd: disconnect device [ 285.888815][ T49] vhci_hcd: stop threads [ 285.893884][ T49] vhci_hcd: release socket [ 285.898608][ T49] vhci_hcd: disconnect device [ 285.906964][ T49] vhci_hcd: stop threads [ 285.914818][ T49] vhci_hcd: release socket [ 285.919505][ T49] vhci_hcd: disconnect device [ 286.026514][ T49] vhci_hcd: stop threads [ 286.043975][ T49] vhci_hcd: release socket [ 286.058664][ T49] vhci_hcd: disconnect device [ 286.081486][ T49] vhci_hcd: stop threads [ 286.328046][ T49] vhci_hcd: release socket [ 286.494764][ T49] vhci_hcd: disconnect device [ 290.148060][ T7632] netlink: 'syz.0.457': attribute type 12 has an invalid length. [ 290.156051][ T7632] netlink: 'syz.0.457': attribute type 29 has an invalid length. [ 290.164428][ T7632] netlink: 148 bytes leftover after parsing attributes in process `syz.0.457'. [ 290.174039][ T7632] netlink: 'syz.0.457': attribute type 2 has an invalid length. [ 290.181842][ T7632] netlink: 'syz.0.457': attribute type 3 has an invalid length. [ 290.189534][ T7632] netlink: 3 bytes leftover after parsing attributes in process `syz.0.457'. [ 290.913855][ T48] usb 36-1: device descriptor read/8, error -110 [ 291.112907][ T48] usb usb36-port1: unable to enumerate USB device [ 291.202108][ T5937] vhci_hcd: vhci_device speed not set [ 292.353733][ T7647] kvm: user requested TSC rate below hardware speed [ 292.361545][ T7647] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 292.441703][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 292.451083][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 293.222558][ T7641] netlink: 'syz.0.459': attribute type 12 has an invalid length. [ 293.230429][ T7641] netlink: 'syz.0.459': attribute type 29 has an invalid length. [ 293.238685][ T7641] netlink: 148 bytes leftover after parsing attributes in process `syz.0.459'. [ 293.247766][ T7641] netlink: 59 bytes leftover after parsing attributes in process `syz.0.459'. [ 294.127634][ T7656] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 294.134215][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 294.215369][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 294.266050][ T7661] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 294.329844][ T7656] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 294.336508][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 294.412567][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 294.450038][ T7661] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 294.456700][ T7661] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 294.467329][ T7656] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 294.473983][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 294.490266][ T5905] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 294.549875][ T7661] vhci_hcd vhci_hcd.0: Device attached [ 294.590867][ T7661] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 294.640188][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 294.727135][ T7656] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 294.792383][ T7672] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(25) [ 294.799044][ T7672] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 295.570885][ T7672] vhci_hcd vhci_hcd.0: Device attached [ 295.872058][ T7661] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.113821][ T7667] vhci_hcd: connection closed [ 296.121809][ T7673] vhci_hcd: connection closed [ 296.139885][ T49] vhci_hcd: stop threads [ 296.148865][ T49] vhci_hcd: release socket [ 296.162064][ T7665] vhci_hcd: connection closed [ 296.162317][ T7659] vhci_hcd: connection reset by peer [ 296.265774][ T7662] vhci_hcd: connection closed [ 296.742500][ T49] vhci_hcd: disconnect device [ 296.752631][ T49] vhci_hcd: stop threads [ 296.756916][ T49] vhci_hcd: release socket [ 296.761512][ T49] vhci_hcd: disconnect device [ 296.789822][ T49] vhci_hcd: stop threads [ 296.795608][ T49] vhci_hcd: release socket [ 296.929874][ T49] vhci_hcd: disconnect device [ 296.950146][ T49] vhci_hcd: stop threads [ 296.981573][ T49] vhci_hcd: release socket [ 297.011237][ T49] vhci_hcd: disconnect device [ 297.060290][ T49] vhci_hcd: stop threads [ 297.070121][ T49] vhci_hcd: release socket [ 297.149668][ T7694] netlink: 'syz.1.468': attribute type 12 has an invalid length. [ 297.157605][ T7694] netlink: 'syz.1.468': attribute type 29 has an invalid length. [ 297.165490][ T7694] netlink: 148 bytes leftover after parsing attributes in process `syz.1.468'. [ 297.174602][ T7694] netlink: 'syz.1.468': attribute type 2 has an invalid length. [ 297.182331][ T7694] netlink: 23 bytes leftover after parsing attributes in process `syz.1.468'. [ 297.708330][ T49] vhci_hcd: disconnect device [ 299.195920][ T7711] overlayfs: overlapping lowerdir path [ 299.610457][ T5905] vhci_hcd: vhci_device speed not set [ 301.046408][ T7722] netlink: 'syz.4.477': attribute type 12 has an invalid length. [ 301.054211][ T7722] netlink: 'syz.4.477': attribute type 29 has an invalid length. [ 301.062059][ T7722] netlink: 148 bytes leftover after parsing attributes in process `syz.4.477'. [ 301.071116][ T7722] netlink: 59 bytes leftover after parsing attributes in process `syz.4.477'. [ 301.756596][ T5944] usb usb42-port1: attempt power cycle [ 302.929359][ T7733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 302.935929][ T7733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.948345][ T7733] vhci_hcd vhci_hcd.0: Device attached [ 302.958518][ T7733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 303.019884][ T30] audit: type=1326 audit(1755169448.084:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.2.480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba7b8ebe9 code=0x0 [ 303.051451][ T7733] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 303.058082][ T7733] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 303.069981][ T7733] vhci_hcd vhci_hcd.0: Device attached [ 303.079205][ T7733] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 303.085853][ T7733] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 303.241949][ T7733] vhci_hcd vhci_hcd.0: Device attached [ 303.248219][ T5944] usb usb42-port1: unable to enumerate USB device [ 303.269129][ T7747] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 303.275789][ T7747] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 304.238085][ T7747] vhci_hcd vhci_hcd.0: Device attached [ 304.248956][ T979] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 304.262428][ T7733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 306.100564][ T7733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 306.404265][ T7733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 306.550535][ T7747] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(27) [ 306.557199][ T7747] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 306.685742][ T7747] vhci_hcd vhci_hcd.0: Device attached [ 306.915016][ T30] audit: type=1326 audit(1755169451.984:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7758 comm="syz.3.484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d0578ebe9 code=0x0 [ 307.766326][ T7778] overlayfs: overlapping lowerdir path [ 307.951563][ T7760] vhci_hcd: connection closed [ 307.959066][ T7748] vhci_hcd: connection closed [ 307.963986][ T7743] vhci_hcd: connection closed [ 307.967764][ T7735] vhci_hcd: connection reset by peer [ 307.970257][ T7739] vhci_hcd: connection closed [ 307.973416][ T6405] vhci_hcd: stop threads [ 308.081481][ T7785] netlink: 'syz.1.487': attribute type 3 has an invalid length. [ 308.577213][ T6405] vhci_hcd: release socket [ 308.582108][ T6405] vhci_hcd: disconnect device [ 308.606795][ T6405] vhci_hcd: stop threads [ 308.649840][ T6405] vhci_hcd: release socket [ 308.750367][ T6405] vhci_hcd: disconnect device [ 308.760810][ T6405] vhci_hcd: stop threads [ 308.765091][ T6405] vhci_hcd: release socket [ 308.797433][ T6405] vhci_hcd: disconnect device [ 308.810575][ T6405] vhci_hcd: stop threads [ 308.823440][ T6405] vhci_hcd: release socket [ 308.848272][ T6405] vhci_hcd: disconnect device [ 309.002172][ T7788] netlink: 'syz.3.489': attribute type 12 has an invalid length. [ 309.010192][ T7788] netlink: 'syz.3.489': attribute type 29 has an invalid length. [ 309.017914][ T7788] netlink: 148 bytes leftover after parsing attributes in process `syz.3.489'. [ 309.026908][ T7788] netlink: 59 bytes leftover after parsing attributes in process `syz.3.489'. [ 309.060015][ T6405] vhci_hcd: stop threads [ 309.064401][ T6405] vhci_hcd: release socket [ 309.204677][ T6405] vhci_hcd: disconnect device [ 309.606291][ T979] vhci_hcd: vhci_device speed not set [ 310.584628][ T7805] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.493'. [ 310.594658][ T7805] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.493'. [ 310.603835][ T7805] netlink: 640 bytes leftover after parsing attributes in process `syz.4.493'. [ 311.425635][ T5944] usb usb34-port1: attempt power cycle [ 311.527319][ T30] audit: type=1326 audit(1755169456.594:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.4.495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7eeb8ebe9 code=0x0 [ 312.250432][ T7819] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.497'. [ 312.260368][ T7819] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.497'. [ 312.269460][ T7819] netlink: 640 bytes leftover after parsing attributes in process `syz.3.497'. [ 312.287060][ T5944] usb usb34-port1: unable to enumerate USB device [ 315.135313][ T7835] kvm: user requested TSC rate below hardware speed [ 315.144020][ T7835] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 315.482105][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 315.495161][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 316.590152][ T5944] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 316.901964][ T5944] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.911094][ T5944] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 317.519036][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.528390][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.560020][ T5944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.688034][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 317.699451][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 317.723543][ T5944] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.783827][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.801378][ T5944] usb 3-1: Product: syz [ 317.805689][ T5944] usb 3-1: Manufacturer: syz [ 317.891368][ T7863] netlink: 'syz.1.509': attribute type 12 has an invalid length. [ 317.899202][ T7863] netlink: 'syz.1.509': attribute type 29 has an invalid length. [ 317.907080][ T7863] netlink: 148 bytes leftover after parsing attributes in process `syz.1.509'. [ 317.916994][ T7863] netlink: 'syz.1.509': attribute type 2 has an invalid length. [ 317.924866][ T7863] netlink: 'syz.1.509': attribute type 3 has an invalid length. [ 317.932597][ T7863] netlink: 3 bytes leftover after parsing attributes in process `syz.1.509'. [ 318.406370][ T5944] cdc_wdm 3-1:1.0: skipping garbage [ 318.411708][ T5944] cdc_wdm 3-1:1.0: skipping garbage [ 318.435201][ T5944] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 318.500148][ T5944] cdc_wdm 3-1:1.0: Unknown control protocol [ 318.555955][ T30] audit: type=1326 audit(1755169463.624:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7861 comm="syz.4.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7eeb8ebe9 code=0x0 [ 318.655533][ T5905] usb 3-1: USB disconnect, device number 3 [ 318.974041][ T7873] can0: slcan on ttyS3. [ 319.082812][ T7873] can0 (unregistered): slcan off ttyS3. [ 320.060169][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 320.603871][ T5905] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.366278][ T5905] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.614805][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.623939][ T5905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 321.634958][ T5905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 321.660933][ T5905] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.967266][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.005302][ T7889] syz.0.519 (7889) used greatest stack depth: 20168 bytes left [ 323.046275][ T5905] usb 3-1: Product: syz [ 323.050901][ T5905] usb 3-1: Manufacturer: syz [ 323.060211][ T5905] usb 3-1: can't set config #1, error -71 [ 323.077514][ T5905] usb 3-1: USB disconnect, device number 4 [ 324.654791][ T7914] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 324.661452][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 324.678389][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 324.688416][ T7914] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 324.695055][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.707188][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 324.716531][ T7914] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 324.723167][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 324.832927][ T7911] kvm: user requested TSC rate below hardware speed [ 324.840589][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 324.849915][ T979] vhci_hcd: vhci_device speed not set [ 324.855347][ T7914] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 324.861955][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 325.453550][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 325.502077][ T7911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 325.519435][ T979] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 325.766641][ T7928] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 325.844857][ T7931] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 325.922462][ T7928] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 325.993253][ T7914] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 325.999909][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 326.261246][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 326.462872][ T7931] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(28) [ 326.469536][ T7931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.510821][ T7939] program syz.3.530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.906617][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'. [ 326.969928][ T7931] vhci_hcd vhci_hcd.0: Device attached [ 327.038780][ T7929] vhci_hcd: connection closed [ 327.045039][ T78] vhci_hcd: stop threads [ 327.054361][ T7918] vhci_hcd: connection closed [ 327.054608][ T7916] vhci_hcd: connection reset by peer [ 327.059942][ T7920] vhci_hcd: connection closed [ 327.064849][ T7924] vhci_hcd: connection closed [ 327.085304][ T78] vhci_hcd: release socket [ 327.112939][ T78] vhci_hcd: disconnect device [ 327.129029][ T7946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 327.135682][ T7946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 327.154432][ T78] vhci_hcd: stop threads [ 327.159380][ T78] vhci_hcd: release socket [ 327.186797][ T7937] vhci_hcd: connection closed [ 327.187817][ T78] vhci_hcd: disconnect device [ 327.241182][ T7946] vhci_hcd vhci_hcd.0: Device attached [ 327.274561][ T78] vhci_hcd: stop threads [ 327.282289][ T78] vhci_hcd: release socket [ 327.286918][ T78] vhci_hcd: disconnect device [ 327.294018][ T78] vhci_hcd: stop threads [ 327.298332][ T78] vhci_hcd: release socket [ 327.306194][ T78] vhci_hcd: disconnect device [ 327.313822][ T78] vhci_hcd: stop threads [ 327.318272][ T78] vhci_hcd: release socket [ 327.319592][ T7951] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 327.341969][ T78] vhci_hcd: disconnect device [ 327.349346][ T78] vhci_hcd: stop threads [ 327.355089][ T7946] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(16) [ 327.361687][ T7946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 327.376387][ T78] vhci_hcd: release socket [ 327.386029][ T78] vhci_hcd: disconnect device [ 327.409156][ T7955] kvm: user requested TSC rate below hardware speed [ 327.418484][ T7955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 327.442005][ T5943] vhci_hcd: vhci_device speed not set [ 327.507483][ T5943] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 327.518946][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 327.528232][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 327.546937][ T7946] vhci_hcd vhci_hcd.0: Device attached [ 328.168983][ T7946] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 328.175655][ T7946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 328.206774][ T7946] vhci_hcd vhci_hcd.0: Device attached [ 328.290367][ T7963] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 328.349919][ T7946] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 328.369437][ T7951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 328.376080][ T7951] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 328.434769][ T7951] vhci_hcd vhci_hcd.0: Device attached [ 328.500965][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880346ba800: rx timeout, send abort [ 328.504550][ T7946] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 328.509641][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880346ba800: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 330.959872][ T979] vhci_hcd: vhci_device speed not set [ 331.053639][ T7949] vhci_hcd: connection reset by peer [ 331.053644][ T7959] vhci_hcd: connection closed [ 331.055151][ T6405] vhci_hcd: stop threads [ 331.069787][ T7964] vhci_hcd: connection closed [ 331.069800][ T7952] vhci_hcd: connection closed [ 331.084263][ T6405] vhci_hcd: release socket [ 331.115701][ T6405] vhci_hcd: disconnect device [ 331.151217][ T6405] vhci_hcd: stop threads [ 331.161899][ T6405] vhci_hcd: release socket [ 331.173128][ T6405] vhci_hcd: disconnect device [ 331.208854][ T6405] vhci_hcd: stop threads [ 331.213292][ T6405] vhci_hcd: release socket [ 331.338280][ T6405] vhci_hcd: disconnect device [ 331.343397][ T6405] vhci_hcd: stop threads [ 331.347677][ T6405] vhci_hcd: release socket [ 331.352356][ T6405] vhci_hcd: disconnect device [ 332.787637][ T5943] vhci_hcd: vhci_device speed not set [ 333.150769][ T5926] usb usb42-port1: attempt power cycle [ 334.136893][ T5926] usb usb42-port1: unable to enumerate USB device [ 335.507903][ T10] usb usb34-port1: attempt power cycle [ 335.590262][ T5905] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 335.809840][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 335.928262][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.345331][ T10] usb usb34-port1: unable to enumerate USB device [ 336.351915][ T5905] usb 5-1: config 0 has no interfaces? [ 336.363102][ T5905] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 336.372885][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 336.381914][ T5905] usb 5-1: Product: syz [ 336.459870][ T5905] usb 5-1: Manufacturer: syz [ 336.469270][ T5905] usb 5-1: SerialNumber: syz [ 336.485861][ T5905] usb 5-1: config 0 descriptor?? [ 336.655150][ T5905] usb 5-1: USB disconnect, device number 4 [ 337.857812][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880595e3000: rx timeout, send abort [ 337.869829][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880595e3000: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 339.350141][ T8043] kvm: user requested TSC rate below hardware speed [ 339.363360][ T8043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 340.433382][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 340.442724][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 342.626958][ T8065] kvm: user requested TSC rate below hardware speed [ 342.786442][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 342.800950][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 347.776193][ T8097] netlink: 'syz.4.575': attribute type 12 has an invalid length. [ 347.784528][ T8097] netlink: 'syz.4.575': attribute type 29 has an invalid length. [ 347.792524][ T8097] netlink: 148 bytes leftover after parsing attributes in process `syz.4.575'. [ 347.801843][ T8097] netlink: 'syz.4.575': attribute type 2 has an invalid length. [ 347.809497][ T8097] netlink: 'syz.4.575': attribute type 3 has an invalid length. [ 347.819261][ T8097] netlink: 3 bytes leftover after parsing attributes in process `syz.4.575'. [ 353.553868][ T8132] FAULT_INJECTION: forcing a failure. [ 353.553868][ T8132] name failslab, interval 1, probability 0, space 0, times 1 [ 353.703667][ T8132] CPU: 1 UID: 0 PID: 8132 Comm: syz.0.584 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 353.703693][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.703712][ T8132] Call Trace: [ 353.703724][ T8132] [ 353.703733][ T8132] dump_stack_lvl+0x189/0x250 [ 353.703769][ T8132] ? __pfx____ratelimit+0x10/0x10 [ 353.703790][ T8132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.703810][ T8132] ? __pfx__printk+0x10/0x10 [ 353.703840][ T8132] ? __pfx___might_resched+0x10/0x10 [ 353.703860][ T8132] ? fs_reclaim_acquire+0x7d/0x100 [ 353.703888][ T8132] should_fail_ex+0x414/0x560 [ 353.703913][ T8132] should_failslab+0xa8/0x100 [ 353.703935][ T8132] __kmalloc_noprof+0xcb/0x4f0 [ 353.703952][ T8132] ? kfree+0x4d/0x440 [ 353.703977][ T8132] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 353.704005][ T8132] tomoyo_realpath_from_path+0xe3/0x5d0 [ 353.704031][ T8132] ? tomoyo_domain+0xda/0x130 [ 353.704060][ T8132] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 353.704080][ T8132] tomoyo_path_number_perm+0x1e8/0x5a0 [ 353.704102][ T8132] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.704140][ T8132] ? __lock_acquire+0xab9/0xd20 [ 353.704180][ T8132] ? __fget_files+0x2a/0x420 [ 353.704201][ T8132] ? __fget_files+0x2a/0x420 [ 353.704219][ T8132] ? __fget_files+0x3a0/0x420 [ 353.704236][ T8132] ? __fget_files+0x2a/0x420 [ 353.704260][ T8132] security_file_ioctl+0xcb/0x2d0 [ 353.704283][ T8132] __se_sys_ioctl+0x47/0x170 [ 353.704312][ T8132] do_syscall_64+0xfa/0x3b0 [ 353.704332][ T8132] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.704352][ T8132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.704369][ T8132] ? clear_bhb_loop+0x60/0xb0 [ 353.704392][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.704410][ T8132] RIP: 0033:0x7fceafd8ebe9 [ 353.704433][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.704452][ T8132] RSP: 002b:00007fceb0c43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.704478][ T8132] RAX: ffffffffffffffda RBX: 00007fceaffb5fa0 RCX: 00007fceafd8ebe9 [ 353.704492][ T8132] RDX: 0000200000000b00 RSI: 0000000040946400 RDI: 0000000000000003 [ 353.704504][ T8132] RBP: 00007fceb0c43090 R08: 0000000000000000 R09: 0000000000000000 [ 353.704516][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.704526][ T8132] R13: 00007fceaffb6038 R14: 00007fceaffb5fa0 R15: 00007ffd915c1038 [ 353.704564][ T8132] [ 353.704571][ T8132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.999458][ T8146] netlink: 'syz.4.587': attribute type 12 has an invalid length. [ 355.007345][ T8146] netlink: 'syz.4.587': attribute type 29 has an invalid length. [ 355.015144][ T8146] netlink: 148 bytes leftover after parsing attributes in process `syz.4.587'. [ 355.024149][ T8146] netlink: 59 bytes leftover after parsing attributes in process `syz.4.587'. [ 360.115566][ T8157] netlink: 'syz.4.590': attribute type 12 has an invalid length. [ 360.123394][ T8157] netlink: 'syz.4.590': attribute type 29 has an invalid length. [ 360.131298][ T8157] netlink: 148 bytes leftover after parsing attributes in process `syz.4.590'. [ 360.140305][ T8157] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 360.147953][ T8157] netlink: 'syz.4.590': attribute type 3 has an invalid length. [ 360.155682][ T8157] netlink: 3 bytes leftover after parsing attributes in process `syz.4.590'. [ 361.082900][ T8160] kvm: user requested TSC rate below hardware speed [ 361.091511][ T8160] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 361.237105][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 361.247200][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 362.638392][ T8185] overlayfs: overlapping lowerdir path [ 363.252972][ T8181] bond1: entered allmulticast mode [ 363.258622][ T8181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.290800][ T8181] bridge0: port 3(bond1) entered blocking state [ 363.297222][ T8181] bridge0: port 3(bond1) entered disabled state [ 364.336689][ T8181] bond1: entered promiscuous mode [ 364.640774][ T8181] bridge0: port 3(bond1) entered blocking state [ 364.647418][ T8181] bridge0: port 3(bond1) entered forwarding state [ 365.026408][ T154] bridge0: port 3(bond1) entered disabled state [ 365.772640][ T8199] netlink: 'syz.0.601': attribute type 12 has an invalid length. [ 365.780687][ T8199] netlink: 'syz.0.601': attribute type 29 has an invalid length. [ 365.788428][ T8199] netlink: 148 bytes leftover after parsing attributes in process `syz.0.601'. [ 365.797780][ T8199] netlink: 59 bytes leftover after parsing attributes in process `syz.0.601'. [ 366.136585][ T8214] netlink: 'syz.3.605': attribute type 12 has an invalid length. [ 366.145008][ T8214] netlink: 'syz.3.605': attribute type 29 has an invalid length. [ 366.153205][ T8214] netlink: 148 bytes leftover after parsing attributes in process `syz.3.605'. [ 366.162278][ T8214] netlink: 'syz.3.605': attribute type 2 has an invalid length. [ 366.170000][ T8214] netlink: 'syz.3.605': attribute type 3 has an invalid length. [ 366.177680][ T8214] netlink: 3 bytes leftover after parsing attributes in process `syz.3.605'. [ 366.938777][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 366.951579][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 367.501472][ T8225] FAULT_INJECTION: forcing a failure. [ 367.501472][ T8225] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 367.514708][ T8225] CPU: 0 UID: 0 PID: 8225 Comm: syz.2.608 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 367.514731][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.514754][ T8225] Call Trace: [ 367.514762][ T8225] [ 367.514770][ T8225] dump_stack_lvl+0x189/0x250 [ 367.514796][ T8225] ? __pfx____ratelimit+0x10/0x10 [ 367.514816][ T8225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.514838][ T8225] ? __pfx__printk+0x10/0x10 [ 367.514862][ T8225] ? __might_fault+0xb0/0x130 [ 367.514893][ T8225] should_fail_ex+0x414/0x560 [ 367.514919][ T8225] _copy_from_user+0x2d/0xb0 [ 367.514945][ T8225] ___sys_sendmsg+0x158/0x2a0 [ 367.514977][ T8225] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.515044][ T8225] ? __fget_files+0x2a/0x420 [ 367.515064][ T8225] ? __fget_files+0x3a0/0x420 [ 367.515096][ T8225] __x64_sys_sendmsg+0x19b/0x260 [ 367.515128][ T8225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.515176][ T8225] ? do_syscall_64+0xbe/0x3b0 [ 367.515201][ T8225] do_syscall_64+0xfa/0x3b0 [ 367.515223][ T8225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.515241][ T8225] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 367.515259][ T8225] ? clear_bhb_loop+0x60/0xb0 [ 367.515282][ T8225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.515300][ T8225] RIP: 0033:0x7ffba7b8ebe9 [ 367.515317][ T8225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.515333][ T8225] RSP: 002b:00007ffba8a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.515353][ T8225] RAX: ffffffffffffffda RBX: 00007ffba7db6180 RCX: 00007ffba7b8ebe9 [ 367.515367][ T8225] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 367.515379][ T8225] RBP: 00007ffba8a27090 R08: 0000000000000000 R09: 0000000000000000 [ 367.515391][ T8225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.515402][ T8225] R13: 00007ffba7db6218 R14: 00007ffba7db6180 R15: 00007fffc3d99428 [ 367.515439][ T8225] [ 368.545316][ T8242] overlayfs: overlapping lowerdir path [ 369.106980][ T8239] dlm: non-version read from control device 240 [ 369.227937][ T8247] FAULT_INJECTION: forcing a failure. [ 369.227937][ T8247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.354965][ T8247] CPU: 1 UID: 0 PID: 8247 Comm: syz.1.614 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 369.354993][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.355004][ T8247] Call Trace: [ 369.355012][ T8247] [ 369.355020][ T8247] dump_stack_lvl+0x189/0x250 [ 369.355048][ T8247] ? __pfx____ratelimit+0x10/0x10 [ 369.355069][ T8247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.355090][ T8247] ? __pfx__printk+0x10/0x10 [ 369.355114][ T8247] ? __might_fault+0xb0/0x130 [ 369.355145][ T8247] should_fail_ex+0x414/0x560 [ 369.355170][ T8247] _copy_from_user+0x2d/0xb0 [ 369.355198][ T8247] ___sys_sendmsg+0x158/0x2a0 [ 369.355230][ T8247] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.355297][ T8247] ? __fget_files+0x2a/0x420 [ 369.355317][ T8247] ? __fget_files+0x3a0/0x420 [ 369.355360][ T8247] __x64_sys_sendmsg+0x19b/0x260 [ 369.355393][ T8247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.355431][ T8247] ? __pfx_ksys_write+0x10/0x10 [ 369.355447][ T8247] ? rcu_is_watching+0x15/0xb0 [ 369.355474][ T8247] ? do_syscall_64+0xbe/0x3b0 [ 369.355499][ T8247] do_syscall_64+0xfa/0x3b0 [ 369.355519][ T8247] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.355539][ T8247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.355558][ T8247] ? clear_bhb_loop+0x60/0xb0 [ 369.355581][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.355599][ T8247] RIP: 0033:0x7fbebab8ebe9 [ 369.355616][ T8247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.355632][ T8247] RSP: 002b:00007fbebb945038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.355652][ T8247] RAX: ffffffffffffffda RBX: 00007fbebadb5fa0 RCX: 00007fbebab8ebe9 [ 369.355666][ T8247] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 369.355679][ T8247] RBP: 00007fbebb945090 R08: 0000000000000000 R09: 0000000000000000 [ 369.355690][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.355702][ T8247] R13: 00007fbebadb6038 R14: 00007fbebadb5fa0 R15: 00007ffcd296d8e8 [ 369.355733][ T8247] [ 369.596374][ T8251] netlink: 277 bytes leftover after parsing attributes in process `syz.3.615'. [ 369.689799][ T5912] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 370.535189][ T8257] netlink: 'syz.4.618': attribute type 12 has an invalid length. [ 370.543103][ T8257] netlink: 'syz.4.618': attribute type 29 has an invalid length. [ 370.551740][ T8257] netlink: 148 bytes leftover after parsing attributes in process `syz.4.618'. [ 370.560774][ T8257] netlink: 59 bytes leftover after parsing attributes in process `syz.4.618'. [ 370.690033][ T30] audit: type=1326 audit(1755169515.754:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.3.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d0578ebe9 code=0x0 [ 370.800562][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.811766][ T5912] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 370.839791][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.400712][ T5912] usb 3-1: config 0 descriptor?? [ 371.406238][ T5912] usb 3-1: can't set config #0, error -71 [ 371.414279][ T5912] usb 3-1: USB disconnect, device number 5 [ 371.964990][ T8289] ======================================================= [ 371.964990][ T8289] WARNING: The mand mount option has been deprecated and [ 371.964990][ T8289] and is ignored by this kernel. Remove the mand [ 371.964990][ T8289] option from the mount to silence this warning. [ 371.964990][ T8289] ======================================================= [ 372.517309][ T8300] mmap: syz.0.629 (8300) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 372.618092][ T8300] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[8300] [ 373.378970][ T8295] netlink: 76 bytes leftover after parsing attributes in process `syz.3.628'. [ 373.414338][ T8303] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 374.489974][ T5905] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 374.698038][ T8317] FAULT_INJECTION: forcing a failure. [ 374.698038][ T8317] name failslab, interval 1, probability 0, space 0, times 0 [ 374.713282][ T5905] usb 1-1: Invalid ep0 maxpacket: 16 [ 374.747330][ T8317] CPU: 1 UID: 0 PID: 8317 Comm: syz.4.634 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 374.747358][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.747370][ T8317] Call Trace: [ 374.747377][ T8317] [ 374.747386][ T8317] dump_stack_lvl+0x189/0x250 [ 374.747412][ T8317] ? __pfx____ratelimit+0x10/0x10 [ 374.747433][ T8317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.747455][ T8317] ? __pfx__printk+0x10/0x10 [ 374.747486][ T8317] ? __pfx___might_resched+0x10/0x10 [ 374.747504][ T8317] ? fs_reclaim_acquire+0x7d/0x100 [ 374.747529][ T8317] should_fail_ex+0x414/0x560 [ 374.747552][ T8317] ? __pfx_sock_alloc_inode+0x10/0x10 [ 374.747577][ T8317] should_failslab+0xa8/0x100 [ 374.747598][ T8317] ? __pfx_sock_alloc_inode+0x10/0x10 [ 374.747618][ T8317] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 374.747636][ T8317] ? sock_alloc_inode+0x28/0xc0 [ 374.747661][ T8317] ? __pfx_sock_alloc_inode+0x10/0x10 [ 374.747682][ T8317] sock_alloc_inode+0x28/0xc0 [ 374.747702][ T8317] alloc_inode+0x67/0x1b0 [ 374.747724][ T8317] do_accept+0x111/0x680 [ 374.747755][ T8317] ? __pfx_do_accept+0x10/0x10 [ 374.747803][ T8317] __sys_accept4+0x11c/0x1c0 [ 374.747831][ T8317] ? __pfx___sys_accept4+0x10/0x10 [ 374.747856][ T8317] ? __pfx_ksys_write+0x10/0x10 [ 374.747877][ T8317] ? rcu_is_watching+0x15/0xb0 [ 374.747905][ T8317] __x64_sys_accept+0x7d/0x90 [ 374.747931][ T8317] do_syscall_64+0xfa/0x3b0 [ 374.747951][ T8317] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.747970][ T8317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.747989][ T8317] ? clear_bhb_loop+0x60/0xb0 [ 374.748013][ T8317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.748031][ T8317] RIP: 0033:0x7fe7eeb8ebe9 [ 374.748047][ T8317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.748063][ T8317] RSP: 002b:00007fe7efa33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 374.748083][ T8317] RAX: ffffffffffffffda RBX: 00007fe7eedb5fa0 RCX: 00007fe7eeb8ebe9 [ 374.748098][ T8317] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000003 [ 374.748110][ T8317] RBP: 00007fe7efa33090 R08: 0000000000000000 R09: 0000000000000000 [ 374.748122][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.748133][ T8317] R13: 00007fe7eedb6038 R14: 00007fe7eedb5fa0 R15: 00007ffc304e9458 [ 374.748164][ T8317] [ 375.070014][ T5905] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 375.230138][ T5905] usb 1-1: Invalid ep0 maxpacket: 16 [ 375.238535][ T5905] usb usb1-port1: attempt power cycle [ 375.239138][ T8323] netlink: 'syz.3.633': attribute type 12 has an invalid length. [ 375.252054][ T8323] netlink: 'syz.3.633': attribute type 29 has an invalid length. [ 375.262357][ T8323] netlink: 148 bytes leftover after parsing attributes in process `syz.3.633'. [ 375.273660][ T8323] netlink: 59 bytes leftover after parsing attributes in process `syz.3.633'. [ 376.960927][ T8341] FAULT_INJECTION: forcing a failure. [ 376.960927][ T8341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.974110][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.4.639 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 376.974123][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.974130][ T8341] Call Trace: [ 376.974134][ T8341] [ 376.974139][ T8341] dump_stack_lvl+0x189/0x250 [ 376.974155][ T8341] ? __pfx____ratelimit+0x10/0x10 [ 376.974167][ T8341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.974178][ T8341] ? __pfx__printk+0x10/0x10 [ 376.974197][ T8341] ? __might_fault+0xb0/0x130 [ 376.974213][ T8341] should_fail_ex+0x414/0x560 [ 376.974226][ T8341] _copy_from_user+0x2d/0xb0 [ 376.974241][ T8341] ___sys_sendmsg+0x158/0x2a0 [ 376.974259][ T8341] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.974293][ T8341] ? __fget_files+0x2a/0x420 [ 376.974304][ T8341] ? __fget_files+0x3a0/0x420 [ 376.974326][ T8341] __x64_sys_sendmsg+0x19b/0x260 [ 376.974343][ T8341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.974363][ T8341] ? __pfx_ksys_write+0x10/0x10 [ 376.974376][ T8341] ? do_syscall_64+0xbe/0x3b0 [ 376.974389][ T8341] do_syscall_64+0xfa/0x3b0 [ 376.974399][ T8341] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.974410][ T8341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.974419][ T8341] ? clear_bhb_loop+0x60/0xb0 [ 376.974431][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.974441][ T8341] RIP: 0033:0x7fe7eeb8ebe9 [ 376.974451][ T8341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.974460][ T8341] RSP: 002b:00007fe7ef9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.974471][ T8341] RAX: ffffffffffffffda RBX: 00007fe7eedb6180 RCX: 00007fe7eeb8ebe9 [ 376.974479][ T8341] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 376.974485][ T8341] RBP: 00007fe7ef9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 376.974491][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.974496][ T8341] R13: 00007fe7eedb6218 R14: 00007fe7eedb6180 R15: 00007ffc304e9458 [ 376.974512][ T8341] [ 378.698834][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.705352][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.014543][ T8349] FAULT_INJECTION: forcing a failure. [ 379.014543][ T8349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.047285][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.3.644 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 379.047301][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.047308][ T8349] Call Trace: [ 379.047313][ T8349] [ 379.047318][ T8349] dump_stack_lvl+0x189/0x250 [ 379.047334][ T8349] ? __pfx____ratelimit+0x10/0x10 [ 379.047346][ T8349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.047357][ T8349] ? __pfx__printk+0x10/0x10 [ 379.047370][ T8349] ? __might_fault+0xb0/0x130 [ 379.047386][ T8349] should_fail_ex+0x414/0x560 [ 379.047399][ T8349] _copy_from_user+0x2d/0xb0 [ 379.047414][ T8349] ___sys_sendmsg+0x158/0x2a0 [ 379.047432][ T8349] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.047467][ T8349] ? __fget_files+0x2a/0x420 [ 379.047478][ T8349] ? __fget_files+0x3a0/0x420 [ 379.047494][ T8349] __sys_sendmmsg+0x227/0x430 [ 379.047513][ T8349] ? __pfx___sys_sendmmsg+0x10/0x10 [ 379.047527][ T8349] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 379.047552][ T8349] ? ksys_write+0x22a/0x250 [ 379.047563][ T8349] ? __pfx_ksys_write+0x10/0x10 [ 379.047571][ T8349] ? rcu_is_watching+0x15/0xb0 [ 379.047586][ T8349] __x64_sys_sendmmsg+0xa0/0xc0 [ 379.047608][ T8349] do_syscall_64+0xfa/0x3b0 [ 379.047619][ T8349] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.047629][ T8349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.047639][ T8349] ? clear_bhb_loop+0x60/0xb0 [ 379.047651][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.047660][ T8349] RIP: 0033:0x7f1d0578ebe9 [ 379.047670][ T8349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.047678][ T8349] RSP: 002b:00007f1d066d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 379.047690][ T8349] RAX: ffffffffffffffda RBX: 00007f1d059b5fa0 RCX: 00007f1d0578ebe9 [ 379.047697][ T8349] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 379.047704][ T8349] RBP: 00007f1d066d5090 R08: 0000000000000000 R09: 0000000000000000 [ 379.047710][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.047716][ T8349] R13: 00007f1d059b6038 R14: 00007f1d059b5fa0 R15: 00007ffd19115018 [ 379.047731][ T8349] [ 379.263549][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.492035][ T8353] FAULT_INJECTION: forcing a failure. [ 379.492035][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 379.539137][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.0.646 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 379.539164][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.539175][ T8353] Call Trace: [ 379.539183][ T8353] [ 379.539191][ T8353] dump_stack_lvl+0x189/0x250 [ 379.539218][ T8353] ? __pfx____ratelimit+0x10/0x10 [ 379.539239][ T8353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.539260][ T8353] ? __pfx__printk+0x10/0x10 [ 379.539291][ T8353] ? __pfx___might_resched+0x10/0x10 [ 379.539312][ T8353] ? fs_reclaim_acquire+0x7d/0x100 [ 379.539340][ T8353] should_fail_ex+0x414/0x560 [ 379.539366][ T8353] should_failslab+0xa8/0x100 [ 379.539389][ T8353] __kmalloc_noprof+0xcb/0x4f0 [ 379.539406][ T8353] ? kfree+0x4d/0x440 [ 379.539431][ T8353] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 379.539462][ T8353] tomoyo_realpath_from_path+0xe3/0x5d0 [ 379.539496][ T8353] ? tomoyo_domain+0xda/0x130 [ 379.539527][ T8353] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 379.539548][ T8353] tomoyo_path_number_perm+0x1e8/0x5a0 [ 379.539573][ T8353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 379.539612][ T8353] ? __lock_acquire+0xab9/0xd20 [ 379.539652][ T8353] ? __fget_files+0x2a/0x420 [ 379.539679][ T8353] ? __fget_files+0x2a/0x420 [ 379.539696][ T8353] ? __fget_files+0x3a0/0x420 [ 379.539715][ T8353] ? __fget_files+0x2a/0x420 [ 379.539740][ T8353] security_file_ioctl+0xcb/0x2d0 [ 379.539765][ T8353] __se_sys_ioctl+0x47/0x170 [ 379.539796][ T8353] do_syscall_64+0xfa/0x3b0 [ 379.539816][ T8353] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.539836][ T8353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.539855][ T8353] ? clear_bhb_loop+0x60/0xb0 [ 379.539879][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.539897][ T8353] RIP: 0033:0x7fceafd8ebe9 [ 379.539915][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.539931][ T8353] RSP: 002b:00007fceb0c43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.539951][ T8353] RAX: ffffffffffffffda RBX: 00007fceaffb5fa0 RCX: 00007fceafd8ebe9 [ 379.539965][ T8353] RDX: 0000200000000240 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 379.539978][ T8353] RBP: 00007fceb0c43090 R08: 0000000000000000 R09: 0000000000000000 [ 379.539990][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.540001][ T8353] R13: 00007fceaffb6038 R14: 00007fceaffb5fa0 R15: 00007ffd915c1038 [ 379.540033][ T8353] [ 379.780822][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.804043][ T8353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.039818][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 381.279992][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 381.480104][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.559970][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.590387][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.609990][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.629910][ T5905] usb 2-1: Product: syz [ 381.639014][ T5905] usb 2-1: Manufacturer: syz [ 381.654767][ T5905] usb 2-1: SerialNumber: syz [ 383.498812][ T8391] tipc: Started in network mode [ 383.746380][ T5905] usb 2-1: 0:2 : does not exist [ 383.775053][ T5905] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 383.784013][ T8391] tipc: Node identity 8e17261fad16, cluster identity 4711 [ 383.834655][ T8391] tipc: Enabled bearer , priority 0 [ 383.849213][ T5905] usb 2-1: USB disconnect, device number 3 [ 384.145404][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 384.155475][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 384.471908][ T8397] tipc: Resetting bearer [ 384.513816][ T8382] tipc: Disabling bearer [ 384.927352][ T8412] overlayfs: overlapping lowerdir path [ 395.859342][ C0] sched: DL replenish lagged too much [ 449.340809][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.378383][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.369625][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 559.376803][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5828/1:b..l [ 559.385056][ C1] rcu: (detected by 1, t=10503 jiffies, g=22693, q=171 ncpus=2) [ 559.392795][ C1] task:syz-executor state:R running task stack:24104 pid:5828 tgid:5828 ppid:5823 task_flags:0x40050c flags:0x00004004 [ 559.407081][ C1] Call Trace: [ 559.410376][ C1] [ 559.413324][ C1] __schedule+0x16aa/0x4c90 [ 559.417841][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 559.423126][ C1] ? __pfx___schedule+0x10/0x10 [ 559.428020][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 559.433344][ C1] preempt_schedule_irq+0xb5/0x150 [ 559.438472][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 559.444199][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 559.450025][ C1] irqentry_exit+0x6f/0x90 [ 559.454454][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 559.460450][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 559.465764][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 55 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 559.485395][ C1] RSP: 0018:ffffc90003f9f2b8 EFLAGS: 00000206 [ 559.491487][ C1] RAX: ad9cbfec92541800 RBX: 0000000000000000 RCX: ad9cbfec92541800 [ 559.499472][ C1] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 559.507440][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 559.515427][ C1] R10: ffffc90003f9f478 R11: ffffffff81acfd40 R12: 0000000000000002 [ 559.523415][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 559.531405][ C1] ? unwind_next_frame+0xa5/0x2390 [ 559.536537][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 559.542709][ C1] ? unwind_next_frame+0xa5/0x2390 [ 559.547852][ C1] ? unwind_next_frame+0xa5/0x2390 [ 559.552979][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 559.558736][ C1] ? unwind_next_frame+0xa5/0x2390 [ 559.563845][ C1] unwind_next_frame+0xc2/0x2390 [ 559.568795][ C1] ? unwind_next_frame+0xa5/0x2390 [ 559.573924][ C1] ? unwind_next_frame+0xa5/0x2390 [ 559.579047][ C1] ? get_signal+0x125e/0x1310 [ 559.583723][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 559.589896][ C1] arch_stack_walk+0x11c/0x150 [ 559.594684][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 559.600433][ C1] stack_trace_save+0x9c/0xe0 [ 559.605129][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 559.610527][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 559.615300][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 559.620859][ C1] ? kmem_cache_free+0x166/0x400 [ 559.625804][ C1] ? exit_mmap+0x53f/0xb50 [ 559.630241][ C1] ? __mmput+0x118/0x410 [ 559.634492][ C1] ? exit_mm+0x1da/0x2c0 [ 559.638751][ C1] ? do_exit+0x648/0x22e0 [ 559.643076][ C1] ? do_group_exit+0x21c/0x2d0 [ 559.647858][ C1] kasan_save_stack+0x3e/0x60 [ 559.652554][ C1] ? kasan_save_stack+0x3e/0x60 [ 559.657412][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 559.662777][ C1] ? kmem_cache_free+0x2f6/0x400 [ 559.667725][ C1] ? exit_mmap+0x53f/0xb50 [ 559.672149][ C1] ? __mmput+0x118/0x410 [ 559.676399][ C1] ? exit_mm+0x1da/0x2c0 [ 559.680656][ C1] ? do_exit+0x648/0x22e0 [ 559.685004][ C1] ? do_group_exit+0x21c/0x2d0 [ 559.689782][ C1] ? get_signal+0x125e/0x1310 [ 559.694471][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 559.700265][ C1] ? exit_mmap+0x53f/0xb50 [ 559.704696][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 559.709911][ C1] kmem_cache_free+0x2f6/0x400 [ 559.714693][ C1] exit_mmap+0x53f/0xb50 [ 559.718938][ C1] ? uprobe_clear_state+0x20f/0x290 [ 559.724142][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 559.728914][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 559.734572][ C1] ? __pfx_exit_aio+0x10/0x10 [ 559.739256][ C1] ? uprobe_clear_state+0x274/0x290 [ 559.744449][ C1] ? mm_update_next_owner+0xa7/0x870 [ 559.749765][ C1] __mmput+0x118/0x410 [ 559.753849][ C1] exit_mm+0x1da/0x2c0 [ 559.757924][ C1] ? __pfx_exit_mm+0x10/0x10 [ 559.762515][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 559.767991][ C1] ? rcu_is_watching+0x15/0xb0 [ 559.772772][ C1] do_exit+0x648/0x22e0 [ 559.776938][ C1] ? do_raw_spin_lock+0x121/0x290 [ 559.781962][ C1] ? __pfx_do_exit+0x10/0x10 [ 559.786582][ C1] do_group_exit+0x21c/0x2d0 [ 559.791192][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.796405][ C1] get_signal+0x125e/0x1310 [ 559.800948][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 559.806519][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 559.811827][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 559.818018][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 559.823496][ C1] exit_to_user_mode_loop+0x75/0x110 [ 559.828783][ C1] do_syscall_64+0x2bd/0x3b0 [ 559.833367][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.838575][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.844652][ C1] ? clear_bhb_loop+0x60/0xb0 [ 559.849331][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.855223][ C1] RIP: 0033:0x7fceafd84e13 [ 559.859649][ C1] RSP: 002b:00007ffd915c1588 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 559.868068][ C1] RAX: fffffffffffffe00 RBX: 00000000000016c9 RCX: 00007fceafd84e13 [ 559.876037][ C1] RDX: 0000000040000000 RSI: 00007ffd915c159c RDI: 00000000ffffffff [ 559.884020][ C1] RBP: 00007ffd915c159c R08: 0000000000000000 R09: 0000000000000000 [ 559.892003][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 559.899983][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 559.907984][ C1] [ 559.911016][ C1] rcu: rcu_preempt kthread starved for 9480 jiffies! g22693 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 559.922133][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 559.932110][ C1] rcu: RCU grace-period kthread stack dump: [ 559.938003][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 559.951524][ C1] Call Trace: [ 559.954814][ C1] [ 559.957759][ C1] __schedule+0x16aa/0x4c90 [ 559.962298][ C1] ? schedule+0x165/0x360 [ 559.966643][ C1] ? __pfx___schedule+0x10/0x10 [ 559.971527][ C1] ? schedule+0x91/0x360 [ 559.975790][ C1] schedule+0x165/0x360 [ 559.979958][ C1] schedule_timeout+0x12b/0x270 [ 559.984833][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 559.990225][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 559.996137][ C1] ? __pfx_process_timeout+0x10/0x10 [ 560.001445][ C1] ? prepare_to_swait_event+0x341/0x380 [ 560.007021][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 560.011904][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 560.018073][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 560.023366][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 560.028570][ C1] rcu_gp_kthread+0x99/0x390 [ 560.033163][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 560.038375][ C1] ? __kthread_parkme+0x7b/0x200 [ 560.043337][ C1] ? __kthread_parkme+0x1a1/0x200 [ 560.048369][ C1] kthread+0x70e/0x8a0 [ 560.052438][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 560.057646][ C1] ? __pfx_kthread+0x10/0x10 [ 560.062253][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.067461][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.072656][ C1] ? __pfx_kthread+0x10/0x10 [ 560.077265][ C1] ret_from_fork+0x3fc/0x770 [ 560.081869][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 560.087008][ C1] ? __switch_to_asm+0x39/0x70 [ 560.091766][ C1] ? __switch_to_asm+0x33/0x70 [ 560.096540][ C1] ? __pfx_kthread+0x10/0x10 [ 560.101148][ C1] ret_from_fork_asm+0x1a/0x30 [ 560.105941][ C1] [ 560.108960][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 560.115287][ C1] Sending NMI from CPU 1 to CPUs 0: [ 560.120512][ C0] NMI backtrace for cpu 0 [ 560.120526][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 560.120544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.120555][ C0] RIP: 0010:__kasan_slab_pre_free+0x0/0x30 [ 560.120575][ C0] Code: 89 f3 e8 53 2c 00 00 48 89 d8 5b e9 0a 8c 49 09 cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 8b 05 c5 e5 80 0d 48 89 f1 48 29 c1 48 81 f9 00 00 [ 560.120588][ C0] RSP: 0018:ffffc900000070c8 EFLAGS: 00000292 [ 560.120603][ C0] RAX: ffff88823be00000 RBX: ffff8881ad1c89c0 RCX: ffffffff713c89c0 [ 560.120616][ C0] RDX: ffffffff8946a89d RSI: ffff8881ad1c89c0 RDI: ffff88801dee9280 [ 560.120628][ C0] RBP: 0000000000212110 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 560.120640][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffea0006b47200 [ 560.120652][ C0] R13: 0000000000000000 R14: ffff88801dee9280 R15: ffffffff8946a89d [ 560.120664][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 560.120677][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.120688][ C0] CR2: 00007fe7eed84f18 CR3: 000000007438a000 CR4: 00000000003526f0 [ 560.120702][ C0] Call Trace: [ 560.120708][ C0] [ 560.120714][ C0] kmem_cache_free+0x140/0x400 [ 560.120734][ C0] skb_release_data+0x62d/0x7c0 [ 560.120764][ C0] consume_skb+0x9e/0xf0 [ 560.120785][ C0] nft_synproxy_eval_v6+0x376/0x560 [ 560.120805][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 560.120822][ C0] ? nf_ip_checksum+0x13c/0x510 [ 560.120848][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 560.120867][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 560.120883][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 560.120906][ C0] nft_do_chain+0x409/0x1920 [ 560.120923][ C0] ? ip6t_do_table+0x1376/0x1550 [ 560.120946][ C0] ? nf_nat_inet_fn+0x924/0xba0 [ 560.120964][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 560.120977][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 560.121005][ C0] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 560.121024][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 560.121046][ C0] nft_do_chain_inet+0x25d/0x340 [ 560.121060][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 560.121074][ C0] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 560.121095][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 560.121115][ C0] ? NF_HOOK+0x9a/0x3a0 [ 560.121138][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 560.121153][ C0] nf_hook_slow+0xc5/0x220 [ 560.121176][ C0] NF_HOOK+0x206/0x3a0 [ 560.121199][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 560.121213][ C0] ? NF_HOOK+0x9a/0x3a0 [ 560.121240][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 560.121263][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 560.121284][ C0] ip6_input+0x16a/0x270 [ 560.121297][ C0] ? ip6_input+0x23/0x270 [ 560.121311][ C0] NF_HOOK+0x30c/0x3a0 [ 560.121332][ C0] ? skb_orphan+0xaf/0xd0 [ 560.121347][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 560.121369][ C0] ? NF_HOOK+0x9a/0x3a0 [ 560.121390][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 560.121414][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 560.121441][ C0] __netif_receive_skb+0xd3/0x380 [ 560.121461][ C0] ? process_backlog+0x2d5/0x14f0 [ 560.121482][ C0] process_backlog+0x60e/0x14f0 [ 560.121501][ C0] ? __lock_acquire+0xab9/0xd20 [ 560.121523][ C0] ? __pfx_process_backlog+0x10/0x10 [ 560.121547][ C0] __napi_poll+0xc4/0x480 [ 560.121564][ C0] ? net_rx_action+0x46d/0xe30 [ 560.121585][ C0] net_rx_action+0x707/0xe30 [ 560.121605][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.121628][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 560.121664][ C0] handle_softirqs+0x283/0x870 [ 560.121682][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 560.121700][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 560.121719][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 560.121742][ C0] __irq_exit_rcu+0xca/0x1f0 [ 560.121758][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 560.121778][ C0] irq_exit_rcu+0x9/0x30 [ 560.121793][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 560.121809][ C0] [ 560.121814][ C0] [ 560.121820][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 560.121837][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 560.121852][ C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 560.121865][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 560.121878][ C0] RAX: 1e7d72743af71000 RBX: ffffffff81976918 RCX: 1e7d72743af71000 [ 560.121890][ C0] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 560.121901][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 560.121913][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0 [ 560.121925][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 560.121938][ C0] ? do_idle+0x1e8/0x510 [ 560.121959][ C0] default_idle+0x13/0x20 [ 560.121977][ C0] default_idle_call+0x74/0xb0 [ 560.121995][ C0] do_idle+0x1e8/0x510 [ 560.122014][ C0] ? __pfx_do_idle+0x10/0x10 [ 560.122038][ C0] cpu_startup_entry+0x44/0x60 [ 560.122055][ C0] rest_init+0x2de/0x300 [ 560.122074][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 560.122099][ C0] start_kernel+0x47d/0x500 [ 560.122118][ C0] x86_64_start_reservations+0x24/0x30 [ 560.122140][ C0] x86_64_start_kernel+0x143/0x1c0 [ 560.122162][ C0] common_startup_64+0x13e/0x147 [ 560.122190][ C0] [ 560.751331][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.765995][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.842794][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.856710][ T1300] ieee802154 phy1 wpan1: encryption failed: -22