last executing test programs: 2m39.71276895s ago: executing program 0 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 2m38.163153817s ago: executing program 0 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r4, 0x29, 0x15, 0x0, 0x0) 2m34.503823911s ago: executing program 0 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') read$FUSE(r3, &(0x7f00000095c0)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) read$FUSE(r3, 0x0, 0x0) 2m33.338500863s ago: executing program 0 (id=251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x8200, 0x0) syz_usb_connect(0x5, 0x255, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x2000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 2m26.50294485s ago: executing program 0 (id=262): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800470e00300065000007", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020009907800e7"], 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000f91eae097f96770de7085ec5fa8b68eab97238f271ebd4937f92de582f3703cee760e7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m13.780897396s ago: executing program 0 (id=291): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x888, &(0x7f0000000140)={0x0, 0xaee8, 0x0, 0x2, 0x37c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b90, 0xf9d0, 0x22, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1m58.125132841s ago: executing program 32 (id=291): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x888, &(0x7f0000000140)={0x0, 0xaee8, 0x0, 0x2, 0x37c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b90, 0xf9d0, 0x22, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1m7.594785901s ago: executing program 3 (id=385): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffb, 0x0) 1m7.426225899s ago: executing program 3 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)) epoll_create(0x4) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r1, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x200) msgsnd(r2, 0x0, 0xff, 0x0) 1m3.41883267s ago: executing program 3 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_wakeup_irq', 0x60000, 0x100) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440), 0x0) creat(0x0, 0x125) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket$nl_generic(0x10, 0x3, 0x10) 1m1.681088866s ago: executing program 3 (id=396): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r3, 0x2000) r4 = dup(r3) shutdown(0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0)=0x4, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 59.877721169s ago: executing program 3 (id=398): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x100, 0xfc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) mount(0x0, 0x0, 0x0, 0xa08410, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 58.193813711s ago: executing program 3 (id=401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) stat(0x0, 0x0) 40.995758364s ago: executing program 33 (id=401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) stat(0x0, 0x0) 16.829699375s ago: executing program 4 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) getpgrp(r0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 15.267080863s ago: executing program 1 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000040)={&(0x7f000096e000/0x4000)=nil, 0x4000}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 14.076159076s ago: executing program 1 (id=454): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) poll(0x0, 0x0, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 13.336098283s ago: executing program 1 (id=455): syz_emit_ethernet(0x52, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xffffffffffffff4b}}], 0x5df, 0x2, 0x0) 13.186309567s ago: executing program 2 (id=456): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x239, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7800, 0x18, 0x5, 0x5, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x3, 0xc1}]}}}}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) splice(r0, 0x0, r1, 0x0, 0x1100000000f336, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4020054) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f741"], 0x7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 12.562810192s ago: executing program 4 (id=457): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x100, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200), 0x0, 0x80800}) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x4403, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 11.981055874s ago: executing program 4 (id=458): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x997, 0x8, 0x6, 0x9, 0x8, 0x155e, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0xffff, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x67, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x6, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x40, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x48a, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x0, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x1ff, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0xfffffff9, 0x1000, 0xfbfff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0x6, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff5, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xfffffffe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffff"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xbf6, 0x7fffffffffffe, 0x5, 0x5, 0x7, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.929622835s ago: executing program 2 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) setregid(0xffffffffffffffff, 0x0) 10.434146395s ago: executing program 2 (id=460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6d", 0x9) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x10002) 9.184468196s ago: executing program 2 (id=461): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.852244962s ago: executing program 4 (id=462): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040), 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x80180, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.437673216s ago: executing program 1 (id=463): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x4000000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x9, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x8}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.566139155s ago: executing program 4 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, r5, 0x917}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, 0x0, 0x20000000) 6.245187956s ago: executing program 1 (id=465): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x95a5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.822622664s ago: executing program 2 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00'}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x4, 0x808, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0xfe, 0x1, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c50d0183230d90bc3ba85d9b3128353dcadf8bb71c06e601008986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0) 5.481302103s ago: executing program 4 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) semget$private(0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044) 3.372883236s ago: executing program 1 (id=468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x260, 0xc8, 0x8, 0x260, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x260, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@srh1={{0x90}, {0x67, 0x10, 0xad, 0x9, 0x3aad, @mcast1, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffff00, 0xff000000, 0xff, 0xffffff], [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xff000000], 0x1008, 0x208}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 0s ago: executing program 2 (id=469): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={0x0}) r3 = syz_io_uring_setup(0xdae, &(0x7f0000000340)={0x0, 0x6, 0x2, 0x1000, 0x2000}, &(0x7f00000002c0), &(0x7f0000000180)) io_uring_enter(r3, 0x1, 0xffffffff, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 77.402049][ T5788] cgroup: Unknown subsys name 'net' [ 77.652663][ T5788] cgroup: Unknown subsys name 'cpuset' [ 77.699353][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.287639][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.618617][ T44] cfg80211: failed to load regulatory.db [ 83.549902][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.568073][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.569597][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.571825][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.573030][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.587788][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.589747][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.593834][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.595024][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.599253][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.600113][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.624461][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.625280][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.626846][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.645497][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.717862][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.720427][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.721111][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.724087][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.724808][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.761510][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.763170][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.763884][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.765221][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.765961][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.673694][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 84.745806][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 84.829388][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 84.871490][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 84.889424][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 85.442949][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.443899][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.444276][ T5801] bridge_slave_0: entered allmulticast mode [ 85.445900][ T5801] bridge_slave_0: entered promiscuous mode [ 85.546154][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.546241][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.546350][ T5801] bridge_slave_1: entered allmulticast mode [ 85.547971][ T5801] bridge_slave_1: entered promiscuous mode [ 85.688948][ T5807] Bluetooth: hci0: command tx timeout [ 85.689075][ T5807] Bluetooth: hci1: command tx timeout [ 85.769669][ T5803] Bluetooth: hci2: command tx timeout [ 85.848043][ T5803] Bluetooth: hci3: command tx timeout [ 85.848183][ T5807] Bluetooth: hci4: command tx timeout [ 85.899541][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.899680][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.899797][ T5802] bridge_slave_0: entered allmulticast mode [ 85.901268][ T5802] bridge_slave_0: entered promiscuous mode [ 86.038759][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.038883][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.039051][ T5816] bridge_slave_0: entered allmulticast mode [ 86.040935][ T5816] bridge_slave_0: entered promiscuous mode [ 86.138871][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.138991][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.139161][ T5802] bridge_slave_1: entered allmulticast mode [ 86.140975][ T5802] bridge_slave_1: entered promiscuous mode [ 86.242398][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.242645][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.242766][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.242926][ T5816] bridge_slave_1: entered allmulticast mode [ 86.244624][ T5816] bridge_slave_1: entered promiscuous mode [ 86.245434][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.245560][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.245657][ T5810] bridge_slave_0: entered allmulticast mode [ 86.247094][ T5810] bridge_slave_0: entered promiscuous mode [ 86.349130][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.349223][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.349343][ T5814] bridge_slave_0: entered allmulticast mode [ 86.350838][ T5814] bridge_slave_0: entered promiscuous mode [ 86.354428][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.418678][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.418772][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.418883][ T5810] bridge_slave_1: entered allmulticast mode [ 86.420370][ T5810] bridge_slave_1: entered promiscuous mode [ 86.479520][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.479621][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.479737][ T5814] bridge_slave_1: entered allmulticast mode [ 86.481212][ T5814] bridge_slave_1: entered promiscuous mode [ 86.671774][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.811680][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.021398][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.080747][ T5801] team0: Port device team_slave_0 added [ 87.083996][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.086627][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.161358][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.163088][ T5801] team0: Port device team_slave_1 added [ 87.230749][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.291639][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.530196][ T5802] team0: Port device team_slave_0 added [ 87.650481][ T5816] team0: Port device team_slave_0 added [ 87.711681][ T5802] team0: Port device team_slave_1 added [ 87.768126][ T5807] Bluetooth: hci1: command tx timeout [ 87.768133][ T5803] Bluetooth: hci0: command tx timeout [ 87.771059][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.771068][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.771081][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.774204][ T5816] team0: Port device team_slave_1 added [ 87.775835][ T5810] team0: Port device team_slave_0 added [ 87.845272][ T5814] team0: Port device team_slave_0 added [ 87.846314][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.846326][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.846348][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.858256][ T5803] Bluetooth: hci2: command tx timeout [ 87.927950][ T5803] Bluetooth: hci3: command tx timeout [ 87.927981][ T5803] Bluetooth: hci4: command tx timeout [ 87.956453][ T5810] team0: Port device team_slave_1 added [ 88.051374][ T5814] team0: Port device team_slave_1 added [ 88.499163][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.499174][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.499187][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.581688][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.581700][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.581713][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.659675][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.659690][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.659713][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.761686][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.761701][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.761725][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.763528][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.763541][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.763564][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.777414][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.777427][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.777449][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.934943][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.934958][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.934971][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.937447][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.937458][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.937470][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.109527][ T5801] hsr_slave_0: entered promiscuous mode [ 89.110431][ T5801] hsr_slave_1: entered promiscuous mode [ 89.463999][ T5802] hsr_slave_0: entered promiscuous mode [ 89.465323][ T5802] hsr_slave_1: entered promiscuous mode [ 89.466005][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 89.466088][ T5802] Cannot create hsr debugfs directory [ 89.594311][ T5816] hsr_slave_0: entered promiscuous mode [ 89.595251][ T5816] hsr_slave_1: entered promiscuous mode [ 89.595895][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 89.595916][ T5816] Cannot create hsr debugfs directory [ 89.775786][ T5810] hsr_slave_0: entered promiscuous mode [ 89.777163][ T5810] hsr_slave_1: entered promiscuous mode [ 89.778917][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 89.778939][ T5810] Cannot create hsr debugfs directory [ 89.789925][ T5814] hsr_slave_0: entered promiscuous mode [ 89.791724][ T5814] hsr_slave_1: entered promiscuous mode [ 89.792690][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 89.792711][ T5814] Cannot create hsr debugfs directory [ 89.848063][ T5807] Bluetooth: hci1: command tx timeout [ 89.858233][ T5807] Bluetooth: hci0: command tx timeout [ 89.928402][ T5807] Bluetooth: hci2: command tx timeout [ 90.008126][ T5807] Bluetooth: hci4: command tx timeout [ 90.008157][ T5807] Bluetooth: hci3: command tx timeout [ 91.375963][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.396078][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.433169][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.483647][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.585380][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.616125][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.653895][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.705064][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.814422][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.854758][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.873072][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.928114][ T5803] Bluetooth: hci0: command tx timeout [ 91.928142][ T5803] Bluetooth: hci1: command tx timeout [ 91.928235][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.008055][ T5807] Bluetooth: hci2: command tx timeout [ 92.051571][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.086919][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.088350][ T5807] Bluetooth: hci3: command tx timeout [ 92.088376][ T5807] Bluetooth: hci4: command tx timeout [ 92.113517][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.157339][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.212678][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.297672][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.340878][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.380325][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.381189][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.423906][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.462096][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.462563][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.501610][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.501742][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.526739][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.606518][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.647249][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.647361][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.669881][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.680585][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.683877][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.766184][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.794739][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.802727][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.802928][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.852827][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.853684][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.930087][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.962806][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.988401][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.989289][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.044223][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.044844][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.121526][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.154997][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.155226][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.190194][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.223381][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.223624][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.494513][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.523170][ T5801] veth0_vlan: entered promiscuous mode [ 93.569600][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.592841][ T5801] veth1_vlan: entered promiscuous mode [ 93.721372][ T5802] veth0_vlan: entered promiscuous mode [ 93.766222][ T5801] veth0_macvtap: entered promiscuous mode [ 93.783012][ T5802] veth1_vlan: entered promiscuous mode [ 93.807166][ T5801] veth1_macvtap: entered promiscuous mode [ 93.823222][ T5816] veth0_vlan: entered promiscuous mode [ 93.844742][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.865011][ T5816] veth1_vlan: entered promiscuous mode [ 93.882803][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.908481][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.944916][ T3868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.956879][ T3868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.962432][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.974146][ T3868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.983510][ T5802] veth0_macvtap: entered promiscuous mode [ 93.999405][ T3868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.030912][ T5802] veth1_macvtap: entered promiscuous mode [ 94.116830][ T5816] veth0_macvtap: entered promiscuous mode [ 94.208695][ T5816] veth1_macvtap: entered promiscuous mode [ 94.212332][ T5810] veth0_vlan: entered promiscuous mode [ 94.273816][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.312219][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.349288][ T5810] veth1_vlan: entered promiscuous mode [ 94.383952][ T3868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.393052][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.393864][ T3868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.412038][ T3868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.419467][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.419489][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.436810][ T3868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.452596][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.521348][ T3868] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.557269][ T3868] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.573892][ T3868] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.582030][ T3868] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.584356][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.584373][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.818824][ T5810] veth0_macvtap: entered promiscuous mode [ 94.924639][ T3868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.924657][ T3868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.925413][ T5810] veth1_macvtap: entered promiscuous mode [ 94.932528][ T5814] veth0_vlan: entered promiscuous mode [ 95.066397][ T5814] veth1_vlan: entered promiscuous mode [ 95.077658][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.077676][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.128629][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.188955][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.193679][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.193696][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.410779][ T3607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.414831][ T3607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.416240][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.416256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.449007][ T3607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.466965][ T3607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.787867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.788371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.789523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.023152][ T5814] veth0_macvtap: entered promiscuous mode [ 96.106298][ T5814] veth1_macvtap: entered promiscuous mode [ 96.387486][ T37] audit: type=1326 audit(1761168543.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.387525][ T37] audit: type=1326 audit(1761168543.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.412567][ T37] audit: type=1326 audit(1761168543.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.412614][ T37] audit: type=1326 audit(1761168543.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.412651][ T37] audit: type=1326 audit(1761168543.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.413458][ T37] audit: type=1326 audit(1761168543.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.421570][ T37] audit: type=1326 audit(1761168543.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.422638][ T37] audit: type=1326 audit(1761168543.060:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.422952][ T37] audit: type=1326 audit(1761168543.060:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.422991][ T37] audit: type=1326 audit(1761168543.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 96.655065][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.665507][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 96.715357][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.715376][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.742661][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.841961][ T3607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.858687][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 96.858719][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.858764][ T31] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 96.858785][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.892510][ T3607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.931195][ T3607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943998][ T31] usb 2-1: config 0 descriptor?? [ 96.954578][ T5925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.980021][ T3607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.987575][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.987594][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.464614][ T31] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 97.464652][ T31] cypress 0003:04B4:07B1.0001: item fetching failed at offset 3/5 [ 97.465588][ T31] cypress 0003:04B4:07B1.0001: parse failed [ 97.465667][ T31] cypress 0003:04B4:07B1.0001: probe with driver cypress failed with error -22 [ 97.553660][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 97.789853][ T992] usb 2-1: USB disconnect, device number 2 [ 97.824127][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.824146][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.039681][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.039700][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.530295][ T5947] binder: 5946:5947 ioctl 4018620d 0 returned -22 [ 98.830308][ T5954] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 99.150674][ T5960] input: syz1 as /devices/virtual/input/input5 [ 99.226338][ T5956] veth3: entered promiscuous mode [ 101.071059][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.430262][ T6000] netlink: 'syz.4.27': attribute type 10 has an invalid length. [ 101.848593][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.209741][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.257873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.490905][ T6000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.880668][ T6028] Zero length message leads to an empty skb [ 103.912924][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 103.913068][ T6028] bridge_slave_1: left allmulticast mode [ 103.913089][ T6028] bridge_slave_1: left promiscuous mode [ 103.960647][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.130096][ T6028] bridge_slave_0: left allmulticast mode [ 104.130123][ T6028] bridge_slave_0: left promiscuous mode [ 104.130363][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.868795][ T6041] binder: 6040:6041 unknown command 0 [ 104.868815][ T6041] binder: 6040:6041 ioctl c0306201 2000000003c0 returned -22 [ 108.177875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.178120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.347948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.407937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.411752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.430531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.474092][ T5791] IPVS: starting estimator thread 0... [ 109.608231][ T6069] IPVS: using max 14 ests per chain, 33600 per kthread [ 109.819784][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 109.819796][ T37] audit: type=1326 audit(1761168556.460:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7329eaefc9 code=0x0 [ 112.888094][ T5979] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.128430][ T5979] usb 5-1: Using ep0 maxpacket: 32 [ 113.143657][ T5979] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.143682][ T5979] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.143701][ T5979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.143750][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.143770][ T5979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.143793][ T5979] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.143832][ T5979] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.143852][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.151751][ T5979] usb 5-1: config 0 descriptor?? [ 113.495182][ T5979] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.556720][ T5979] usb 5-1: USB disconnect, device number 2 [ 114.024855][ T5979] usblp0: removed [ 114.493475][ T5979] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.648121][ T5979] usb 5-1: Using ep0 maxpacket: 32 [ 114.678834][ T5979] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.678859][ T5979] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.678879][ T5979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.678936][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.678957][ T5979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.678980][ T5979] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.679022][ T5979] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.679043][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.717701][ T5979] usb 5-1: config 0 descriptor?? [ 114.792902][ T6134] binder: 6129:6134 ioctl c0306201 0 returned -14 [ 115.009189][ T5979] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.815339][ T5804] usb 5-1: USB disconnect, device number 3 [ 116.826090][ T5804] usblp0: removed [ 117.252643][ T6131] syz.1.66 (6131) used greatest stack depth: 18488 bytes left [ 117.487106][ T37] audit: type=1326 audit(1761168564.120:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.492494][ T37] audit: type=1326 audit(1761168564.130:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.492893][ T37] audit: type=1326 audit(1761168564.130:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.754848][ T37] audit: type=1326 audit(1761168564.130:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.754903][ T37] audit: type=1326 audit(1761168564.130:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.754944][ T37] audit: type=1326 audit(1761168564.130:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.754982][ T37] audit: type=1326 audit(1761168564.140:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.755020][ T37] audit: type=1326 audit(1761168564.140:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.755059][ T37] audit: type=1326 audit(1761168564.140:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 117.755098][ T37] audit: type=1326 audit(1761168564.370:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f7329eaefc9 code=0x7ffc0000 [ 118.478077][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.796380][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 119.799129][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 119.799152][ T9] usb 1-1: config 0 has no interface number 0 [ 119.799203][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 119.803797][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 119.803822][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.803840][ T9] usb 1-1: Product: syz [ 119.803852][ T9] usb 1-1: Manufacturer: syz [ 119.803864][ T9] usb 1-1: SerialNumber: syz [ 119.922586][ T9] usb 1-1: config 0 descriptor?? [ 122.218136][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.240860][ T6193] process 'syz.1.82' launched '/dev/fd/3' with NULL argv: empty string added [ 122.325183][ T9] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 122.325238][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 122.325255][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 122.325357][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 122.377927][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 122.382085][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.382109][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.417963][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.417989][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.418007][ T10] usb 4-1: Product: syz [ 122.418019][ T10] usb 4-1: Manufacturer: syz [ 122.418040][ T10] usb 4-1: SerialNumber: syz [ 122.422340][ T9] usb 1-1: USB disconnect, device number 2 [ 123.347455][ T10] usb 4-1: 0:2 : does not exist [ 123.359781][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 123.427056][ T10] usb 4-1: USB disconnect, device number 2 [ 123.547698][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.277292][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.949393][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.974131][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.261016][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.518808][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 126.518820][ T37] audit: type=1326 audit(1761168573.150:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.518850][ T37] audit: type=1326 audit(1761168573.150:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.523226][ T37] audit: type=1326 audit(1761168573.160:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.523256][ T37] audit: type=1326 audit(1761168573.160:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.523278][ T37] audit: type=1326 audit(1761168573.160:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.531926][ T37] audit: type=1326 audit(1761168573.170:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.531970][ T37] audit: type=1326 audit(1761168573.170:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.532006][ T37] audit: type=1326 audit(1761168573.170:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.537531][ T37] audit: type=1326 audit(1761168573.170:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.537585][ T37] audit: type=1326 audit(1761168573.170:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 126.975136][ T6237] loop6: detected capacity change from 0 to 524287999 [ 127.269170][ T5912] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.478769][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 127.481802][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.484952][ T5912] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 127.484974][ T5912] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 127.484992][ T5912] usb 1-1: config 13 has no interface number 0 [ 127.485035][ T5912] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 127.485047][ T5912] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.485061][ T5912] usb 1-1: config 13 interface 50 has no altsetting 0 [ 127.535859][ T5912] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 127.535887][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.535905][ T5912] usb 1-1: Product: syz [ 127.535917][ T5912] usb 1-1: Manufacturer: syz [ 127.535930][ T5912] usb 1-1: SerialNumber: syz [ 127.561917][ T6244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.908722][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.908784][ T5912] usb 1-1: MIDIStreaming interface descriptor not found [ 128.274838][ T5912] usb 1-1: USB disconnect, device number 3 [ 128.509835][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.613002][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 129.698873][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 133.839903][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.839959][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.910968][ T6279] fuse: Bad value for 'fd' [ 135.679797][ T6291] udevd[6291]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.930575][ T5912] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.301079][ T5912] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.301113][ T5912] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.301153][ T5912] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.301174][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.327741][ T6299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.354803][ T5912] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.697424][ T5912] usb 3-1: USB disconnect, device number 2 [ 139.125802][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.318001][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.479455][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 139.486888][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.486924][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.486938][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.486948][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.535050][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.536205][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.536220][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.536229][ T10] usb 5-1: Manufacturer: syz [ 139.579528][ T10] usb 5-1: config 0 descriptor?? [ 139.628005][ T5791] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.869793][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.869812][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.869824][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.869846][ T5791] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.869858][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.876324][ T5791] usb 1-1: config 0 descriptor?? [ 140.079440][ T10] rc_core: IR keymap rc-hauppauge not found [ 140.079459][ T10] Registered IR keymap rc-empty [ 140.080142][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.108162][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.130666][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 140.137063][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 140.256082][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.278596][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.299511][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.328003][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.358000][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.388453][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.408158][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.428129][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.448199][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.468030][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.501748][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 140.501990][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.977006][ T5979] usb 5-1: USB disconnect, device number 4 [ 141.463583][ T5791] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 141.584321][ T6321] usb 1-1: string descriptor 0 read error: -71 [ 141.703971][ T5791] usb 1-1: USB disconnect, device number 4 [ 143.507128][ T6342] fido_id[6342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 144.647365][ T6371] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.969543][ T6380] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 147.395277][ T6380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.432479][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.843765][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.944822][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.118363][ T6389] bond1: (slave veth3): Enslaving as an active interface with a down link [ 149.177504][ T6391] bond1: (slave dummy0): making interface the new active one [ 149.191755][ T6391] dummy0: entered promiscuous mode [ 149.206646][ T6391] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 149.254231][ T6411] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 149.288770][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 149.288785][ T37] audit: type=1326 audit(1761168595.930:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.289124][ T37] audit: type=1326 audit(1761168595.930:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.294700][ T37] audit: type=1326 audit(1761168595.930:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.294745][ T37] audit: type=1326 audit(1761168595.930:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.294784][ T37] audit: type=1326 audit(1761168595.930:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.305969][ T37] audit: type=1326 audit(1761168595.930:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.323133][ T37] audit: type=1326 audit(1761168595.960:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.328822][ T37] audit: type=1326 audit(1761168595.960:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.329032][ T37] audit: type=1326 audit(1761168595.960:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.329319][ T37] audit: type=1326 audit(1761168595.970:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d594efc9 code=0x7ffc0000 [ 149.384374][ T6416] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 149.729503][ T6420] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 149.770489][ T6420] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 149.857285][ T6420] bond1 (unregistering): Released all slaves [ 150.338723][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.456488][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.526791][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.594161][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.637219][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.728678][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.825251][ T6430] syz.4.150 (6430) used greatest stack depth: 16880 bytes left [ 151.509445][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.512986][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.204768][ T6528] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.178'. [ 164.733854][ T6543] netlink: 'syz.4.184': attribute type 4 has an invalid length. [ 164.733875][ T6543] netlink: 152 bytes leftover after parsing attributes in process `syz.4.184'. [ 164.752693][ T6543] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 166.830046][ T5884] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 166.988074][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 166.992031][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.992070][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.996163][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.996189][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.996209][ T5884] usb 2-1: Product: syz [ 166.996223][ T5884] usb 2-1: Manufacturer: syz [ 166.996236][ T5884] usb 2-1: SerialNumber: syz [ 168.270669][ T5884] usb 2-1: 0:2 : does not exist [ 168.276377][ T5884] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 168.301321][ T6574] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 168.409101][ T5884] usb 2-1: USB disconnect, device number 3 [ 168.544175][ T6574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.617402][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.660115][ T6577] bond1: (slave geneve2): making interface the new active one [ 168.663328][ T6577] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 171.566511][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.724508][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.555130][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.675267][ T6386] dummy0: left promiscuous mode [ 172.721114][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.952738][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.931155][ T6639] syzkaller0: entered promiscuous mode [ 174.931181][ T6639] syzkaller0: entered allmulticast mode [ 175.296078][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.502148][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.627434][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.752481][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.087259][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.277568][ T6692] binder: 6691:6692 ioctl c06c4124 0 returned -22 [ 189.209821][ T992] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 189.821060][ T992] usb 5-1: config 0 has an invalid interface number: 139 but max is 0 [ 189.821089][ T992] usb 5-1: config 0 has no interface number 0 [ 189.821132][ T992] usb 5-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.821153][ T992] usb 5-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 189.821175][ T992] usb 5-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 189.821199][ T992] usb 5-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.827233][ T992] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 189.827315][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.827335][ T992] usb 5-1: Product: syz [ 189.827349][ T992] usb 5-1: Manufacturer: syz [ 189.827362][ T992] usb 5-1: SerialNumber: syz [ 189.836440][ T992] usb 5-1: config 0 descriptor?? [ 189.849437][ T6718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.849688][ T6718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.463427][ T992] mct_u232 5-1:0.139: MCT U232 converter detected [ 190.491913][ T992] usb 5-1: MCT U232 converter now attached to ttyUSB0 [ 190.608519][ T992] usb 5-1: USB disconnect, device number 5 [ 190.661532][ T6724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.661651][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.667159][ T992] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 190.698166][ T992] mct_u232 5-1:0.139: device disconnected [ 190.836228][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.935169][ T6724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.935258][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.349237][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.241731][ T6724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.241831][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.767672][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.980189][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.234283][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 193.419193][ T6724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.419300][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 193.541887][ T6750] bridge2: entered allmulticast mode [ 194.541078][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.542164][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.542228][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.565311][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 194.751463][ T6724] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 194.757150][ T6724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 194.811628][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.049762][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.836264][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.847023][ T6724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.101223][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.101264][ T5803] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.125455][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.127950][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.248746][ T5807] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.742215][ T5807] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.742258][ T5807] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.059020][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.773369][ T5803] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.299997][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 212.011056][ T6837] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.175322][ T6837] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 212.175349][ T6837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.175382][ T6837] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 212.175420][ T6837] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 212.175446][ T6837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.175478][ T6837] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.175499][ T6837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.292334][ T6837] usb 5-1: config 0 descriptor?? [ 213.120260][ T6870] Bluetooth: MGMT ver 1.23 [ 215.125282][ T10] usb 5-1: USB disconnect, device number 6 [ 216.845607][ T6907] openvswitch: netlink: Message has 383 unknown bytes. [ 219.926398][ T6910] delete_channel: no stack [ 221.569814][ T6929] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 221.757950][ T6837] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 222.078290][ T6837] usb 5-1: Using ep0 maxpacket: 16 [ 222.080460][ T6837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.080488][ T6837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.080509][ T6837] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.080547][ T6837] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.080567][ T6837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.085918][ T6837] usb 5-1: config 0 descriptor?? [ 222.983291][ T6943] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 223.070989][ T6837] usbhid 5-1:0.0: can't add hid device: -71 [ 223.071109][ T6837] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 223.197547][ T6837] usb 5-1: USB disconnect, device number 7 [ 226.705884][ T31] kernel read not supported for file bpf-prog (pid: 31 comm: kworker/1:0) [ 229.068984][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 229.110167][ T6986] warning: `syz.4.301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 229.168969][ T6989] 9pnet_fd: Insufficient options for proto=fd [ 231.008016][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 231.008033][ T37] audit: type=1326 audit(1761168677.640:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.008632][ T37] audit: type=1326 audit(1761168677.650:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.016449][ T37] audit: type=1326 audit(1761168677.650:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.016495][ T37] audit: type=1326 audit(1761168677.650:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.016534][ T37] audit: type=1326 audit(1761168677.650:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.077924][ T37] audit: type=1326 audit(1761168677.650:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.159452][ T37] audit: type=1326 audit(1761168677.800:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.159728][ T37] audit: type=1326 audit(1761168677.800:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.161504][ T37] audit: type=1326 audit(1761168677.800:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 231.162009][ T37] audit: type=1326 audit(1761168677.800:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 243.176169][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 243.176670][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 243.296739][ T7040] ceph: No mds server is up or the cluster is laggy [ 243.431090][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 243.431293][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 243.487279][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.505353][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.506562][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.522624][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.536934][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.774430][ T7055] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 243.942629][ T6837] libceph: connect (1)[c::]:6789 error -101 [ 243.942833][ T6837] libceph: mon0 (1)[c::]:6789 connect error [ 245.776903][ T7067] infiniband syz2: set active [ 245.776917][ T7067] infiniband syz2: added veth1_to_team [ 245.779625][ T7067] syz2: rxe_create_cq: returned err = -12 [ 245.779750][ T7067] infiniband syz2: Couldn't create ib_mad CQ [ 245.779858][ T7067] infiniband syz2: Couldn't open port 1 [ 245.813022][ T7067] RDS/IB: syz2: added [ 245.813760][ T7067] smc: adding ib device syz2 with port count 1 [ 245.813998][ T7067] smc: ib device syz2 port 1 has no pnetid [ 246.060169][ T5803] Bluetooth: hci5: command tx timeout [ 248.088623][ T5803] Bluetooth: hci5: command tx timeout [ 249.611545][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 249.611753][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 249.619000][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 249.619194][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 249.703734][ T7051] chnl_net:caif_netlink_parms(): no params data found [ 250.199132][ T5803] Bluetooth: hci5: command tx timeout [ 252.308069][ T5803] Bluetooth: hci5: command tx timeout [ 253.893611][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 255.766246][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.766317][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.316009][ T6386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.586089][ T7172] IPv6: Can't replace route, no match found [ 264.242524][ T6386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.344185][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.344264][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.344440][ T7051] bridge_slave_0: entered allmulticast mode [ 264.373154][ T7051] bridge_slave_0: entered promiscuous mode [ 264.386329][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.386484][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.386673][ T7051] bridge_slave_1: entered allmulticast mode [ 264.421876][ T7051] bridge_slave_1: entered promiscuous mode [ 267.075441][ T7208] mmap: syz.3.358 (7208) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 268.320378][ T6386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.626652][ T7243] hugetlbfs: syz.1.364 (7243): Using mlock ulimits for SHM_HUGETLB is obsolete [ 274.697632][ T6386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.858624][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.831297][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.982894][ T7051] team0: Port device team_slave_0 added [ 277.986387][ T7051] team0: Port device team_slave_1 added [ 278.993876][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.993891][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.993915][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.192119][ T7276] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 279.192157][ T7276] CUSE: unknown device info "3ܟ,̘" [ 279.192214][ T7276] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 279.192214][ T7276] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 279.192249][ T7276] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 279.192308][ T7276] CUSE: DEVNAME unspecified [ 279.633281][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.633386][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.633409][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.803685][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.834991][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.215176][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.450270][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.964994][ T7051] hsr_slave_0: entered promiscuous mode [ 289.966354][ T7051] hsr_slave_1: entered promiscuous mode [ 289.967381][ T7051] debugfs: 'hsr0' already exists in 'hsr' [ 289.967411][ T7051] Cannot create hsr debugfs directory [ 291.011685][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.147196][ T7342] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 291.836522][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.082664][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.351547][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.381430][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.288499][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.656524][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.169206][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.355013][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.244582][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.274250][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.450130][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.454235][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.455311][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.455979][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.456841][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.358549][ T5803] Bluetooth: hci2: command tx timeout [ 307.372884][ T5807] Bluetooth: hci2: command tx timeout [ 309.448636][ T5807] Bluetooth: hci2: command tx timeout [ 311.618244][ T5807] Bluetooth: hci2: command tx timeout [ 317.267998][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 317.268017][ T37] audit: type=1804 audit(1761168763.890:104): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.421" name="/newroot/89/file1" dev="fuse" ino=1 res=1 errno=0 [ 317.330102][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.330271][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.163479][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.164896][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.166474][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.167629][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.170490][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.259977][ T5803] Bluetooth: hci6: command tx timeout [ 323.287942][ T5803] Bluetooth: hci6: command tx timeout [ 324.709664][ T7507] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 324.710295][ T7507] random: crng reseeded on system resumption [ 326.065994][ T5803] Bluetooth: hci6: command tx timeout [ 328.901007][ T5807] Bluetooth: hci6: command tx timeout [ 329.357604][ T7525] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 329.357649][ T7525] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.437'. [ 331.267335][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.456833][ T5976] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 331.608859][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.651505][ T6386] bond0 (unregistering): Released all slaves [ 331.705687][ T5976] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 331.707124][ T5976] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 331.743723][ T5976] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 331.762203][ T5976] usb 5-1: string descriptor 0 read error: -22 [ 331.762361][ T5976] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 331.762383][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.838100][ T5976] adutux 5-1:168.0: interrupt endpoints not found [ 333.572464][ T37] audit: type=1326 audit(1761168780.210:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.599936][ T37] audit: type=1326 audit(1761168780.210:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.607287][ T37] audit: type=1326 audit(1761168780.240:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.607331][ T37] audit: type=1326 audit(1761168780.240:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.607368][ T37] audit: type=1326 audit(1761168780.240:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.609842][ T37] audit: type=1326 audit(1761168780.250:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.610256][ T37] audit: type=1326 audit(1761168780.250:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.610815][ T37] audit: type=1326 audit(1761168780.250:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.617005][ T37] audit: type=1326 audit(1761168780.250:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.791215][ T37] audit: type=1326 audit(1761168780.430:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7543 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff4efc9 code=0x7ffc0000 [ 333.843722][ T7544] 9pnet_fd: Insufficient options for proto=fd [ 335.495944][ T5791] usb 5-1: USB disconnect, device number 8 [ 337.731901][ T7574] overlayfs: failed to resolve './file0': -2 [ 342.799821][ T5807] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 343.311086][ T7627] netlink: 'syz.4.457': attribute type 4 has an invalid length. [ 343.646692][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 346.689019][ T7654] random: crng reseeded on system resumption [ 347.098094][ T6386] hsr_slave_0: left promiscuous mode [ 347.118042][ T6386] hsr_slave_1: left promiscuous mode [ 347.119062][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.119168][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.072249][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.072277][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.685530][ T6386] veth1_macvtap: left promiscuous mode [ 349.686835][ T6386] veth0_macvtap: left promiscuous mode [ 349.687212][ T6386] veth1_vlan: left promiscuous mode [ 349.687599][ T6386] veth0_vlan: left promiscuous mode [ 355.634225][ T23] ================================================================== [ 355.634242][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 355.634276][ T23] Read of size 8 at addr ffffc9000d2c1090 by task irq_work/0/23 [ 355.634291][ T23] [ 355.634313][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 355.634333][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.634346][ T23] Call Trace: [ 355.634357][ T23] [ 355.634367][ T23] dump_stack_lvl+0x189/0x250 [ 355.634391][ T23] ? run_irq_workd+0x116/0x190 [ 355.634412][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.634434][ T23] ? __pfx__printk+0x10/0x10 [ 355.634454][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 355.634477][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 355.634503][ T23] print_report+0xca/0x240 [ 355.634523][ T23] ? run_irq_workd+0x116/0x190 [ 355.634543][ T23] kasan_report+0x118/0x150 [ 355.634566][ T23] ? run_irq_workd+0x116/0x190 [ 355.634590][ T23] run_irq_workd+0x116/0x190 [ 355.634611][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 355.634631][ T23] ? schedule+0x91/0x360 [ 355.634651][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 355.634672][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 355.634691][ T23] smpboot_thread_fn+0x542/0xa60 [ 355.634711][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 355.634734][ T23] kthread+0x711/0x8a0 [ 355.634757][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 355.634784][ T23] ? __pfx_kthread+0x10/0x10 [ 355.634804][ T23] ? rt_spin_unlock+0x150/0x200 [ 355.634823][ T23] ? rt_spin_unlock+0x161/0x200 [ 355.634839][ T23] ? __pfx_kthread+0x10/0x10 [ 355.634860][ T23] ret_from_fork+0x4bc/0x870 [ 355.634881][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 355.634903][ T23] ? __switch_to_asm+0x39/0x70 [ 355.634920][ T23] ? __switch_to_asm+0x33/0x70 [ 355.634935][ T23] ? __pfx_kthread+0x10/0x10 [ 355.634957][ T23] ret_from_fork_asm+0x1a/0x30 [ 355.634981][ T23] [ 355.634988][ T23] [ 355.634992][ T23] The buggy address belongs to a vmalloc virtual mapping [ 355.635020][ T23] Memory state around the buggy address: [ 355.635029][ T23] ffffc9000d2c0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 355.635040][ T23] ffffc9000d2c1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 355.635051][ T23] >ffffc9000d2c1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 355.635063][ T23] ^ [ 355.635072][ T23] ffffc9000d2c1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 355.635083][ T23] ffffc9000d2c1180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 355.635091][ T23] ================================================================== [ 355.635141][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 355.635155][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 355.635175][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.635184][ T23] Call Trace: [ 355.635191][ T23] [ 355.635197][ T23] dump_stack_lvl+0x99/0x250 [ 355.635221][ T23] ? __asan_memcpy+0x40/0x70 [ 355.635239][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.635262][ T23] ? __pfx__printk+0x10/0x10 [ 355.635286][ T23] vpanic+0x237/0x6d0 [ 355.635303][ T23] ? __pfx_vpanic+0x10/0x10 [ 355.635317][ T23] ? preempt_schedule+0xae/0xc0 [ 355.635335][ T23] ? __pfx_preempt_schedule+0x10/0x10 [ 355.635358][ T23] panic+0xb9/0xc0 [ 355.635373][ T23] ? __pfx_panic+0x10/0x10 [ 355.635390][ T23] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 355.635414][ T23] ? run_irq_workd+0x116/0x190 [ 355.635434][ T23] check_panic_on_warn+0x89/0xb0 [ 355.635451][ T23] ? run_irq_workd+0x116/0x190 [ 355.635471][ T23] end_report+0x78/0x160 [ 355.635492][ T23] kasan_report+0x129/0x150 [ 355.635514][ T23] ? run_irq_workd+0x116/0x190 [ 355.635539][ T23] run_irq_workd+0x116/0x190 [ 355.635564][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 355.635585][ T23] ? schedule+0x91/0x360 [ 355.635604][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 355.635624][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 355.635643][ T23] smpboot_thread_fn+0x542/0xa60 [ 355.635663][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 355.635686][ T23] kthread+0x711/0x8a0 [ 355.635709][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 355.635750][ T23] ? __pfx_kthread+0x10/0x10 [ 355.635777][ T23] ? rt_spin_unlock+0x150/0x200 [ 355.635796][ T23] ? rt_spin_unlock+0x161/0x200 [ 355.635811][ T23] ? __pfx_kthread+0x10/0x10 [ 355.635833][ T23] ret_from_fork+0x4bc/0x870 [ 355.635852][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 355.635874][ T23] ? __switch_to_asm+0x39/0x70 [ 355.635890][ T23] ? __switch_to_asm+0x33/0x70 [ 355.635906][ T23] ? __pfx_kthread+0x10/0x10 [ 355.635928][ T23] ret_from_fork_asm+0x1a/0x30 [ 355.635952][ T23] [ 355.636103][ T23] Kernel Offset: disabled